last executing test programs: 3.800439015s ago: executing program 3 (id=56): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xfffffffd, 0x7}]}}}}}}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) pipe(0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/170, 0xaa}, {0x0}], 0x2}, 0x6}], 0x1, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', r7, 0x2f, 0x4, 0x42, 0x0, 0x4, @mcast2, @private1, 0x10, 0x20, 0xf, 0x76a}}) 3.528662173s ago: executing program 3 (id=58): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000074009eab221fd1c000000012cd36f4d84d403850000006d00000095d12af8423ec97632f5bcb31df7aeddb64db95ba10357d6e4ed05af306b7e4bbcab46d643a682d6e51626c48e5432fea2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) nanosleep(&(0x7f0000000340)={0x0, 0x3938700}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) close(r3) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) (async) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) (async) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x8000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54000000fa53b723dd28f64ef83cd0bb37860b4f9db79612b246c33ead90548e6195f28fd1f7c6d3afa6c77471434b37c0607806ec9b6756095cebf59a86fd5e4f2a55298520a570ed7e64861bd0257997b145c3e215281243e630cc30a6eaa70868c206c6622b337eb1423969c208b202692a9e5f0b0c1ac740aa3a76645fb93e90a9dfd70c4acedb003b029a71e5932fa77081030850b7f7410c2ee42763307e27ef0dba1f12c6beebec1607b03f06879f4f6604256f687cdaf5db3ec124ca2eb13a2d4c0b", @ANYRES16=r9, @ANYBLOB="010027bd7000040000000500000008000c00a80a000014000800767863616e31000000000000000000000c001000ff0700000000000008000b00040000000800090002000000060001000b000000"], 0x54}}, 0x0) ppoll(&(0x7f00000003c0)=[{r4, 0x80a0}, {r1, 0x80}, {r6, 0x2180}, {0xffffffffffffffff, 0x2}, {r5, 0x2390}, {r4, 0x9008}, {0xffffffffffffffff, 0x2610}, {r1, 0x408a}], 0x8, &(0x7f0000000440), &(0x7f0000000480)={[0x8]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 3.356742692s ago: executing program 3 (id=61): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x891b, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x5) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x18}, 0x18) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r10, 0x3, {0x0, 0x0, 0x4}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r9, &(0x7f00000004c0)={&(0x7f0000000380)={0x1d, r11, 0x2, {0x0, 0x0, 0x3}, 0xfe}, 0x18, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20040908}, 0x4000000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x40000, {0x0, 0x0, 0x4c, 0x0, 0x0, 0x74b01}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40801}, 0x300) connect$bt_rfcomm(r6, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) r12 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@dellinkprop={0x20, 0x6d, 0x300, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000007c0)={0x0, 'macvtap0\x00', {0x3}}) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) connect$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r3, 0x711, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2001}, 0x4004094) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 3.305068443s ago: executing program 2 (id=63): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000020000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ed9c739050d0c1445ef879b37299", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000020002001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x4000) 2.643796655s ago: executing program 4 (id=67): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@delsa={0x28, 0x11, 0x1, 0x70bd26, 0x25dfdbfb, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0xa, 0x19}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x8004) 2.460766289s ago: executing program 4 (id=69): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="930d", 0x2}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x6, @private2, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='J', 0x1}], 0x1}}], 0x2, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x231, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x6b, 0x11, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x40, r6, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x4}, {0x18, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x41}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.906273863s ago: executing program 2 (id=71): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.780690936s ago: executing program 3 (id=72): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) recvmsg(r3, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7e}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14}}, 0x3c}}, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="02180400170000000000000000000000030005000000000002000000e0000001000000000000000008001200000000000000000000000008060000000000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000000030006000000000002000002ffffffff000000000000000007001900000000000a"], 0xb8}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1.745849112s ago: executing program 1 (id=73): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) socket(0xa, 0x2, 0x0) (async) sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="198b3dcb7aa13fa390c61e645d2f462e472819764e8eaee868788e84e216d66051dd607d9aa4d8ee5038219850042548338200289ce164a86730637ca3207e453624b41d9c5ae6d26bec0e959d3523d8099455ad23695e2feec0a9bcfaa23a6ec17d0abf0ce7ce0e"}, {&(0x7f0000000100)="bb33499928c9c29a09299e63f272fba468b6690b32480bed00a60969e89b4900333927562c0403d1d3fbd201efa43c8832ed090f40a338d79b562df98ae6d0f683fee0217f979101597c56852e3f84029c0ab15cd3649f25df2bc864c970c12ad82a2ce273fe7c3f2dcf0984062503cfdb3f"}, {&(0x7f0000000300)="9d792258181cf31cec7eae85209e6c38d88a44898ba0abc4c0c8c510a3bca1669e510984c6bef066d26b1774e9a162f0de1449785824119444d142038349a1ad34f7b345a417ea39ee2e20a17ca29a2400c5bc9002e052c5ef153603fc3c77a1bf2640efac6c38af8eafd31466fd474c9506357e1459d2f24d86e840"}, {&(0x7f0000000000)="0d70f576ac9553e911e27f2aa0a324c3f51e4ef9e773e367c1d7daf0139b05e4b0ac8cbcae88d6f49d071e87539a7104fc"}, {&(0x7f0000000380)="c852a063df34cec31ddfa7e7b17d0c813dd209c2453ec412dcc0d53bfc8567076f14a445a5b19264532cd2f41c205f33139219bc52efea8d97e82460b9dc0063e44c42983738bddc3f00b0704d0d7e14cfe0b823776aac79f6fd215b14d4de2fa86b864bd4efe657cc60a5396b7d21375a7766a2622262cc365ad369f6f4f9e033c2a71371b900f2e48c410f699c572dea1558c715bbf03bcce69d7f78"}]}}], 