last executing test programs: 6.032794711s ago: executing program 0 (id=428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x73}, {&(0x7f0000000080)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000040)="38c8114fa3db529ed03bcef7ec2ea72ff78e04927d241dea66ff7487527450271f5eecbf1ef4f33ddcdcbb7fd642d78b34841e80399d5c524968", 0x3a}], 0x3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) 5.774121208s ago: executing program 0 (id=433): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r4 = socket(0x1, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x34, r5, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0xff00) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r9 = socket$netlink(0x10, 0x3, 0xf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000400000000000000000000000000000002000000000000030000000000000000000000090300000000005100"], 0x0, 0x40, 0x0, 0x1}, 0x28) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 4.883075283s ago: executing program 1 (id=441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a630182700008"], 0xffdd) 4.732060917s ago: executing program 0 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400007f04000000e6ff000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r5 = socket$nl_route(0x10, 0x3, 0x0) close(r5) recvmsg$can_raw(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/28, 0x1c}], 0x1}, 0x1021) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$inet_sctp(r10, &(0x7f0000000680)={&(0x7f00000001c0)=@in={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000340), 0x0, &(0x7f0000000880)=[@sndrcv={0x30, 0x84, 0x1, {0x101, 0x4a, 0x20a, 0x6, 0xfff, 0x2, 0x9, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x2, 0x0, 0xb0, 0x80000001, 0x9, 0x7fffffff, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x52, 0x8004, 0x2, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @prinfo={0x18, 0x84, 0x5, {0x10}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x3ff, 0xb, 0x3, 0x9, 0x7, 0x10000, 0xd9}}, @authinfo={0x18, 0x84, 0x6, {0x7}}], 0xf8, 0x4008046}, 0x11) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r13 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r6}, 0x8) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r13, 0x40089413, &(0x7f00000000c0)=0x9) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000100)=0x1d, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r14, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x8000}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x9}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x42}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x40}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7fffffff}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x6}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 4.642309819s ago: executing program 2 (id=445): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000240)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000027c0)="42428886", 0x4}], 0x1}}], 0x1, 0x80) r7 = socket$unix(0x1, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r9}, &(0x7f0000002480), &(0x7f00000024c0)=r8}, 0x20) r10 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r9, &(0x7f0000000080), &(0x7f0000000040)=@udp=r10, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000140)={r11, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) sendto$inet(r12, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 4.4321679s ago: executing program 1 (id=447): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000100)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000003c0), 0x10) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)="92", 0x1}], 0x1}, 0x4815) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000200)={0x38, r4, 0x601, 0x70bd29, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.323254925s ago: executing program 2 (id=448): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@delqdisc={0x3dc, 0x25, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9, 0xe}, {0xe, 0xffff}, {0x7, 0xc}}, [@TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0xe, 0xfff, 0x1, 0x2, 0x0, 0x5}}, {0xe, 0x2, [0x4, 0x4db3, 0x7, 0x4, 0x2]}}, {{0x1c, 0x1, {0x8, 0x6, 0x9, 0x3, 0x2, 0x2, 0x8, 0x9}}, {0x16, 0x2, [0x2, 0x1ff, 0xfffc, 0x0, 0xc, 0x8, 0x2, 0x8, 0x9]}}, {{0x1c, 0x1, {0x9, 0x2, 0x3, 0x3, 0x0, 0x100, 0x2, 0x3}}, {0xa, 0x2, [0x33fc, 0x1, 0x4]}}, {{0x1c, 0x1, {0x2, 0x2, 0x9, 0x2e, 0x0, 0x8, 0xa}}, {0x4}}, {{0x1c, 0x1, {0x63, 0x7b, 0x6, 0x0, 0x1, 0x5, 0x365, 0x9}}, {0x16, 0x2, [0x5, 0xfff4, 0x8, 0x8, 0x3ff, 0xc00, 0x5fc0, 0x2, 0x3]}}, {{0x1c, 0x1, {0xa, 0x0, 0xdf3b, 0xffff, 0x0, 0x5, 0x2, 0x5}}, {0xe, 0x2, [0x1, 0xbd7a, 0xfa9, 0x9, 0x80]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x80000000, 0x1, 0x5, 0x247, 0x6}}, {0x10, 0x2, [0x3, 0x4, 0x6, 0x1, 0x1, 0xfffb]}}, {{0x1c, 0x1, {0x9, 0x1, 0x0, 0x7, 0x0, 0x800, 0x5, 0x5}}, {0xe, 0x2, [0xc, 0xe, 0x8, 0x101, 0x200]}}]}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x3, 0x6, 0x1, 0x0, 0x3, 0x9}}, {0x16, 0x2, [0x800, 0x200, 0xff, 0x8000, 0xd, 0x1, 0x3, 0xe0cc, 0x1]}}, {{0x1c, 0x1, {0x3, 0x40, 0x9936, 0x80000000, 0x0, 0x4, 0x4, 0x9}}, {0x16, 0x2, [0x6, 0xc, 0x401, 0x7, 0x2, 0xb, 0x2, 0xf572, 0x7]}}, {{0x1c, 0x1, {0x2, 0xfe, 0x0, 0x2, 0x2, 0x3ff, 0xf8, 0x8}}, {0x14, 0x2, [0x6, 0x3, 0x6, 0x7, 0x7c, 0x7f, 0x8001, 0x56f2]}}, {{0x1c, 0x1, {0x9, 0x4, 0x0, 0x1, 0x2, 0x1, 0x6d78, 0x7}}, {0x12, 0x2, [0x7d2, 0x7, 0x3, 0x1, 0x0, 0x3, 0x9]}}, {{0x1c, 0x1, {0x3, 0x0, 0xff8d, 0x9, 0x2, 0xd, 0xb, 0x7}}, {0x12, 0x2, [0xd, 0x0, 0x7, 0x8, 0x1, 0x4, 0x4]}}]}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "0be3a6cfbe2a1a93db2a110f9f90bbc1"}}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x74, 0x0, 0x8, 0x2, 0xfff, 0x101, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x7, 0x0, 0xfffd, 0x6, 0x1, 0x1, 0x1000, 0x6}}, {0x10, 0x2, [0x4, 0x40, 0x951, 0x4, 0x1, 0xd860]}}]}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x9f, 0x5}}, @TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x8, 0xf801, 0xff, 0x1, 0xff, 0x9, 0x8}}, {0x14, 0x2, [0xea, 0x8, 0x9, 0x3, 0x4, 0x0, 0x1, 0x9]}}, {{0x1c, 0x1, {0xd5, 0x7, 0x3, 0x3, 0x2, 0x4, 0x0, 0x5}}, {0xe, 0x2, [0x5, 0x0, 0x2, 0x0, 0x1]}}, {{0x1c, 0x1, {0x6, 0x3, 0x9, 0x8, 0x3, 0x2, 0x9, 0x8}}, {0x14, 0x2, [0x200, 0xffad, 0x3, 0x5818, 0x569a, 0x3, 0x3, 0x81]}}, {{0x1c, 0x1, {0x8, 0x7, 0xc, 0xa2, 0x2, 0x0, 0x7fff, 0x5}}, {0xe, 0x2, [0x4000, 0x8, 0x3, 0x3, 0xf]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}]}, 0x3dc}}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x7}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) openat$cgroup_ro(r1, &(0x7f00000004c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r14}, 0x18) r15 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4.283177676s ago: executing program 0 (id=449): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4040004) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000040)=""/175, &(0x7f0000000100)=0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b23d7d00"}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x7d, {0x0, 0x0, 0x0, 0x0, 0x1107}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'team0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.752416366s ago: executing program 1 (id=450): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000001440)={0x2, 0x4e23, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x4000000, @empty, 0x7da8}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="07e0e8421e0e05cc24a03dc8a7c5927f5f", 0x11}], 0x1}], 0x1, 0x40800) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0x3, 0x4) 3.35625828s ago: executing program 0 (id=453): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0xdd, 0xa}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) tee(r2, r2, 0x3ff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3.355710723s ago: executing program 1 (id=454): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, r1, 0x3, 0x3}, 0x50) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp256-generic,ecb(blowfish))\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xcd, 0x2a, &(0x7f0000000280)="739fd2aa1a1e94863e93052ee782a401d461701ccfcb11ed18a38ae39dbb1cbb4bb890e78ea8fa90c8399dd8f1897b147aecbc79693b012cb21c19d6bf6e4c177192f0e5b8988c89c95dab19e904018b27611abf84748eca6f96f215b65014aaa50e59ff2f04e9005a7278933175c2408ebcc480db25d7b5d4467b0eb8aef10af997719caa8dd9e6f0188ccdf73d51bac6cf3f9ec47c3f2ac0eafe1bd584554265e7cb0922c05661dc5c450134ab3c13ec5a357eaf3a80441d4974579881de04d60aef1b79668e696f745aba14", &(0x7f00000001c0)=""/42, 0x3, 0x0, 0x44, 0xd2, &(0x7f0000000380)="e1040c2dee34bc751149c52c05ece78537372d55d9e15087d3d3cf49ac4e78a519895f892e8e7423e1041fb08738e18dd48a4c45353c6b04f3a214a26d3d6ad0180b9a84", &(0x7f0000000440)="c2de315fbb22bf2c42a9145ae64df942a1103aee47f4c9038a5bc614c53756474c470660381df4458f7c1488c2e23c764d35e43a65517f23ced0a006185c7531fe272c0c29f01caae4e1f9c17faa90a39b5add02894da65abc32123b5320e4bf1172841323d64e518b61266efcb98c36f9be644d9ac6cf4eec34541ea72ce325a626fe519cbc263f2f4bbc76c152a82d2c3cf6adebaf8284eab7246bc54c5cde5678b548a44f85fa389928fcc6e56627424888b91260ebc50e039431e5169dd738c6fdd484016e7835f14bef8d6466b36f29", 0x4, 0x0, 0xfff}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000efee95"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x0, 0x0, 0x0, 0x800008, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0xb, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r7, 0x23d, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xfa}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r12, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x50, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0xa3, &(0x7f00000002c0)=""/163, 0x41000, 0xec, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x1, 0x0, 0x9, 0x984}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x219d, 0x0, 0x0, 0x0, 0xfffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.226553217s ago: executing program 0 (id=455): unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) pipe(&(0x7f0000000000)) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004884}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x34}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfdff, 0x3}, 0x6) write(r4, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10) (async) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[], 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r5], 0xb8}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r5], 0xb8}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000040)={0x89, @rand_addr, 0x0, 0x0, 'wrr\x00', 0x0, 0x0, 0x800000}, 0x2c) getuid() (async) r7 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES8, @ANYRESHEX=r7, @ANYRES32=r3, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYBLOB="9f92089203f4d121ae4c45a0b2190c88cf5213d6743e858f8af1ee82ef6c6587ff2169da1204af5b077d0dea2adc0a4034d7eedbeeaf9cca4d125e230bb0dc4f6992d59082567785d26f2d9ceced5d2d3a7467ebbd65d8ed85"], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x800) unshare(0x6a040000) (async) unshare(0x6a040000) unshare(0x44000000) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) 1.613216566s ago: executing program 2 (id=456): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0xb, 0x0, 0x7}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0xb, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000003c0)={@mcast2, 0x0, 0x0, 0x2, 0x1, 0x8001, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x300, 0x0, 0x3, 0x8, 0x6, 0x30}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f}, 0x20) sendmsg$nl_route_sched(r0, 0x0, 0x20004000) (async) sendmsg$nl_route_sched(r0, 0x0, 0x20004000) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 1.56086897s ago: executing program 1 (id=457): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4, 0x10000000}}, 0x10) setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000040)="e304d0eb7e", 0x5) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000180)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) close(0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='sctp_probe\x00', r5}, 0x18) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e3", 0xd}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a47", 0x43}], 0x3}], 0x1, 0x40800) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 1.383636416s ago: executing program 3 (id=459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000430000000000190000000000009112a900f0ffffff9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.200725256s ago: executing program 4 (id=460): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='team0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071107c000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000340)={0x2c, 0x3, r2, 0x6}, 0x10) 1.196715637s ago: executing program 3 (id=461): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x7ff, 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00"], 0x0, 0xc}, 0x94) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="80ff03000000000000bd7000ffdbdf250b0f69000100ecc67075cf95c9489390680a92bd08aad8d4db3570ae7b6f28b76a3ae2ff7f0000a3120f78b509005fdf6d845f664bdd88fb06d64fa8fef7bb2a09d593fd2fb9c56763981db8bd656d217001b39671c6c642b88bdf3286a300"/128], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000064000100bdffffff0000000002000000010000070000000008000b0047000078dc000100ac1414aa"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b72300255daf00008500000005000000bf090000000000000000670bb7020000000000007b9a75ff00004e00d509000013ffc0c4aedaf0ff00000000bf97000000c7e4000008b26f2ed62e28b2a7b4413b4c870000fffdfffff7ac4bb014e07740304badcb9093bfa4000000000000070400f5efffffff740200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 1.133761542s ago: executing program 4 (id=462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0xfffffffd, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000130a01"], 0x7c}}, 0xc8000) 1.062382231s ago: executing program 2 (id=463): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x10, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x2e, 0x5f, 0x5f]}}, &(0x7f00000001c0)=""/142, 0x2d, 0x8e, 0x0, 0x9, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x1c7}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_delroute={0x2c, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_NH_ID={0x8, 0x1e, 0xffffffff}]}, 0x2c}}, 0x8090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x4, 0x0, 0x3, 0x4, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x86, &(0x7f00000000c0)=""/134, 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[r0, r0, r3, 0x1, r0, r0], &(0x7f0000000380)=[{0x5, 0x2, 0xc, 0x8}, {0x5, 0x1, 0xa, 0x7}, {0x3, 0x1, 0x4}, {0x4, 0x2, 0x1, 0x8}], 0x10, 0x7fffffff}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r9}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x140b, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x140000c4}, 0x4000004) sendmmsg$inet6(r9, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r12) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) r14 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r14, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2061, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002180)={r0}, 0x4) 955.863509ms ago: executing program 4 (id=464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=0x1, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="e2cc34ffc7485594fb5e24358c10eb371b7dbd6c3ecb4740a6a034b1b07fc80f55556762d6caa6eaa99969f601f42bfa48543b5397c5cd8beb4490adc17d96f1fedc9cb143c60fc2dc2f0c1d87131af9fb0c7684b8f60b338ffa474fb301a225bc7678544110002dbe45131737f8c2bd815704395410834e1189b6", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f93f8ba9d1f196fda5e9c23cc1ebe8bd8fd01669ddb3317817855855b12c93c4d59add7e1ea95bf546c4428d9d174935eace3d71ea1f3dd131", @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYRESDEC, @ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 955.140423ms ago: executing program 3 (id=465): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x7779, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71185d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x4c04, 0x4) 840.220957ms ago: executing program 3 (id=466): socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @bcast, @null, @bcast, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000025008101040000000000009f1ba1f848430000005e1406ca000000ffffffff25ed5860000a898988a800", 0x2e}], 0x1}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xa}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xfffffef8, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2005c040}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={0x0}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{0x0}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000002400010300000000800000001100000004002f80787f079f85320f8ccfa6acd3e51eb721b5c0bd53ce14a3cafff4c04d45bd9f2fc3816845955a4e3fe43d10fa1c813fe2b450abf4a1cf790f3eeb34779b2cf6ce4aa65cfb2f51d19c641afdb0f5f63b3ef7967ec3d51cc8fd830322ef28299040e17baa0788e1cdf701b5ebb2f8a3ee0ad0f8a2aff1745b927e2d0b165639f9f810e2896b987c7027f94a9a44579b2f67b1ba827ebcd38a2cd1689205b4288b41a00d67cdf3be383814e82ca16b740a746fce0ebc5f0c82ecc1baab51c64fbf0658c755a0"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, 0x0, 0x4000054) 791.859718ms ago: executing program 4 (id=467): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @alu={0x4, 0x1, 0x7, 0xa, 0xa, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0xf, 0xe2, &(0x7f0000000400)=""/226, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x5, 0x1, 0x2}]}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @alu={0x4, 0x1, 0x7, 0xa, 0xa, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0xf, 0xe2, &(0x7f0000000400)=""/226, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x5, 0x1, 0x2}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000280)='kvm_dirty_ring_exit\x00', r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000280)='kvm_dirty_ring_exit\x00', r3}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0xffffffffffffffff, 0x7fff}, 0xc) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000b80)={&(0x7f00000007c0)="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", &(0x7f00000008c0)=""/129, &(0x7f0000000980)="5347d41e7cb546381cd5d35121c1260f005fc682732a760291c9fa076833294522d0f4142ddfe561e820883d06fde0383f0214899aa7804415f7f8930235cb0bb90cd0d95f0cdd4ea1d758ec60e9aade078fa885507eee2e538092f4ee3b16ab72b69adabe88890faa4466a4505ff1d21751f1d96157dd974c1612a819ccfb317af9f918829ce8", &(0x7f0000000a40)="8baa9f0c8001042496bdff72a55221ad5e5fd2add24cb468e2b7385112f14374d3c08c19d5c4c140d117b82d26bea344a396ae7aa5fa145e61e0586e619056896e721c149928653d7e8fe60a08edcb21c027ccc722105aabc25735e40b569503861d15fc16896ace51bfef521c3dc3b23cf690b8f50de1cf840f97b8effdeb81712538052ace572dd3aa848a360487b4e98af83720cd61bd860b1df8ff1a2102721b78e3971337c6196b8c258fed812b6ab3a0214c59994012f91b6dcaa6ff5a14cc9ef94ea3e0a03d1b949f7d42cede548b3a44e4225f680560f41a7a8543302921e5c3395e77ea80ee59dd4ac2f9804ac7e2", 0x58f72842, r5}, 0x38) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, r6, 0x400, 0x2, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xa}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xd4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048000}, 0x2004c8c5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r0) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, r7, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, r7, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ec0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000f40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x64, r9, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004001}, 0x84) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r9, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001180)={0x0, @in6={{0xa, 0x4e23, 0xc, @remote, 0x1}}, [0x800, 0x8, 0x6, 0x8, 0x10000, 0x8000, 0xe1, 0x9, 0xffffffff, 0x3, 0x2, 0x2, 0x9, 0x0, 