last executing test programs: 7.141133018s ago: executing program 2 (id=372): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x16, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9b3d}, @generic={0x5, 0x9, 0xd, 0x6, 0x4}, @ldst={0x2, 0x0, 0x4, 0xc, 0x1, 0xffffffffffffffc0, 0xffffffffffffffff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ldst={0x3, 0x2, 0x0, 0x6, 0x0, 0x8}, @generic={0x4, 0x5, 0xc, 0x1, 0x1ff}, @exit, @ringbuf_query, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x1, 0x3, 0x2, 0xd, 0x1, 0x10}], &(0x7f00000000c0)='syzkaller\x00', 0xa56, 0x70, &(0x7f0000000100)=""/112, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xa, 0xac}, 0x10, 0x2d4e8, 0xffffffffffffffff, 0x6, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x4, 0x6, 0x9}, {0x5, 0x2, 0x5, 0x2}, {0x0, 0x5, 0xc, 0x3}, {0x4, 0x5, 0xb, 0x7}, {0x1, 0x4, 0x8, 0x6}, {0x5, 0x2, 0x3, 0x4}], 0x10, 0x5, @void, @value}, 0x94) ioctl$int_in(r1, 0x5421, &(0x7f0000000380)=0x8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000003c0)={@local, @broadcast, 0xffffffffffffffff, "e2a82cd6c1ea1486340ef1a9e092e071e812a330c0adfb246d45abb8f6b050f9", 0x3, 0x8, 0x4, 0x6}, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7, 0x8, 0x5c36, 0x1c040, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xb, @value, @void, @value}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000480)={r2, 0x871d, 0xaeb, 0x3}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x3, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x79, 0x0, 0x40}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x3}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x31, 0x1}, @volatile={0x4, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x2e]}}, &(0x7f00000007c0)=""/152, 0x6b, 0x98, 0x1, 0x7, 0x0, @void, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x8813, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x18, r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)='%pI4 \x00'}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x25, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0xa9, 0xe8, &(0x7f0000000640)=""/232, 0x41100, 0x18, '\x00', 0x0, @sk_lookup, r5, 0x8, &(0x7f00000008c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0xc, 0x8, 0x6}, 0x10, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000ec0)=[r8, r9, 0xffffffffffffffff, r10, r11], &(0x7f0000000f00)=[{0x2, 0x1, 0x10}, {0x2, 0x3, 0x2, 0x3}, {0x3, 0x5, 0xd, 0x3}, {0x4, 0x2, 0x2, 0x7}, {0x3, 0x1, 0x2}, {0x4, 0x2, 0x8, 0x1}], 0x10, 0xbfdf, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r3, 0xffffffffffffffff}, &(0x7f0000001040), &(0x7f0000001080)=r1}, 0x20) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000001100)={@multicast1, @multicast2, 0x1, "124d009b74dfac264d8f988858d14eea2953dd19304381acb61cfa458c1b753f", 0x1, 0x10, 0x7, 0x40}, 0x3c) bind$inet(r0, &(0x7f0000001140)={0x2, 0x4e23, @local}, 0x10) r14 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001180), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000011c0)={r14, r1, 0x0, r12}, 0x10) socket$igmp(0x2, 0x3, 0x2) r15 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r15, 0x10e, 0x7, &(0x7f0000001200)={0xb6a, 0x3, 0xc, 0x5}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001240)=r7, 0x4) socketpair(0x8, 0x6, 0x7, &(0x7f0000001280)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0x22, &(0x7f0000001300)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb4e0}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x1, 0x2, 0x1, 0x9, 0x7, 0x80, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x2, 0x1, 0x0, r13}], &(0x7f0000001440)='syzkaller\x00', 0x7, 0xd2, &(0x7f0000001480)=""/210, 0x40f00, 0x2, '\x00', r6, 0x0, r4, 0x8, &(0x7f0000001580)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000015c0)=[r10], &(0x7f0000001600)=[{0x3, 0x4}, {0x1, 0x1, 0x8, 0xa}, {0x0, 0x1, 0x4, 0xe}, {0x1, 0x5, 0x6, 0x3}, {0x1, 0x1, 0xe, 0x8}, {0x5, 0x5, 0x7, 0xb}, {0x5, 0x2, 0x2, 0x7}, {0x4, 0x1, 0x6}], 0x10, 0x7, @void, @value}, 0x94) r16 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000001740)=@int=0x2, 0x4) setsockopt$sock_attach_bpf(r16, 0x1, 0x32, &(0x7f0000001780)=r12, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 6.994865051s ago: executing program 4 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000c70aeef48b4d1380035a9c493e0150000", @ANYRES16=r1, @ANYBLOB="00082abd7000ffdbdf2512000000080008000c0000000800080008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a1bc", 0x1c, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, {[], {{0x8, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, ';.;S'}]}}}}}}}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0]}}, 0x0, 0x2f, 0x0, 0xb, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r5, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xf}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 6.878942349s ago: executing program 2 (id=375): syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x40800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000008500", @ANYBLOB="0000000000000000b7080000000000007b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000a00)="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", &(0x7f0000000200)=@udp6=r3, 0x4}, 0x20) 6.766666271s ago: executing program 4 (id=376): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x13c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xb, 0x7, 0x6c, 0x9}, {0x8, 0xc, 0x7, 0xffffffff}, {0x0, 0x80, 0x2, 0x38e}, {0x7, 0x80, 0xd, 0x4}, {0x0, 0x0, 0x4d, 0x8}, {0xff, 0x2, 0x0, 0x3}, {0x2, 0xc, 0x5, 0x557a7dc1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x28805) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000feffffff1c0000000a0004007770616e300000000800010086171633080003"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000002000000002da49b76b21e29415bfd0000000100000300000000000000000000f2d123101038f0830000000000000000"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x5}]}}]}, 