0x1, 0x0) 1.692527345s ago: executing program 2 (id=74): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fecbdf250a00000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES64, @ANYBLOB="01"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x8001}, 0x8) 1.678021861s ago: executing program 4 (id=75): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x100000000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x81}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}}, 0x4) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xe7, &(0x7f0000000800)=""/231, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x40010100) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1a8, 0x5c, 0x160, 0x0, 0x3e0, 0x2b8, 0x228, 0x25a, 0x2b8, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0xffffff00, 0xffffffff], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0x160, 0x1a8, 0x52020000, {0x0, 0x6802000000000000}, [@common=@srh1={{0x90}, {0xff, 0x84, 0x3, 0x1, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [0xffffff00, 0xffffff, 0x0, 0xffffff00], [0xff, 0xff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xff], 0x1000, 0x4449}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [0x0, 0x0, 0xff000000], [0xff], 'bond_slave_0\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000027c0)={0x14, r8, 0x731, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x80) 1.637266806s ago: executing program 0 (id=76): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x101, 0x1000}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x18, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@generic={0x9, 0xf, 0x4, 0x7f, 0xfffffff9}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x1000, &(0x7f00000010c0)=""/4096, 0x41100, 0x8, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xb, 0x40, 0xefc}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[r3, r8, r3, r9, r3, 0xffffffffffffffff], &(0x7f0000000340)=[{0x0, 0x1, 0x9, 0x4}, {0x4, 0x3, 0x6, 0xa}, {0x4, 0x1, 0xf, 0x7}, {0x1, 0x3, 0x6, 0x9}], 0x10, 0xff, @void, @value}, 0x94) 1.520670939s ago: executing program 1 (id=77): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000003c0)='cpuacct.usage\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b5030000060000000000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket(0x2a, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) listen(0xffffffffffffffff, 0xfff) recvmmsg(r4, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/138, 0x8a}], 0x1}, 0x805}], 0x1, 0x10000, 0x0) socket$inet6(0xa, 0x80000, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x21}}) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0xf) socket$inet_mptcp(0x2, 0x1, 0x106) 1.483805526s ago: executing program 2 (id=78): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.262209826s ago: executing program 0 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0) 1.212797387s ago: executing program 2 (id=80): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x18, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (fail_nth: 1) 852.825707ms ago: executing program 0 (id=81): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000020000000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ed9c739050d0c1445ef879b37299", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000020002001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x4000) 603.699687ms ago: executing program 2 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7c, 0x20, 0x8}}, @val={0x25, 0x3, {0x0, 0x2, 0x4}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x3d, 0xab, 0x5}}, @val={0x2d, 0x1a, {0x8, 0x3, 0x1, 0x0, {0x5, 0x1009, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0x4, 0x5}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x21}}, @val={0x76, 0x6, {0x0, 0x9, 0x3d, 0x1}}}, 0x64) 569.313258ms ago: executing program 3 (id=83): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0xc, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x12, 0x0, 0x0, 0x400, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401e45a6c29", 0xc}], 0x1, &(0x7f00000006c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0xff}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x1d}}}], 0x30}}], 0x1, 0x4000084) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x6, '\x00', 0x0, r0, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x8918, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa000000000000711051000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 523.784935ms ago: executing program 1 (id=84): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000000}, {}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}}, 0x0) 522.947379ms ago: executing program 4 (id=85): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFO(r5, 0x89ed, 0xfffffffffffffffe) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0xb, 0xff}, @broadcast, @multicast1, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000844}, 0x4000800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x4000, 0xd8e0}) 421.737542ms ago: executing program 1 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='00'], 0x30}, 0x1, 0x0, 0x0, 0x18004}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xe59}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb2, 0x2, 0x83ba, 0x22dc, 0x6, 0x6}, {0x3, 0x2, 0x5, 0x1, 0x40, 0x3}, 0xff, 0xeb1, 0xa19}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc90d8b5559ec0195}, @TCA_TBF_RATE64={0xc, 0x4, 0xbae8efee76372151}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 269.70129ms ago: executing program 3 (id=87): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="930d", 0x2}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x6, @private2, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='J', 0x1}], 0x1}}], 0x2, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x231, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x6b, 0x11, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e001400028008000800"], 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x40, r6, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x4}, {0x18, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x41}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 268.397204ms ago: executing program 0 (id=88): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x40, 