0x8000000000000001]}, &(0x7f0000001280)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r12, 0x84, 0x5, &(0x7f00000012c0)={r13, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000013c0)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000013c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x40, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20000011) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x2c}}, 0x10008044) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r3, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000017c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0], 0x0, 0xdf, &(0x7f0000001880)=[{}], 0x8, 0x10, &(0x7f00000018c0), &(0x7f0000001900), 0x8, 0xee, 0x8, 0x8, &(0x7f0000001940)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r3, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000017c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0], 0x0, 0xdf, &(0x7f0000001880)=[{}], 0x8, 0x10, &(0x7f00000018c0), &(0x7f0000001900), 0x8, 0xee, 0x8, 0x8, &(0x7f0000001940)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0x13, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4fc}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000001680)='syzkaller\x00', 0x2, 0xf0, &(0x7f00000016c0)=""/240, 0x41000, 0x22, '\x00', r15, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001b00)={0x2, 0x5, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001b40)=[{0x5, 0x1, 0x9, 0x3}], 0x10, 0xf6b3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0x13, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4fc}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000001680)='syzkaller\x00', 0x2, 0xf0, &(0x7f00000016c0)=""/240, 0x41000, 0x22, '\x00', r15, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001b00)={0x2, 0x5, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001b40)=[{0x5, 0x1, 0x9, 0x3}], 0x10, 0xf6b3}, 0x94) 660.188623ms ago: executing program 2 (id=468): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3699110dca5428f30f4b00000800000000000000d3102cc2f842c5148b9eeb5a9fba833a8ba1b31b5427170e2482b5b06ce55114c361bbbae860ed2e291616f0ec7172bd5470111c24d5d680e3dc41f4e5741d393cec3d3c2bfe462b5c6b92bb4274ff0400fb18c54b0a6ea0ddb8995e89850fadaa93cf6ec09e39048c3b057789f796ca04a68decd09cfef37a5008583b5e3b6ab16fec22d87b3eaf99d20733473b5411d76bf86e3d90af86ff6d9e8ab4b07fc4bf9468b30f2220890ae55fdb7c5412bf7061452f4c4e1d5e1f84d1e2368e33080300000088e9b81505f991ef6cb14a444d8387753ba34c0f2da7185bb58b3b319f1e43d1b38e7e3f7c4bb296a2dadf8da25d22cc6ee6f3654e9f512d4bb270ba055aea8a75eb805861687cabfbe6437a358303de32916f3d7f1d93792a2ac6b3328cf3c498031c6382072dd116e8962a89ed98a4523741117831677b525684d8", @ANYRES32=r3, @ANYBLOB="40100000004104001800128008000100677265000c0002800800040000080000"], 0x38}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @ldst={0x3, 0x2, 0x4, 0x4, 0x4, 0x0, 0x4}, @map_idx={0x18, 0x6}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x13, &(0x7f0000000180)=""/19, 0x41000, 0x2c, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000000240)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x0, 0x480000, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0), &(0x7f00000003c0)=[{0x5, 0x4, 0xf, 0xc}, {0x3, 0x1, 0xc, 0x9}, {0x2, 0x2}, {0x1, 0x1, 0x1, 0xa}, {0x5, 0x3, 0x0, 0x8}, {0x1, 0x4, 0x2}, {0x1, 0x1, 0xd, 0x18}], 0x10, 0x8}, 0x94) 496.274883ms ago: executing program 4 (id=469): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, 0x0, 0x48080) (async) write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) (async) write$nci(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="400204431efc8e"], 0x7) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xd, 0x31, 0xffffffffffffffff, 0x7c5c7000) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x9, 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000006180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (rerun: 32) 344.240108ms ago: executing program 2 (id=470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7d4}, @ldst={0x0, 0x0, 0x4, 0xa, 0x7, 0x0, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000140)='GPL\x00', 0x942e, 0x80, &(0x7f0000000180)=""/128, 0x41000, 0xc, '\x00', r6, @lsm=0x2b, r1, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x2, 0xffff}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000340)=[r1, r0, r1], 0x0, 0x10, 0x2}, 0x94) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) splice(r1, 0x0, r3, 0x0, 0x15, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0xff01, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x11, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff800}, [@call={0x85, 0x0, 0x0, 0x23}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f4}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r12}, 0x10) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r14 = accept4(r13, 0x0, 0x0, 0x0) ioctl$int_in(r14, 0x5452, &(0x7f0000000500)=0xd0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 272.885353ms ago: executing program 3 (id=471): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0xc0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r1, r1, 0x2f}, 0xfffffffffffffc55) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="f18fe171d54ab68aa53d790e7de4e7b79d54a071ce4607cea31478854ac6020c98d871ce08a08c98fd11fc9e8da1f27bcc0f095900ce92c7d4db95294ffb215984bbdebfb13909d23299ee36f4a55fe66059829100959bf4801830143c0644b0ea66e3524844624dc17e851233a8fce260e7f3a19ba1c599903824f1c0b4b8a3d315626dce450799883be0edb28877a318c1551afbb1757c4d3c62009ef1634f5a9456fa59b5", @ANYRES32=r0, @ANYRES32], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000002200000000000000000080071106d000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xd}, 0x94) 133.476695ms ago: executing program 4 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xeb, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 83.182604ms ago: executing program 3 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x5, 0x73, 0xffe00003}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40000010) (async) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000050000000000000000000000aa3000028004003f800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280140001801100000000000000080000000000000018000a80140007"], 0xec}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e003303"], 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x40040000) 0s ago: executing program 1 (id=474): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb0100180000180d00001800000007000000020000000100001304000000046000"/50], 0x0, 0x37, 0x0, 0x1, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb0100180000180d00001800000007000000020000000100001304000000046000"/50], 0x0, 0x37, 0x0, 0x1, 0x1}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r2, 0xba87317d461c07c9, 0x70bd2d, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x8) socket$inet(0xa, 0x801, 0x84) (async) socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1, 0x80000000}}, 0x0, 0x3, 0x400, 0x80000, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000400dda10dbd12a71cce"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdb6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r6, 0x4004743c, &(0x7f0000000100)) shutdown(r3, 0x2) (async) shutdown(r3, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.215' (ED25519) to the list of known hosts. [ 82.977807][ T5821] cgroup: Unknown subsys name 'net' [ 83.125483][ T5821] cgroup: Unknown subsys name 'cpuset' [ 83.134677][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.825392][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.547228][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.575566][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.583419][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.591852][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.599505][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.609718][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.618139][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.625873][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.633864][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.641812][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.649663][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.657054][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.666163][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.673920][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.682254][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.687864][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.690431][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.698102][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.723633][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.742870][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.788270][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.797555][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.805872][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.813450][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.821652][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.595126][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.657464][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 88.704808][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 88.727482][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.879610][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.039209][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.047118][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.055458][ T5831] bridge_slave_0: entered allmulticast mode [ 89.062830][ T5831] bridge_slave_0: entered promiscuous mode [ 89.099992][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.107316][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.114813][ T5839] bridge_slave_0: entered allmulticast mode [ 89.122586][ T5839] bridge_slave_0: entered promiscuous mode [ 89.130895][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.138669][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.146359][ T5831] bridge_slave_1: entered allmulticast mode [ 89.154023][ T5831] bridge_slave_1: entered promiscuous mode [ 89.161554][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.169006][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.176686][ T5834] bridge_slave_0: entered allmulticast mode [ 89.184552][ T5834] bridge_slave_0: entered promiscuous mode [ 89.197728][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.205084][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.212746][ T5833] bridge_slave_0: entered allmulticast mode [ 89.220822][ T5833] bridge_slave_0: entered promiscuous mode [ 89.228585][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.236199][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.244340][ T5839] bridge_slave_1: entered allmulticast mode [ 89.251524][ T5839] bridge_slave_1: entered promiscuous mode [ 89.271188][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.278600][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.286541][ T5834] bridge_slave_1: entered allmulticast mode [ 89.294887][ T5834] bridge_slave_1: entered promiscuous mode [ 89.307911][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.315627][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.323533][ T5833] bridge_slave_1: entered allmulticast mode [ 89.330947][ T5833] bridge_slave_1: entered promiscuous mode [ 89.414740][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.463905][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.476061][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.488874][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.498810][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.506769][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.514477][ T5832] bridge_slave_0: entered allmulticast mode [ 89.522604][ T5832] bridge_slave_0: entered promiscuous mode [ 89.534016][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.546123][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.569118][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.582996][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.590260][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.597764][ T5832] bridge_slave_1: entered allmulticast mode [ 89.604985][ T5832] bridge_slave_1: entered promiscuous mode [ 89.614217][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.694493][ T5831] team0: Port device team_slave_0 added [ 89.738758][ T5839] team0: Port device team_slave_0 added [ 89.744960][ T52] Bluetooth: hci4: command tx timeout [ 89.744968][ T5836] Bluetooth: hci3: command tx timeout [ 89.747486][ T5831] team0: Port device team_slave_1 added [ 89.765362][ T5834] team0: Port device team_slave_0 added [ 89.774974][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.786979][ T5833] team0: Port device team_slave_0 added [ 89.795660][ T5839] team0: Port device team_slave_1 added [ 89.814194][ T5834] team0: Port device team_slave_1 added [ 89.826566][ T52] Bluetooth: hci2: command tx timeout [ 89.844902][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.856593][ T5833] team0: Port device team_slave_1 added [ 89.887906][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.895891][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.902149][ T52] Bluetooth: hci0: command tx timeout [ 89.922923][ T5836] Bluetooth: hci1: command tx timeout [ 89.932402][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.005297][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.013575][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.042056][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.076952][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.084171][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.110976][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.122962][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.130747][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.157547][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.177446][ T5832] team0: Port device team_slave_0 added [ 90.184434][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.191591][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.221539][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.239429][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.247139][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.275991][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.287949][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.295620][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.324209][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.339008][ T5832] team0: Port device team_slave_1 added [ 90.346087][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.353388][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.380676][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.502743][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.510388][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.537690][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.578874][ T5831] hsr_slave_0: entered promiscuous mode [ 90.586017][ T5831] hsr_slave_1: entered promiscuous mode [ 90.606640][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.614233][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.641546][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.670479][ T5833] hsr_slave_0: entered promiscuous mode [ 90.677005][ T5833] hsr_slave_1: entered promiscuous mode [ 90.683623][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 90.689669][ T5833] Cannot create hsr debugfs directory [ 90.706477][ T5834] hsr_slave_0: entered promiscuous mode [ 90.714635][ T5834] hsr_slave_1: entered promiscuous mode [ 90.722390][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 90.728932][ T5834] Cannot create hsr debugfs directory [ 90.756701][ T5839] hsr_slave_0: entered promiscuous mode [ 90.764179][ T5839] hsr_slave_1: entered promiscuous mode [ 90.770817][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 90.777509][ T5839] Cannot create hsr debugfs directory [ 90.967614][ T5832] hsr_slave_0: entered promiscuous mode [ 90.974876][ T5832] hsr_slave_1: entered promiscuous mode [ 90.981196][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 90.987528][ T5832] Cannot create hsr debugfs directory [ 91.488791][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.502431][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.523469][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.536651][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.589371][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.613353][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.634780][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.657997][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.735668][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.757256][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.771697][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.800481][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.822963][ T5836] Bluetooth: hci3: command tx timeout [ 91.832097][ T5836] Bluetooth: hci4: command tx timeout [ 91.902204][ T5836] Bluetooth: hci2: command tx timeout [ 91.948212][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.971263][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.982565][ T5836] Bluetooth: hci0: command tx timeout [ 91.982765][ T52] Bluetooth: hci1: command tx timeout [ 91.992867][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.009163][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.041193][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.146174][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.155411][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.177858][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.189410][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.206466][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.218588][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.236005][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.244060][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.286762][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.294688][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.317672][ T853] cfg80211: failed to load regulatory.db [ 92.341339][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.376678][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.384845][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.421787][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.429625][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.476618][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.557462][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.576482][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.615028][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.622724][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.638745][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.666884][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.674245][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.742766][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.794876][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.803784][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.869094][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.876898][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.990488][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.023367][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.097521][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.159732][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.167162][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.180903][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.188256][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.205283][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.368002][ T5831] veth0_vlan: entered