0x0, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x43}, 0x1, 0x0, 0x0, 0xc0}, 0xd8ac71b1df50e2c8) 237.758053ms ago: executing program 4 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) r4 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004440}, 0x2000c001) sendmsg$IPSET_CMD_TEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0xfffffff3}, 0x1, 0x0, 0x0, 0xc000}, 0x48880) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048004}, 0x8004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000f70000000000bb08000100"], 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r8, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004084) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0) 164.779796ms ago: executing program 1 (id=90): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}}, 0x0) 135.545176ms ago: executing program 0 (id=91): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x40, r3, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x18, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = accept(r1, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x800, 0x1fc}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000140)={r6, 0x1}, 0x8) 75.473139ms ago: executing program 4 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0) 656.618µs ago: executing program 0 (id=93): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) recvmsg(r3, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7e}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14}}, 0x3c}}, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="02180400170000000000000000000000030005000000000002000000e0000001000000000000000008001200000000000000000000000008060000000000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000000030006000000000002000002ffffffff000000000000000007001900000000000a"], 0xb8}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 0s ago: executing program 1 (id=94): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x18, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 73.113798][ T5821] cgroup: Unknown subsys name 'net' [ 73.267127][ T5821] cgroup: Unknown subsys name 'cpuset' [ 73.276376][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.732691][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.256309][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.264057][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.271527][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.280590][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.288042][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.295682][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.303934][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.311425][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.313927][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.319558][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.329349][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.335042][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.344596][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.353475][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.353698][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.362175][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.375083][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.375602][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.382266][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.391016][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.403883][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.404174][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.419230][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.419348][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.439369][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.965838][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 78.091917][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 78.126729][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 78.260669][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 78.387778][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.395719][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.402925][ T5833] bridge_slave_0: entered allmulticast mode [ 78.410287][ T5833] bridge_slave_0: entered promiscuous mode [ 78.422930][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.430116][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.437302][ T5835] bridge_slave_0: entered allmulticast mode [ 78.444553][ T5835] bridge_slave_0: entered promiscuous mode [ 78.457720][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 78.478554][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.485929][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.493046][ T5833] bridge_slave_1: entered allmulticast mode [ 78.500446][ T5833] bridge_slave_1: entered promiscuous mode [ 78.512871][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.520114][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.527495][ T5835] bridge_slave_1: entered allmulticast mode [ 78.535844][ T5835] bridge_slave_1: entered promiscuous mode [ 78.647812][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.655494][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.662641][ T5837] bridge_slave_0: entered allmulticast mode [ 78.670722][ T5837] bridge_slave_0: entered promiscuous mode [ 78.701663][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.709164][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.716593][ T5832] bridge_slave_0: entered allmulticast mode [ 78.723770][ T5832] bridge_slave_0: entered promiscuous mode [ 78.733994][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.746605][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.754061][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.761189][ T5837] bridge_slave_1: entered allmulticast mode [ 78.769051][ T5837] bridge_slave_1: entered promiscuous mode [ 78.777789][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.790231][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.805232][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.812421][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.819994][ T5832] bridge_slave_1: entered allmulticast mode [ 78.827878][ T5832] bridge_slave_1: entered promiscuous mode [ 78.836515][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.952955][ T5833] team0: Port device team_slave_0 added [ 78.961575][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.975739][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.987781][ T5835] team0: Port device team_slave_0 added [ 79.008054][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.019421][ T5833] team0: Port device team_slave_1 added [ 79.039445][ T5835] team0: Port device team_slave_1 added [ 79.061117][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.107463][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.115295][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.122418][ T5831] bridge_slave_0: entered allmulticast mode [ 79.130421][ T5831] bridge_slave_0: entered promiscuous mode [ 79.185091][ T5837] team0: Port device team_slave_0 added [ 79.205633][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.212817][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.220732][ T5831] bridge_slave_1: entered allmulticast mode [ 79.231812][ T5831] bridge_slave_1: entered promiscuous mode [ 79.253112][ T5832] team0: Port device team_slave_0 added [ 79.259706][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.267060][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.293843][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.306837][ T5837] team0: Port device team_slave_1 added [ 79.313599][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.320546][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.346716][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.359340][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.366344][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.392302][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.404658][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.411607][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.437959][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.454117][ T55] Bluetooth: hci4: command tx timeout [ 79.454223][ T5847] Bluetooth: hci0: command tx timeout [ 79.459585][ T5840] Bluetooth: hci2: command tx timeout [ 79.465281][ T5851] Bluetooth: hci1: command tx timeout [ 79.481655][ T5832] team0: Port device team_slave_1 added [ 79.527783][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.534285][ T5851] Bluetooth: hci3: command tx timeout [ 79.541034][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.576608][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.583626][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.609971][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.621588][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.629133][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.656478][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.668790][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.675793][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.701814][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.741958][ T5831] team0: Port device team_slave_0 added [ 79.748796][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.756213][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.782784][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.854912][ T5831] team0: Port device team_slave_1 added [ 79.902355][ T5835] hsr_slave_0: entered promiscuous mode [ 79.911259][ T5835] hsr_slave_1: entered promiscuous mode [ 79.934884][ T5833] hsr_slave_0: entered promiscuous mode [ 79.941251][ T5833] hsr_slave_1: entered promiscuous mode [ 79.947950][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.956013][ T5833] Cannot create hsr debugfs directory [ 79.983939][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.991053][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.017429][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.029777][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.037104][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.063763][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.187523][ T5837] hsr_slave_0: entered promiscuous mode [ 80.194009][ T5837] hsr_slave_1: entered promiscuous mode [ 80.200269][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.208312][ T5837] Cannot create hsr debugfs directory [ 80.224541][ T5832] hsr_slave_0: entered promiscuous mode [ 80.230822][ T5832] hsr_slave_1: entered promiscuous mode [ 80.237680][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.245573][ T5832] Cannot create hsr debugfs directory [ 80.348990][ T5831] hsr_slave_0: entered promiscuous mode [ 80.355922][ T5831] hsr_slave_1: entered promiscuous mode [ 80.362090][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.369729][ T5831] Cannot create hsr debugfs directory [ 80.725459][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.764120][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.779566][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.797330][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.844047][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.857509][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.877871][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.898649][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.988466][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.000387][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.020023][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.047560][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.130855][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.147148][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.158956][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.168705][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.182124][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.252183][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.298740][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.317607][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.328674][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.339673][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.350971][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.374227][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.399659][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.406832][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.418914][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.426024][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.457779][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.464952][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.475195][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.482325][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.535026][ T5840] Bluetooth: hci4: command tx timeout [ 81.540524][ T5851] Bluetooth: hci2: command tx timeout [ 81.550606][ T55] Bluetooth: hci0: command tx timeout [ 81.557008][ T5840] Bluetooth: hci1: command tx timeout [ 81.609028][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.620894][ T5851] Bluetooth: hci3: command tx timeout [ 81.726075][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.738405][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.812304][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.819493][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.848420][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.891908][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.899155][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.971905][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.034255][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.049721][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.056885][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.137949][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.145138][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.208937][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.261511][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.268734][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.283001][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.315948][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.340049][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.347379][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.450185][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.600488][ T5832] veth0_vlan: entered promiscuous mode [ 82.637129][ T5835] veth0_vlan: entered promiscuous mode [ 82.653093][ T5832] veth1_vlan: entered promiscuous mode [ 82.695559][ T5835] veth1_vlan: entered promiscuous mode [ 82.750513][ T5835] veth0_macvtap: entered promiscuous mode [ 82.780330][ T5835] veth1_macvtap: entered promiscuous mode [ 82.798864][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.885548][ T5833] veth0_vlan: entered promiscuous mode [ 82.901609][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.926306][ T5833] veth1_vlan: entered promiscuous mode [ 82.933854][ T5832] veth0_macvtap: entered promiscuous mode [ 82.942031][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.961469][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.972821][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.982704][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.992193][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.014617][ T5832] veth1_macvtap: entered promiscuous mode [ 83.069177][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.080080][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.091439][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.102097][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.115563][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.126513][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.146104][ T5837] veth0_vlan: entered promiscuous mode [ 83.165124][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.188976][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.199851][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.208844][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.218343][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.269126][ T5833] veth0_macvtap: entered promiscuous mode [ 83.279861][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.289340][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.309969][ T5833] veth1_macvtap: entered promiscuous mode [ 83.341060][ T5837] veth1_vlan: entered promiscuous mode [ 83.407128][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.414733][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.425584][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.434404][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.444536][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.455610][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.466720][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.488618][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.499224][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.531262][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.542955][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.553178][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.569895][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.585087][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.596315][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.605108][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.618453][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.623359][ T5851] Bluetooth: hci2: command tx timeout [ 83.627480][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.632628][ T5851] Bluetooth: hci0: command tx timeout [ 83.648970][ T55] Bluetooth: hci1: command tx timeout [ 83.654479][ T55] Bluetooth: hci4: command tx timeout [ 83.668084][ T5831] veth0_vlan: entered promiscuous mode [ 83.668845][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.680983][ T5831] veth1_vlan: entered promiscuous mode [ 83.695925][ T5840] Bluetooth: hci3: command tx timeout [ 83.728927][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.742722][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.792635][ T5837] veth0_macvtap: entered promiscuous mode [ 83.838463][ T5837] veth1_macvtap: entered promiscuous mode [ 83.938547][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.951311][ T5924] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3'. [ 83.974595][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.003263][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.026626][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.038224][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.051795][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.065525][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.073821][ T5929] netlink: 'syz.3.6': attribute type 22 has an invalid length. [ 84.078578][ T5831] veth0_macvtap: entered promiscuous mode [ 84.367669][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.380741][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.423923][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.462178][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.503313][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.533306][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.554164][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.584190][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.609512][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.657762][ T5831] veth1_macvtap: entered promiscuous mode [ 84.708104][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.719442][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.733334][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.742897][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.786241][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.790647][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.813131][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.863355][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.887434][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.909532][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.929494][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.944916][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.957736][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.979416][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.027471][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.031429][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.046942][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 85.059467][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.076127][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.083396][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.098395][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.108469][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.129316][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.141112][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.158222][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.185499][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.265940][ T5967] pim6reg: entered allmulticast mode [ 85.274957][ T5970] wg1: entered promiscuous mode [ 85.280020][ T5970] wg1: entered allmulticast mode [ 85.304391][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.313152][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.349990][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.363268][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.553040][ T5982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13'. [ 85.653146][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.671484][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 85.682881][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.693854][ T5982] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13'. [ 85.694691][ T5840] Bluetooth: hci0: command tx timeout [ 85.708554][ T5851] Bluetooth: hci4: command tx timeout [ 85.714545][ T5851] Bluetooth: hci1: command tx timeout [ 85.717216][ T55] Bluetooth: hci2: command tx timeout [ 85.725844][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 85.736393][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 85.784464][ T55] Bluetooth: hci3: command tx timeout [ 85.845785][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.871130][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.939444][ T5988] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5'. [ 85.959848][ T5991] bond0: entered promiscuous mode [ 85.968702][ T5991] bond_slave_0: entered promiscuous mode [ 85.975431][ T5991] bond_slave_1: entered promiscuous mode [ 85.982675][ T5991] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.997937][ T5991] bond0: left promiscuous mode [ 86.006034][ T5999] Zero length message leads to an empty skb [ 86.012976][ T5991] bond_slave_0: left promiscuous mode [ 86.023751][ T5991] bond_slave_1: left promiscuous mode [ 86.109640][ T5999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.132934][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.151186][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.269388][ T6008] Bluetooth: MGMT ver 1.23 [ 86.302040][ T5994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.362065][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.383423][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.496059][ T6017] ip6t_srh: unknown srh invflags 4449 [ 86.584246][ T9] cfg80211: failed to load regulatory.db [ 86.798574][ T6021] bond0: entered promiscuous mode [ 86.813905][ T6021] bond_slave_0: entered promiscuous mode [ 86.820073][ T6021] bond_slave_1: entered promiscuous mode [ 86.832548][ T6021] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 86.846970][ T6021] bond0: left promiscuous mode [ 86.852792][ T6021] bond_slave_0: left promiscuous mode [ 86.862518][ T6021] bond_slave_1: left promiscuous mode [ 86.936893][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.959877][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 87.683215][ T6056] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 87.856957][ T6056] netlink: 'syz.3.25': attribute type 8 has an invalid length. [ 87.891960][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 87.985168][ T6056] syz.3.25 uses obsolete (PF_INET,SOCK_PACKET) [ 88.292894][ T6088] ip6t_srh: unknown srh invflags 4449 [ 89.004379][ T6112] pimreg: entered allmulticast mode [ 89.154427][ T6112] __nla_validate_parse: 1 callbacks suppressed [ 89.154445][ T6112] netlink: 44 bytes leftover after parsing attributes in process `syz.4.42'. [ 89.260680][ T6124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.315714][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.47'. [ 89.329423][ T6124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.344627][ T6124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.405786][ T6131] bond0: entered promiscuous mode [ 89.410974][ T6131] bond_slave_0: entered promiscuous mode [ 89.418998][ T6131] bond_slave_1: entered promiscuous mode [ 89.425977][ T6131] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 