promiscuous mode [ 93.426553][ T5831] veth1_vlan: entered promiscuous mode [ 93.534670][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.563219][ T5839] veth0_vlan: entered promiscuous mode [ 93.596469][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.629148][ T5839] veth1_vlan: entered promiscuous mode [ 93.679649][ T5831] veth0_macvtap: entered promiscuous mode [ 93.755000][ T5831] veth1_macvtap: entered promiscuous mode [ 93.790702][ T5839] veth0_macvtap: entered promiscuous mode [ 93.843195][ T5839] veth1_macvtap: entered promiscuous mode [ 93.886297][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.903078][ T52] Bluetooth: hci4: command tx timeout [ 93.903087][ T5836] Bluetooth: hci3: command tx timeout [ 93.916078][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.926598][ T5833] veth0_vlan: entered promiscuous mode [ 93.958627][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.978504][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.986860][ T52] Bluetooth: hci2: command tx timeout [ 94.006058][ T1009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.019740][ T5833] veth1_vlan: entered promiscuous mode [ 94.028527][ T1009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.041593][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.055746][ T1009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.065736][ T52] Bluetooth: hci0: command tx timeout [ 94.066168][ T5836] Bluetooth: hci1: command tx timeout [ 94.074349][ T1009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.107800][ T1009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.129378][ T1009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.154752][ T1009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.166434][ T1009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.286290][ T5832] veth0_vlan: entered promiscuous mode [ 94.304996][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.315578][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.340582][ T5834] veth0_vlan: entered promiscuous mode [ 94.366209][ T5833] veth0_macvtap: entered promiscuous mode [ 94.382818][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.391846][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.409448][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.425278][ T5833] veth1_macvtap: entered promiscuous mode [ 94.432157][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.457421][ T5832] veth1_vlan: entered promiscuous mode [ 94.479347][ T5834] veth1_vlan: entered promiscuous mode [ 94.526374][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.548466][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.567986][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.579169][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.633328][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.686670][ T5832] veth0_macvtap: entered promiscuous mode [ 94.698589][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.715277][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.750088][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.766753][ T5832] veth1_macvtap: entered promiscuous mode [ 94.774769][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.788593][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.814874][ T5834] veth0_macvtap: entered promiscuous mode [ 94.826035][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.850443][ T5958] batman_adv: batadv0: Adding interface: ipvlan2 [ 94.858547][ T5958] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.888540][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.899835][ T5960] IPVS: Scheduler module ip_vs_ not found [ 94.901357][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.917167][ T5958] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 94.940067][ T5957] batman_adv: batadv0: Adding interface: ipvlan3 [ 94.948165][ T5957] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.974404][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.986206][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.996764][ T5957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 95.007152][ T5957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.017696][ T5957] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 95.044339][ T5834] veth1_macvtap: entered promiscuous mode [ 95.130363][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.169395][ T5964] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6'. [ 95.190332][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.243839][ T3600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.266152][ T3600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.295057][ T3600] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.318263][ T3600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.354578][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.413649][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.453597][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.461647][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.544830][ T1114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.556426][ T1114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.598602][ T1114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.630954][ T1114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.696104][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.721829][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.806654][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.819692][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.982066][ T5836] Bluetooth: hci4: command tx timeout [ 95.988485][ T5836] Bluetooth: hci3: command tx timeout [ 95.997664][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.015230][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.069993][ T52] Bluetooth: hci2: command tx timeout [ 96.101588][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.131924][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.152366][ T52] Bluetooth: hci1: command tx timeout [ 96.152376][ T5836] Bluetooth: hci0: command tx timeout [ 96.296478][ T5987] netlink: 'syz.2.3': attribute type 23 has an invalid length. [ 96.328618][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.339781][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.350368][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.461621][ T5998] syzkaller0: entered promiscuous mode [ 96.502564][ T5998] syzkaller0: entered allmulticast mode [ 96.533286][ T6001] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15'. [ 96.754253][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.029165][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 97.782417][ T6040] vlan2: entered promiscuous mode [ 97.794879][ T6040] geneve1: entered promiscuous mode [ 97.803164][ T6040] vlan2: entered allmulticast mode [ 97.817544][ T6044] Zero length message leads to an empty skb [ 97.826781][ T6040] geneve1: entered allmulticast mode [ 97.856194][ T6033] syzkaller0: entered promiscuous mode [ 97.885541][ T6033] syzkaller0: entered allmulticast mode [ 98.126473][ T6054] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET) [ 99.043101][ T6066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.29'. [ 100.101655][ T6097] netlink: 'syz.0.36': attribute type 4 has an invalid length. [ 100.393645][ T6101] netlink: 64 bytes leftover after parsing attributes in process `syz.3.41'. [ 100.459867][ T6101] block nbd0: not configured, cannot reconfigure [ 101.004818][ T6123] tipc: Enabling of bearer rejected, failed to enable media [ 101.156980][ T6124] ip6gre0: mtu less than device minimum [ 101.426489][ T6136] macsec1: entered promiscuous mode [ 101.445753][ T6136] macsec1: entered allmulticast mode [ 101.972877][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 102.352996][ T6177] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.506186][ T6181] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 102.780215][ T6193] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 102.858296][ T6193] bond1 (unregistering): Released all slaves [ 102.903146][ T6200] x_tables: duplicate entry at hook 1 [ 103.248395][ T6209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.370296][ T6209] bond0: (slave rose0): Enslaving as an active interface with an up link [ 103.466305][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 103.498102][ T6218] pim6reg: entered allmulticast mode [ 103.545225][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.67'. [ 103.846211][ T6222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.929105][ T6215] pim6reg: left allmulticast mode [ 104.127510][ T6231] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 105.219241][ T6277] bridge_slave_0: left allmulticast mode [ 105.245403][ T6277] bridge_slave_0: left promiscuous mode [ 105.252437][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.350210][ T6277] bridge_slave_1: left allmulticast mode [ 105.371841][ T6277] bridge_slave_1: left promiscuous mode [ 105.377868][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.419453][ T6277] bond0: (slave bond_slave_0): Releasing backup interface [ 105.472226][ T6277] bond0: (slave bond_slave_1): Releasing backup interface [ 105.520633][ T6277] team0: Port device team_slave_0 removed [ 105.541692][ T6277] team0: Port device team_slave_1 removed [ 105.549606][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.558930][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.581043][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.591118][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.602318][ T6277] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.630068][ T6290] netlink: 256 bytes leftover after parsing attributes in process `syz.4.79'. [ 105.681641][ T6297] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 105.696112][ T6303] warning: `syz.2.80' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.789888][ T6299] bridge_slave_0: left allmulticast mode [ 105.825397][ T6299] bridge_slave_0: left promiscuous mode [ 105.834779][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.846992][ T6304] netlink: 'syz.2.80': attribute type 10 has an invalid length. [ 105.890362][ T6299] bridge_slave_1: left allmulticast mode [ 105.922758][ T6299] bridge_slave_1: left promiscuous mode [ 105.941516][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.083683][ T6299] bond0: (slave bond_slave_0): Releasing backup interface [ 106.135020][ T6299] bond0: (slave bond_slave_1): Releasing backup interface [ 106.238276][ T6299] team0: Port device team_slave_0 removed [ 106.263200][ T6299] team0: Port device team_slave_1 removed [ 106.270797][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.280274][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.292471][ T6326] netlink: 1 bytes leftover after parsing attributes in process `syz.3.85'. [ 106.318253][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.326589][ T6326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.343005][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.357774][ T6299] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.407056][ T6304] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 106.420425][ T6332] netlink: 'syz.3.85': attribute type 39 has an invalid length. [ 106.436018][ T6304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.448852][ T6304] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 106.480481][ T6311] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 106.488710][ T6311] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 106.631975][ T6332] hsr_slave_1 (unregistering): left promiscuous mode [ 106.857174][ T6340] syzkaller0: entered promiscuous mode [ 106.908785][ T6344] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 106.917737][ T6344] netlink: 'syz.3.87': attribute type 2 has an invalid length. [ 106.926193][ T6340] syzkaller0: entered allmulticast mode [ 107.169710][ T6358] netlink: 'syz.1.90': attribute type 2 has an invalid length. [ 107.702967][ T6386] netlink: 'syz.4.93': attribute type 32 has an invalid length. [ 107.779181][ T6386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.93'. [ 107.783993][ T6388] sctp: [Deprecated]: syz.2.96 (pid 6388) Use of int in maxseg socket option. [ 107.783993][ T6388] Use struct sctp_assoc_value instead [ 107.863670][ T6388] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.571992][ T6405] netlink: 'syz.3.99': attribute type 12 has an invalid length. [ 108.627116][ T6394] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.723408][ T6434] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.100'. [ 108.812825][ T6394] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 109.341120][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 109.514639][ T6457] sctp: [Deprecated]: syz.0.103 (pid 6457) Use of int in max_burst socket option deprecated. [ 109.514639][ T6457] Use struct sctp_assoc_value instead [ 109.797988][ T6461] veth3: entered promiscuous mode [ 109.986437][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 110.058467][ T6467] netem: invalid attributes len -12 [ 110.112354][ T6467] netem: change failed [ 110.168513][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.105'. [ 110.178468][ T6467] netlink: 48 bytes leftover after parsing attributes in process `syz.4.105'. [ 110.268578][ T6475] syzkaller0: entered promiscuous mode [ 110.273171][ T6493] siw: device registration error -23 [ 110.306159][ T6475] syzkaller0: entered allmulticast mode [ 110.740650][ T6515] Cannot find map_set index 0 as target [ 111.306182][ T6536] netlink: 'syz.2.123': attribute type 1 has an invalid length. [ 111.412562][ T6541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.121'. [ 111.442465][ T6543] syz_tun: entered allmulticast mode [ 111.714645][ T6539] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 111.928599][ T6543] syz_tun: left allmulticast mode [ 111.944961][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'. [ 112.001900][ T6563] trusted_key: syz.3.128 sent an empty control message without MSG_MORE. [ 112.077641][ T6558] netlink: 44 bytes leftover after parsing attributes in process `syz.2.127'. [ 112.104511][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 112.116237][ T853] IPVS: starting estimator thread 0... [ 112.222418][ T6570] IPVS: using max 31 ests per chain, 74400 per kthread [ 112.803850][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 113.120675][ T6603] syzkaller0: entered promiscuous mode [ 113.151930][ T6603] syzkaller0: entered allmulticast mode [ 113.309342][ T6613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.137'. [ 113.394530][ T6603] tipc: Started in network mode [ 113.399556][ T6603] tipc: Node identity ce95d80b014, cluster identity 4711 [ 113.423517][ T6603] tipc: Enabled bearer , priority 0 [ 113.445081][ T6602] tipc: Resetting bearer [ 113.446618][ T6618] af_packet: tpacket_rcv: packet too big, clamped from 252 to 4294967272. macoff=96 [ 113.593400][ T6602] tipc: Disabling bearer [ 114.290246][ T6643] syz.2.142 (6643) used greatest stack depth: 17656 bytes left [ 114.774661][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 114.885294][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 114.886644][ T67] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.982913][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 114.992849][ T67] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.004514][ T6680] syzkaller0: entered promiscuous mode [ 115.010111][ T6680] syzkaller0: entered allmulticast mode [ 115.039035][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 115.092808][ T67] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.179702][ T67] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.233456][ T6687] syzkaller0: entered promiscuous mode [ 115.260652][ T6687] syzkaller0: entered allmulticast mode [ 116.214050][ T6730] xt_hashlimit: size too large, truncated to 1048576 [ 117.007080][ T6771] netlink: 'syz.3.173': attribute type 2 has an invalid length. [ 117.156222][ T6771] : entered promiscuous mode [ 117.455388][ T6773] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 117.482419][ T6773] syzkaller0: entered promiscuous mode [ 117.488467][ T6773] syzkaller0: entered allmulticast mode [ 119.236850][ T6797] netlink: 'syz.0.179': attribute type 10 has an invalid length. [ 119.253682][ T6809] tipc: Started in network mode [ 119.258611][ T6809] tipc: Node identity ea383c2f7596, cluster identity 4711 [ 119.269361][ T6809] tipc: Enabled bearer , priority 0 [ 119.289912][ T6810] syzkaller0: entered promiscuous mode [ 119.300466][ T6824] nbd: couldn't find device at index 809004142 [ 119.305578][ T6810] syzkaller0: entered allmulticast mode [ 119.334582][ T6828] __nla_validate_parse: 6 callbacks suppressed [ 119.334601][ T6828] netlink: 120 bytes leftover after parsing attributes in process `syz.2.182'. [ 119.351897][ T6828] netlink: 120 bytes leftover after parsing attributes in process `syz.2.182'. [ 119.383931][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 119.492052][ T6823] tipc: Resetting bearer [ 119.580490][ T6823] tipc: Disabling bearer [ 119.783871][ T6846] netlink: 'syz.4.188': attribute type 2 has an invalid length. [ 119.906291][ T6846] : entered promiscuous mode [ 119.914114][ T6858] netlink: 584 bytes leftover after parsing attributes in process `syz.0.187'. [ 120.310406][ T6870] x_tables: unsorted entry at hook 3 [ 120.607105][ T6880] netlink: 124 bytes leftover after parsing attributes in process `syz.0.194'. [ 120.718257][ T6889] netlink: 96 bytes leftover after parsing attributes in process `syz.2.196'. [ 120.912956][ T6893] netlink: 184056 bytes leftover after parsing attributes in process `syz.0.198'. [ 121.546563][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 122.475182][ T6939] vxcan3: entered allmulticast mode [ 122.912556][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 123.080920][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.215'. [ 123.305551][ T6971] veth5: entered allmulticast mode [ 124.148332][ T7001] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 124.338437][ T7018] syz_tun: entered promiscuous mode [ 124.360697][ T7018] macvtap1: entered promiscuous mode [ 124.377923][ T7018] macvtap1: entered allmulticast mode [ 124.398043][ T7018] syz_tun: entered allmulticast mode [ 124.443663][ T7018] syz_tun: left allmulticast mode [ 124.460186][ T7018] syz_tun: left promiscuous mode [ 124.477957][ T7026] __nla_validate_parse: 6 callbacks suppressed [ 124.477976][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 124.509915][ T7024] netlink: 56 bytes leftover after parsing attributes in process `syz.2.230'. [ 124.653760][ T7023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.229'. [ 124.805924][ T7036] openvswitch: netlink: IP tunnel dst address not specified [ 125.440993][ T6149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.469257][ T6149] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.541965][ T6149] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.595955][ T7062] Bluetooth: MGMT ver 1.23 [ 125.678314][ T6149] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.690916][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 126.425364][ T7095] xt_hashlimit: size too large, truncated to 1048576 [ 126.576592][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 126.813726][ T7116] netlink: 'syz.0.245': attribute type 2 has an invalid length. [ 126.833028][ T7115] netlink: 'syz.1.248': attribute type 1 has an invalid length. [ 126.935678][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'. [ 127.047162][ T7116] : entered promiscuous mode [ 127.165051][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.250'. [ 127.570514][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 127.662376][ T5836] Bluetooth: hci2: command 0x0401 tx timeout [ 127.668771][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 127.933669][ T7144] tipc: Enabling of bearer rejected, failed to enable media [ 128.425978][ T7163] netlink: 36 bytes leftover after parsing attributes in process `syz.0.255'. [ 128.445264][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 128.605430][ T7169] veth0: entered promiscuous mode [ 128.713153][ T7172] veth0: left promiscuous mode [ 128.832799][ T7175] veth1_to_bond: entered allmulticast mode [ 128.995323][ T7179] veth1_to_bond: left allmulticast mode [ 129.192225][ T7188] netlink: 'syz.1.262': attribute type 6 has an invalid length. [ 129.207664][ T7188] netlink: 'syz.1.262': attribute type 5 has an invalid length. [ 129.257315][ T7185] syzkaller0: entered promiscuous mode [ 129.282138][ T7185] syzkaller0: entered allmulticast mode [ 129.394847][ T7185] tipc: Started in network mode [ 129.400038][ T7185] tipc: Node identity b6da56028c5f, cluster identity 4711 [ 129.457001][ T7185] tipc: Enabled bearer , priority 0 [ 129.482794][ T7192] __nla_validate_parse: 5 callbacks suppressed [ 129.482812][ T7192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.261'. [ 129.533814][ T7183] tipc: Resetting bearer [ 129.580126][ T7183] tipc: Disabling bearer [ 130.054146][ T7212] netlink: 104 bytes leftover after parsing attributes in process `syz.4.263'. [ 130.773067][ T7237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.275'. [ 131.905167][ T7290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.285'. [ 132.263829][ T7304] ip6t_srh: unknown srh invflags BA61 [ 132.754915][ T7312] netlink: 63 bytes leftover after parsing attributes in process `syz.2.290'. [ 132.845297][ T7320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.292'. [ 133.122078][ T30] audit: type=1107 audit(1765796150.920:2): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='H' [ 133.267549][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.276192][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.428313][ T7350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'. [ 133.567186][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.305'. [ 134.157848][ T7387] netlink: 'syz.2.311': attribute type 4 has an invalid length. [ 134.490978][ T7367] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.507920][ T7367] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.812844][ T7394] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 134.870207][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.878918][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.122232][ T7386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.146918][ T7386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.553002][ T7401] syz0: Port: 1 Link DOWN [ 135.647522][ T7367] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.711348][ T7367] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.779958][ T3497] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.876898][ T7418] Illegal XDP return value 68 on prog (id 90) dev N/A, expect packet loss! [ 135.888926][ T7367] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.907854][ T7367] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.945560][ T3497] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.998716][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.318'. [ 136.139827][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.319'. [ 136.214303][ T3497] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.283026][ T7432] netlink: 'syz.4.319': attribute type 1 has an invalid length. [ 136.294392][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.320'. [ 136.311880][ T7432] netlink: 224 bytes leftover after parsing attributes in process `syz.4.319'. [ 136.434475][ T7430] netlink: 56 bytes leftover after parsing attributes in process `syz.4.319'. [ 136.562925][ T7367] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.593101][ T7367] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.646384][ T3497] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.782963][ T7440] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 136.908017][ T7430] bond1 (unregistering): Released all slaves [ 137.105335][ T7439] pimreg: tun_chr_ioctl cmd 1074025680 [ 137.343394][ T7447] RDS: rds_bind could not find a transport for fe80::25, load rds_tcp or rds_rdma? [ 137.382528][ T7445] RDS: rds_bind could not find a transport for fe80::25, load rds_tcp or rds_rdma? [ 137.405396][ T67] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.415348][ T67] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.436500][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 137.550537][ T67] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.576737][ T67] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.607517][ T7457] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 137.623608][ T5934] IPVS: starting estimator thread 0... [ 137.658364][ T7455] gretap1: entered promiscuous mode [ 137.692956][ T7455] batman_adv: batadv0: Adding interface: gretap1 [ 137.699593][ T7455] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.722442][ T7463] netlink: 68 bytes leftover after parsing attributes in process `syz.4.326'. [ 137.736337][ T7460] IPVS: using max 25 ests per chain, 60000 per kthread [ 137.749673][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.326'. [ 137.761204][ T7463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.326'. [ 137.767515][ T7455] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 137.783380][ T67] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.805149][ T67] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.901570][ T7465] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 137.918524][ T67] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.928428][ T67] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.010733][ T7465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.169872][ T7470] bond1: (slave veth3): Enslaving as an active interface with a down link [ 138.241423][ T7471] vlan2: entered allmulticast mode [ 138.249004][ T7471] veth1: entered allmulticast mode [ 138.257018][ T7471] veth1: entered promiscuous mode [ 138.265748][ T7471] veth1: left promiscuous mode [ 138.274054][ T7471] bond1: (slave vlan2): making interface the new active one [ 138.283248][ T7471] veth1: entered promiscuous mode [ 138.289193][ T7471] vlan2: entered promiscuous mode [ 138.300141][ T7471] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 138.959283][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 139.059828][ T7515] netlink: 'syz.1.340': attribute type 11 has an invalid length. [ 140.977870][ T7539] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 141.041761][ T7539] __nla_validate_parse: 3 callbacks suppressed [ 141.041782][ T7539] netlink: 244 bytes leftover after parsing attributes in process `syz.3.346'. [ 141.474874][ T7556] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 141.724039][ T7560] bond1: (slave bridge2): making interface the new active one [ 141.766392][ T7560] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 141.919558][ T7566] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.354'. [ 142.154119][ T52] Bluetooth: hci2: link tx timeout [ 142.182410][ T52] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.193553][ T52] Bluetooth: hci2: link tx timeout [ 142.198918][ T52] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.222241][ T52] Bluetooth: hci2: link tx timeout [ 142.227711][ T52] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.236930][ T52] Bluetooth: hci2: link tx timeout [ 142.242383][ T52] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.756408][ T7592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.360'. [ 143.974122][ T7635] netlink: 'syz.2.369': attribute type 5 has an invalid length. [ 144.062416][ T7637] IPVS: Scheduler module ip_vs_sip not found [ 144.223596][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 144.489606][ T7652] dvmrp1: entered allmulticast mode [ 144.502340][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.374'. [ 144.923402][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.380'. [ 145.096794][ T7661] tc_dump_action: action bad kind [ 145.377987][ T7679] netlink: 'syz.1.382': attribute type 4 has an invalid length. [ 146.051983][ T7702] vlan3: entered allmulticast mode [ 146.068021][ T7702] bridge0: port 3(vlan3) entered blocking state [ 146.088462][ T7702] bridge0: port 3(vlan3) entered disabled state [ 146.105392][ T7702] vlan3: entered promiscuous mode [ 146.611915][ T7715] netlink: 56 bytes leftover after parsing attributes in process `syz.1.392'. [ 146.659508][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 146.689932][ T7720] netlink: 7 bytes leftover after parsing attributes in process `syz.1.392'. [ 147.760318][ T7744] syzkaller0: entered promiscuous mode [ 147.784918][ T7744] syzkaller0: entered allmulticast mode [ 147.826408][ T7748] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 148.807341][ T7782] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 149.029564][ T7794] syzkaller0: entered promiscuous mode [ 149.071839][ T7794] syzkaller0: entered allmulticast mode [ 149.173010][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 149.197569][ T7804] netlink: 64 bytes leftover after parsing attributes in process `syz.0.419'. [ 149.224546][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 149.224546][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 149.337188][ T7812] tipc: Enabled bearer , priority 0 [ 149.354345][ T7807] syzkaller0: entered promiscuous mode [ 149.384539][ T7807] syzkaller0: entered allmulticast mode [ 149.415351][ T7814] netlink: 64 bytes leftover after parsing attributes in process `syz.0.420'. [ 149.492036][ T6433] vlan2: left promiscuous mode [ 149.553452][ T7812] tipc: Resetting bearer [ 149.688563][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 149.698088][ T7823] netlink: 72 bytes leftover after parsing attributes in process `syz.4.422'. [ 150.015586][ T7801] tipc: Resetting bearer [ 150.048963][ T7801] tipc: Disabling bearer [ 150.300953][ T7840] xt_limit: Overflow, try lower: 271964/0 [ 150.551883][ T7848] tipc: Enabling of bearer rejected, failed to enable media [ 151.337137][ T7881] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 151.348245][ T7883] raw_sendmsg: syz.1.438 forgot to set AF_INET. Fix it! [ 151.676325][ T7898] tipc: Enabling of bearer rejected, failed to enable media [ 151.872957][ T7909] netlink: 'syz.2.445': attribute type 12 has an invalid length. [ 152.510613][ T7919] bridge_slave_0: entered promiscuous mode [ 152.664991][ T7929] syzkaller0: entered promiscuous mode [ 152.703381][ T7929] syzkaller0: entered allmulticast mode [ 153.021173][ T7927] syzkaller0: entered promiscuous mode [ 153.042080][ T7927] syzkaller0: entered allmulticast mode [ 153.162884][ T7968] __nla_validate_parse: 4 callbacks suppressed [ 153.162906][ T7968] netlink: 44 bytes leftover after parsing attributes in process `syz.3.452'. [ 154.933468][ T7985] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 155.893283][ T8019] netlink: 10 bytes leftover after parsing attributes in process `syz.3.466'. [ 156.266327][ T8050] netlink: 'syz.2.470': attribute type 2 has an invalid length. [ 156.434168][ T8053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.454706][ T8053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.463864][ T7409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.495934][ T8053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.589919][ T8060] netlink: 84 bytes leftover after parsing attributes in process `syz.4.472'. [ 156.602058][ T8060] netlink: 175 bytes leftover after parsing attributes in process `syz.4.472'. [ 156.621169][ T8051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.639814][ T8051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog Connection to 10.128.0.215 closed by remote host. [ 156.943435][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.029182][ T7405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.720273][ T6428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.732286][ T6428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.845874][ T6428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.856752][ T7997] ================================================================== [ 157.865253][ T7997] BUG: KASAN: use-after-free in __mutex_lock+0x801/0x1350 [ 157.868170][ T6428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.872597][ T7997] Read of size 8 at addr ffff888023b480a8 by task khidpd_15c25886/7997 [ 157.872617][ T7997] [ 157.872630][ T7997] CPU: 0 UID: 0 PID: 7997 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) [ 157.872650][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.872661][ T7997] Call Trace: [ 157.872671][ T7997] [ 157.872679][ T7997] dump_stack_lvl+0x189/0x250 [ 157.872700][ T7997] ? __kasan_check_byte+0x12/0x40 [ 157.872723][ T7997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.872740][ T7997] ? lock_release+0x4b/0x3b0 [ 157.872759][ T7997] ? __virt_addr_valid+0x4a5/0x5c0 [ 157.872780][ T7997] print_report+0xca/0x240 [ 157.872796][ T7997] ? __mutex_lock+0x801/0x1350 [ 157.872815][ T7997] kasan_report+0x118/0x150 [ 157.872837][ T7997] ? __mutex_lock+0x801/0x1350 [ 157.872860][ T7997] __mutex_lock+0x801/0x1350 [ 157.872883][ T7997] ? __mutex_lock+0x5bb/0x1350 [ 157.872904][ T7997] ? l2cap_unregister_user+0x6a/0x1b0 [ 157.872928][ T7997] ? __pfx___mutex_lock+0x10/0x10 [ 157.872952][ T7997] ? __pfx___timer_delete_sync+0x10/0x10 [ 157.872971][ T7997] l2cap_unregister_user+0x6a/0x1b0 [ 157.872994][ T7997] hidp_session_thread+0x3c9/0x410 [ 157.873011][ T7997] ? __pfx_hidp_session_thread+0x10/0x10 [ 157.873025][ T7997] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 157.873044][ T7997] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 157.873062][ T7997] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 157.873077][ T7997] ? __kthread_parkme+0x7b/0x200 [ 157.873094][ T7997] ? __kthread_parkme+0x1a1/0x200 [ 157.873112][ T7997] kthread+0x711/0x8a0 [ 157.873132][ T7997] ? __pfx_hidp_session_thread+0x10/0x10 [ 157.873147][ T7997] ? __pfx_kthread+0x10/0x10 [ 157.873165][ T7997] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.873183][ T7997] ? lockdep_hardirqs_on+0x98/0x140 [ 157.873202][ T7997] ? __pfx_kthread+0x10/0x10 [ 157.873220][ T7997] ret_from_fork+0x599/0xb30 [ 157.873245][ T7997] ? __pfx_ret_from_fork+0x10/0x10 [ 157.873271][ T7997] ? __switch_to_asm+0x39/0x70 [ 157.873288][ T7997] ? __switch_to_asm+0x33/0x70 [ 157.873306][ T7997] ? __pfx_kthread+0x10/0x10 [ 157.873324][ T7997] ret_from_fork_asm+0x1a/0x30 [ 157.873349][ T7997] [ 157.873355][ T7997] [ 158.108489][ T7997] The buggy address belongs to the physical page: [ 158.115072][ T7997] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023b4ba80 pfn:0x23b48 [ 158.125225][ T7997] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 158.132425][ T7997] raw: 00fff00000000000 ffffea0001579108 ffff8880b8940ac0 0000000000000000 [ 158.141457][ T7997] raw: ffff888023b4ba80 0000000000000000 00000000ffffffff 0000000000000000 [ 158.150442][ T7997] page dumped because: kasan: bad access detected [ 158.156875][ T7997] page_owner tracks the page as freed [ 158.162273][ T7997] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5833, tgid 5833 (syz-executor), ts 87479214637, free_ts 157848780264 [ 158.180335][ T7997] post_alloc_hook+0x234/0x290 [ 158.185541][ T7997] get_page_from_freelist+0x2365/0x2440 [ 158.191264][ T7997] __alloc_frozen_pages_noprof+0x181/0x370 [ 158.197247][ T7997] alloc_pages_mpol+0x232/0x4a0 [ 158.202107][ T7997] ___kmalloc_large_node+0x4e/0x100 [ 158.208386][ T7997] __kmalloc_large_node_noprof+0x18/0x90 [ 158.214239][ T7997] __kmalloc_noprof+0x4bd/0x800 [ 158.219204][ T7997] hci_alloc_dev_priv+0x28/0x2060 [ 158.224614][ T7997] vhci_create_device+0x120/0x650 [ 158.229735][ T7997] vhci_write+0x3ce/0x4a0 [ 158.234329][ T7997] vfs_write+0x5c9/0xb30 [ 158.238765][ T7997] ksys_write+0x145/0x250 [ 158.243359][ T7997] do_syscall_64+0xfa/0xf80 [ 158.247966][ T7997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.253885][ T7997] page last free pid 8049 tgid 8042 stack trace: [ 158.260442][ T7997] __free_frozen_pages+0xbc4/0xd30 [ 158.266106][ T7997] bt_host_release+0x82/0x90 [ 158.270981][ T7997] device_release+0x9e/0x1d0 [ 158.275939][ T7997] kobject_put+0x228/0x480 [ 158.280453][ T7997] vhci_release+0x15a/0x1a0 [ 158.284961][ T7997] __fput+0x44c/0xa70 [ 158.288944][ T7997] task_work_run+0x1d4/0x260 [ 158.293555][ T7997] do_exit+0x6c5/0x2310 [ 158.297921][ T7997] do_group_exit+0x21c/0x2d0 [ 158.302701][ T7997] get_signal+0x1285/0x1340 [ 158.307293][ T7997] arch_do_signal_or_restart+0x9a/0x7a0 [ 158.313191][ T7997] exit_to_user_mode_loop+0x87/0x4f0 [ 158.318764][ T7997] do_syscall_64+0x2e3/0xf80 [ 158.323559][ T7997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.329716][ T7997] [ 158.332138][ T7997] Memory state around the buggy address: [ 158.338058][ T7997] ffff888023b47f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 158.346478][ T7997] ffff888023b48000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 158.355524][ T7997] >ffff888023b48080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 158.364128][ T7997] ^ [ 158.369938][ T7997] ffff888023b48100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 158.378259][ T7997] ffff888023b48180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 158.386327][ T7997] ================================================================== [ 158.395570][ T7997] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 158.403320][ T7997] CPU: 0 UID: 0 PID: 7997 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) [ 158.414457][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.424790][ T7997] Call Trace: [ 158.428084][ T7997] [ 158.431463][ T7997] dump_stack_lvl+0x99/0x250 [ 158.436151][ T7997] ? __asan_memcpy+0x40/0x70 [ 158.440754][ T7997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.446259][ T7997] ? __pfx__printk+0x10/0x10 [ 158.451327][ T7997] vpanic+0x237/0x6d0 [ 158.455674][ T7997] ? __pfx_vpanic+0x10/0x10 [ 158.460481][ T7997] panic+0xb9/0xc0 [ 158.464293][ T7997] ? __pfx_panic+0x10/0x10 [ 158.468987][ T7997] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 158.475236][ T7997] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 158.481460][ T7997] ? __mutex_lock+0x801/0x1350 [ 158.486339][ T7997] check_panic_on_warn+0x89/0xb0 [ 158.491549][ T7997] ? __mutex_lock+0x801/0x1350 [ 158.496412][ T7997] end_report+0x6f/0x140 [ 158.500856][ T7997] kasan_report+0x129/0x150 [ 158.505579][ T7997] ? __mutex_lock+0x801/0x1350 [ 158.510924][ T7997] __mutex_lock+0x801/0x1350 [ 158.515723][ T7997] ? __mutex_lock+0x5bb/0x1350 [ 158.520778][ T7997] ? l2cap_unregister_user+0x6a/0x1b0 [ 158.526451][ T7997] ? __pfx___mutex_lock+0x10/0x10 [ 158.531677][ T7997] ? __pfx___timer_delete_sync+0x10/0x10 [ 158.537591][ T7997] l2cap_unregister_user+0x6a/0x1b0 [ 158.543156][ T7997] hidp_session_thread+0x3c9/0x410 [ 158.548380][ T7997] ? __pfx_hidp_session_thread+0x10/0x10 [ 158.554875][ T7997] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 158.561262][ T7997] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 158.567985][ T7997] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 158.575055][ T7997] ? __kthread_parkme+0x7b/0x200 [ 158.580382][ T7997] ? __kthread_parkme+0x1a1/0x200 [ 158.585617][ T7997] kthread+0x711/0x8a0 [ 158.590328][ T7997] ? __pfx_hidp_session_thread+0x10/0x10 [ 158.596569][ T7997] ? __pfx_kthread+0x10/0x10 [ 158.601515][ T7997] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.606953][ T7997] ? lockdep_hardirqs_on+0x98/0x140 [ 158.612529][ T7997] ? __pfx_kthread+0x10/0x10 [ 158.617418][ T7997] ret_from_fork+0x599/0xb30 [ 158.622659][ T7997] ? __pfx_ret_from_fork+0x10/0x10 [ 158.627906][ T7997] ? __switch_to_asm+0x39/0x70 [ 158.633050][ T7997] ? __switch_to_asm+0x33/0x70 [ 158.638008][ T7997] ? __pfx_kthread+0x10/0x10 [ 158.642792][ T7997] ret_from_fork_asm+0x1a/0x30 [ 158.648064][ T7997] [ 158.651804][ T7997] Kernel Offset: disabled [ 158.656430][ T7997] Rebooting in 86400 seconds..