89.435353][ T6131] bond0: left promiscuous mode [ 89.440152][ T6131] bond_slave_0: left promiscuous mode [ 89.448526][ T6131] bond_slave_1: left promiscuous mode [ 89.831716][ T6145] ip6t_srh: unknown srh invflags 4449 [ 90.500847][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.508909][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.588663][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 90.627116][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'. [ 90.769571][ T6167] wg1: left promiscuous mode [ 90.797141][ T6167] wg1: left allmulticast mode [ 90.944034][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.006953][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.178738][ T6167] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.203354][ T6167] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.228661][ T6167] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.237845][ T6167] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.379539][ T6167] syz.3.61 (6167) used greatest stack depth: 20200 bytes left [ 91.438781][ T6172] bond0: entered promiscuous mode [ 91.454492][ T6172] bond_slave_0: entered promiscuous mode [ 91.476680][ T6172] bond_slave_1: entered promiscuous mode [ 91.484409][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'. [ 91.504132][ T6172] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.539068][ T6172] bond0: left promiscuous mode [ 91.553227][ T6172] bond_slave_0: left promiscuous mode [ 91.562446][ T6172] bond_slave_1: left promiscuous mode [ 92.018773][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 92.105281][ T6227] ip6t_srh: unknown srh invflags 4449 [ 92.413998][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 92.475501][ T6239] FAULT_INJECTION: forcing a failure. [ 92.475501][ T6239] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.553342][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: syz.2.80 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 92.553369][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.553388][ T6239] Call Trace: [ 92.553396][ T6239] [ 92.553404][ T6239] dump_stack_lvl+0x189/0x250 [ 92.553440][ T6239] ? __lock_acquire+0xaac/0xd20 [ 92.553469][ T6239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.553495][ T6239] ? __pfx__printk+0x10/0x10 [ 92.553514][ T6239] ? __might_fault+0xb0/0x130 [ 92.553548][ T6239] should_fail_ex+0x414/0x560 [ 92.553581][ T6239] _copy_from_user+0x2d/0xb0 [ 92.553606][ T6239] ___sys_sendmsg+0x158/0x2a0 [ 92.553628][ T6239] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.553681][ T6239] ? __fget_files+0x2a/0x420 [ 92.553703][ T6239] ? __fget_files+0x3a0/0x420 [ 92.553736][ T6239] __x64_sys_sendmsg+0x19b/0x260 [ 92.553758][ T6239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 92.553793][ T6239] ? do_syscall_64+0xba/0x210 [ 92.553821][ T6239] do_syscall_64+0xf6/0x210 [ 92.553849][ T6239] ? clear_bhb_loop+0x45/0xa0 [ 92.553872][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.553889][ T6239] RIP: 0033:0x7f965d78e969 [ 92.553910][ T6239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.553925][ T6239] RSP: 002b:00007f965e622038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.553943][ T6239] RAX: ffffffffffffffda RBX: 00007f965d9b5fa0 RCX: 00007f965d78e969 [ 92.553957][ T6239] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 92.553968][ T6239] RBP: 00007f965e622090 R08: 0000000000000000 R09: 0000000000000000 [ 92.553979][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.553989][ T6239] R13: 0000000000000000 R14: 00007f965d9b5fa0 R15: 00007ffc45315f58 [ 92.554018][ T6239] [ 93.020621][ T6242] bond0: entered promiscuous mode [ 93.025761][ T6242] bond_slave_0: entered promiscuous mode [ 93.031618][ T6242] bond_slave_1: entered promiscuous mode [ 93.038184][ T6242] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 93.072658][ T6242] bond0: left promiscuous mode [ 93.078142][ T6242] bond_slave_0: left promiscuous mode [ 93.083862][ T6242] bond_slave_1: left promiscuous mode [ 93.216185][ T6245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.299469][ T6245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.327182][ T6245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.515711][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.87'. [ 93.635983][ T9] ------------[ cut here ]------------ [ 93.641626][ T9] WARNING: CPU: 0 PID: 9 at net/mac80211/mlme.c:1124 ieee80211_prep_channel+0x490c/0x60f0 [ 93.651710][ T9] Modules linked in: [ 93.655797][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 93.667671][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.677806][ T9] Workqueue: events cfg80211_conn_work [ 93.683401][ T9] RIP: 0010:ieee80211_prep_channel+0x490c/0x60f0 [ 93.689754][ T9] Code: c6 05 d1 65 80 04 01 48 c7 c7 d7 11 8d 8c be e8 03 00 00 48 c7 c2 40 13 8d 8c e8 2f 3a b5 f6 e9 17 ba ff ff e8 d5 c0 d6 f6 90 <0f> 0b 90 48 8b 7c 24 48 e8 b7 f3 2d f7 48 c7 44 24 48 ea ff ff ff [ 93.709549][ T9] RSP: 0018:ffffc900000e6c00 EFLAGS: 00010293 [ 93.715703][ T9] RAX: ffffffff8ae8fcab RBX: 0000000000000000 RCX: ffff88801c6c0000 [ 93.724447][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.732449][ T9] RBP: ffffc900000e6fa8 R08: ffff88801c6c0000 R09: 000000000000000e [ 93.741006][ T9] R10: 000000000000000d R11: 0000000000000000 R12: ffffc900000e6eb0 [ 93.749681][ T9] R13: dffffc0000000000 R14: 1ffff110065f5ceb R15: ffffc900000e6eb0 [ 93.758143][ T9] FS: 0000000000000000(0000) GS:ffff8881260b2000(0000) knlGS:0000000000000000 [ 93.767418][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.774126][ T9] CR2: 00007fd3c777ed38 CR3: 0000000033470000 CR4: 00000000003526f0 [ 93.782123][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.790166][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.798196][ T9] Call Trace: [ 93.801504][ T9] [ 93.804527][ T9] ? ieee80211_prep_channel+0x202/0x60f0 [ 93.810211][ T9] ? __lock_acquire+0xaac/0xd20 [ 93.815180][ T9] ? __pfx_ieee80211_prep_channel+0x10/0x10 [ 93.821562][ T9] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 93.827307][ T9] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 93.832915][ T9] ? ieee80211_prep_connection+0x50f/0x1600 [ 93.838902][ T9] ieee80211_prep_connection+0xeb9/0x1600 [ 93.844775][ T9] ieee80211_mgd_auth+0xee3/0x1770 [ 93.849938][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.855248][ T9] ? __pfx_ieee80211_mgd_auth+0x10/0x10 [ 93.860838][ T9] ? rcu_is_watching+0x15/0xb0 [ 93.865675][ T9] cfg80211_mlme_auth+0x62f/0x9c0 [ 93.870741][ T9] cfg80211_conn_do_work+0x501/0xd10 [ 93.876152][ T9] ? __pfx_cfg80211_conn_do_work+0x10/0x10 [ 93.882071][ T9] ? kvm_sched_clock_read+0x11/0x20 [ 93.887332][ T9] ? psi_task_change+0xe5/0x250 [ 93.892200][ T9] ? cfg80211_conn_work+0x298/0x440 [ 93.897470][ T9] cfg80211_conn_work+0x2c0/0x440 [ 93.902530][ T9] ? __pfx_cfg80211_conn_work+0x10/0x10 [ 93.908146][ T9] ? arch_scale_cpu_capacity+0x18/0xb0 [ 93.913733][ T9] ? kvm_sched_clock_read+0x11/0x20 [ 93.918956][ T9] ? sched_clock+0x3f/0x60 [ 93.923965][ T9] ? sched_clock_cpu+0x74/0x430 [ 93.928858][ T9] ? psi_task_switch+0x39e/0x6d0 [ 93.934061][ T9] ? __lock_acquire+0xaac/0xd20 [ 93.938957][ T9] ? do_raw_spin_lock+0x121/0x290 [ 93.944071][ T9] ? look_up_lock_class+0x74/0x170 [ 93.949212][ T9] ? register_lock_class+0x51/0x320 [ 93.954774][ T9] ? __lock_acquire+0xaac/0xd20 [ 93.959667][ T9] ? process_scheduled_works+0x9ec/0x17a0 [ 93.965495][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.970741][ T9] ? process_scheduled_works+0x9ec/0x17a0 [ 93.976536][ T9] ? process_scheduled_works+0x9ec/0x17a0 [ 93.982298][ T9] process_scheduled_works+0xadb/0x17a0 [ 93.987974][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 93.994049][ T9] worker_thread+0x8a0/0xda0 [ 93.998666][ T9] kthread+0x70e/0x8a0 [ 94.002738][ T9] ? __pfx_worker_thread+0x10/0x10 [ 94.007909][ T9] ? __pfx_kthread+0x10/0x10 [ 94.012512][ T9] ? __pfx_kthread+0x10/0x10 [ 94.017208][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.022430][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.028134][ T9] ? __pfx_kthread+0x10/0x10 [ 94.032754][ T9] ret_from_fork+0x4b/0x80 [ 94.037397][ T9] ? __pfx_kthread+0x10/0x10 [ 94.042008][ T9] ret_from_fork_asm+0x1a/0x30 [ 94.046838][ T9] [ 94.049875][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.057161][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 94.068977][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.079079][ T9] Workqueue: events cfg80211_conn_work [ 94.084572][ T9] Call Trace: [ 94.087869][ T9] [ 94.090818][ T9] dump_stack_lvl+0x99/0x250 [ 94.095469][ T9] ? __asan_memcpy+0x40/0x70 [ 94.100096][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.105328][ T9] ? __pfx__printk+0x10/0x10 [ 94.109962][ T9] panic+0x2db/0x790 [ 94.113894][ T9] ? __pfx_panic+0x10/0x10 [ 94.118314][ T9] ? show_trace_log_lvl+0x4fb/0x550 [ 94.123527][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 94.128463][ T9] __warn+0x31b/0x4b0 [ 94.132450][ T9] ? ieee80211_prep_channel+0x490c/0x60f0 [ 94.138166][ T9] ? ieee80211_prep_channel+0x490c/0x60f0 [ 94.143881][ T9] report_bug+0x2be/0x4f0 [ 94.148216][ T9] ? ieee80211_prep_channel+0x490c/0x60f0 [ 94.153956][ T9] ? ieee80211_prep_channel+0x490c/0x60f0 [ 94.159678][ T9] ? ieee80211_prep_channel+0x490e/0x60f0 [ 94.165413][ T9] handle_bug+0x84/0x160 [ 94.169681][ T9] exc_invalid_op+0x1a/0x50 [ 94.174201][ T9] asm_exc_invalid_op+0x1a/0x20 [ 94.179061][ T9] RIP: 0010:ieee80211_prep_channel+0x490c/0x60f0 [ 94.185390][ T9] Code: c6 05 d1 65 80 04 01 48 c7 c7 d7 11 8d 8c be e8 03 00 00 48 c7 c2 40 13 8d 8c e8 2f 3a b5 f6 e9 17 ba ff ff e8 d5 c0 d6 f6 90 <0f> 0b 90 48 8b 7c 24 48 e8 b7 f3 2d f7 48 c7 44 24 48 ea ff ff ff [ 94.205004][ T9] RSP: 0018:ffffc900000e6c00 EFLAGS: 00010293 [ 94.211079][ T9] RAX: ffffffff8ae8fcab RBX: 0000000000000000 RCX: ffff88801c6c0000 [ 94.219049][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.227029][ T9] RBP: ffffc900000e6fa8 R08: ffff88801c6c0000 R09: 000000000000000e [ 94.235000][ T9] R10: 000000000000000d R11: 0000000000000000 R12: ffffc900000e6eb0 [ 94.242970][ T9] R13: dffffc0000000000 R14: 1ffff110065f5ceb R15: ffffc900000e6eb0 [ 94.250952][ T9] ? ieee80211_prep_channel+0x490b/0x60f0 [ 94.256696][ T9] ? ieee80211_prep_channel+0x202/0x60f0 [ 94.262334][ T9] ? __lock_acquire+0xaac/0xd20 [ 94.267204][ T9] ? __pfx_ieee80211_prep_channel+0x10/0x10 [ 94.273087][ T9] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 94.278637][ T9] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 94.284207][ T9] ? ieee80211_prep_connection+0x50f/0x1600 [ 94.290103][ T9] ieee80211_prep_connection+0xeb9/0x1600 [ 94.295831][ T9] ieee80211_mgd_auth+0xee3/0x1770 [ 94.300953][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.306150][ T9] ? __pfx_ieee80211_mgd_auth+0x10/0x10 [ 94.311698][ T9] ? rcu_is_watching+0x15/0xb0 [ 94.316491][ T9] cfg80211_mlme_auth+0x62f/0x9c0 [ 94.321525][ T9] cfg80211_conn_do_work+0x501/0xd10 [ 94.326812][ T9] ? __pfx_cfg80211_conn_do_work+0x10/0x10 [ 94.332687][ T9] ? kvm_sched_clock_read+0x11/0x20 [ 94.337881][ T9] ? psi_task_change+0xe5/0x250 [ 94.342732][ T9] ? cfg80211_conn_work+0x298/0x440 [ 94.347965][ T9] cfg80211_conn_work+0x2c0/0x440 [ 94.353025][ T9] ? __pfx_cfg80211_conn_work+0x10/0x10 [ 94.358577][ T9] ? arch_scale_cpu_capacity+0x18/0xb0 [ 94.364051][ T9] ? kvm_sched_clock_read+0x11/0x20 [ 94.369248][ T9] ? sched_clock+0x3f/0x60 [ 94.373669][ T9] ? sched_clock_cpu+0x74/0x430 [ 94.378524][ T9] ? psi_task_switch+0x39e/0x6d0 [ 94.383460][ T9] ? __lock_acquire+0xaac/0xd20 [ 94.388326][ T9] ? do_raw_spin_lock+0x121/0x290 [ 94.393348][ T9] ? look_up_lock_class+0x74/0x170 [ 94.398459][ T9] ? register_lock_class+0x51/0x320 [ 94.403671][ T9] ? __lock_acquire+0xaac/0xd20 [ 94.408538][ T9] ? process_scheduled_works+0x9ec/0x17a0 [ 94.414265][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.419480][ T9] ? process_scheduled_works+0x9ec/0x17a0 [ 94.425204][ T9] ? process_scheduled_works+0x9ec/0x17a0 [ 94.430937][ T9] process_scheduled_works+0xadb/0x17a0 [ 94.436511][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.442505][ T9] worker_thread+0x8a0/0xda0 [ 94.447119][ T9] kthread+0x70e/0x8a0 [ 94.451197][ T9] ? __pfx_worker_thread+0x10/0x10 [ 94.456308][ T9] ? __pfx_kthread+0x10/0x10 [ 94.460899][ T9] ? __pfx_kthread+0x10/0x10 [ 94.465490][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.470698][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.475898][ T9] ? __pfx_kthread+0x10/0x10 [ 94.480485][ T9] ret_from_fork+0x4b/0x80 [ 94.484905][ T9] ? __pfx_kthread+0x10/0x10 [ 94.489500][ T9] ret_from_fork_asm+0x1a/0x30 [ 94.494283][ T9] [ 94.497657][ T9] Kernel Offset: disabled [ 94.501984][ T9] Rebooting in 86400 seconds..