0x48}}, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r6, &(0x7f0000000400), &(0x7f00000004c0)=0x6e, 0x800) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080029bd7000fbdbdf2508000000440001801400020076657468305f766972745f776966690008000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r11, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="01000000627168611a96a14cd132ccd8eee615bf9a4fa204698565a7e3311ee02eaedca4312f00c6e0279d32ec291a18d9cfe6751db3c55a47e7610b5f6340633b6a9d875046e32a52306c7c762d2dfd0600d5605ee972e7ef9d2167638cbe69d95227cb22adc920c2150633704314ffdf6545e60dbf7edb450fbff346f192f40f8062365b780cfd8a9fe57967124d64080130af0b8d868692a4dd14e7e7960a4e65dab238f3fac749a1b0bac96ec57b55bac34785b2de9063460b292feec70f6dae7793e63507f9650bc19d6297971726d5b6", @ANYRES16=r12, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x24008894}, 0x4000) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 6.577111943s ago: executing program 4 (id=380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES8=0x0, @ANYRES32=r2, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES8=0x0, @ANYRES32=r2, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) (async) 4.313942272s ago: executing program 4 (id=380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES8=0x0, @ANYRES32=r2, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES8=0x0, @ANYRES32=r2, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) (async) 2.488140075s ago: executing program 0 (id=416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201200001c00128009000100626f2b0e000000000c00028005001500010000000a032ccfc6434ad0b39a2b9d75d93c70f60e958717a52e04ea4bc3f113d589be4df0af51278fea793f09c6fc070153d5bd17de19e9bd636ffb09f5498448d20c24d703ba8772d74903b8f01958f676ced9f134b8bc37b37817b57f7cd7cd9263b3cd50a84ef37a5da354834ebcce18209ea15024cb8ce5b3bf2b985b044c09"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = getpid() r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r3, 0x0, 0x0, 0x0, 0x0}, 0x30) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280080002400000000f08000240000000060800014000000014080001400000000d05000300000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x10011, 0x2, 0x2, 0x7, 0xc}, 0x20) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r6, 0x8b32, &(0x7f0000000040)) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/time\x00') r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0xb, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010425bbe5ad8300d1faf127842cf52300ff5d0000196ad161dc860ae49b33e065ee19b0acfb9202b19a71851464e16da47172923056511b0080611a3eb59ef00a2eab079961177debad55dd9f1fd053edcfd6741f5fe69c39ff605277", @ANYRES8=r4, @ANYRESHEX=r4], 0x50}}, 0x4000000) 2.213819495s ago: executing program 0 (id=419): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$packet(0x11, 0x2, 0x300) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000001a40), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYRES8, @ANYRES64=r2, @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x884) r4 = socket(0x2000000015, 0x80005, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x114, 0x71, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x20004084) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@gettfilter={0x2c, 0x2e, 0x0, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xc}, {0x8, 0xe}, {0xf, 0x2}}, [{0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48019}, 0x880) 2.071454695s ago: executing program 0 (id=422): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000020000000400000004"], 0x48) close(0x3) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x200, 0x4) sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x24040000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/156, 0x9c}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f00000002c0)=""/210, 0xd2}], 0x6}, 0x1}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000300000000", @ANYRES32=0x0, @ANYBLOB="0000000020000000240012800b00010062726964676500001400028005002500000000000500260000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1.907196558s ago: executing program 1 (id=423): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x15, 0x8, 0xc, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYRESDEC=r0], 0x68}, 0x9}, 0x0) socket(0x29, 0x4, 0x89c5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073110b86000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$packet(0x11, 0x3, 0x300) 1.861837366s ago: executing program 4 (id=380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES8=0x0, @ANYRES32=r2, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES8=0x0, @ANYRES32=r2, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) (async) 1.829610131s ago: executing program 1 (id=424): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000340)=@ethtool_coalesce={0xe, 0xfffff800, 0x7, 0x8000, 0x401, 0x8, 0x0, 0x777, 0x9, 0xb, 0x4, 0x8462, 0x3, 0x3, 0x6522f4db, 0x3, 0x400, 0xd, 0xfff, 0x3ff, 0x9, 0x5, 0x7}}) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) (async) listen(r1, 0x0) (async) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x140d, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x10028004) socket(0xb, 0x2, 0x7) 1.391608822s ago: executing program 0 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0x70f, 0x0, 0x0, {{}, {@void, @val={0x8, 0xe}, @val={0xc, 0x99, {0x0, 0x39}}}}}, 0x28}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r4, 0x1, 0xda, 0x6, @remote}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="aac005386cadca127bc705598ad83f4ad6f61b6f2c81d4721c086d34237ab0e8bcc401a71ac4e6b04540000200000000000046f77f8899664629317099bcf1029b4f1c2ae018e195e3c835852598107aea347724cce03b9563759544bff8aba4986b2f6ffbc163355261c84dee8d21ff070000c9325bc5f3ed181e3d0a69dd7cd8e5f380cbd10bff976543bdd700000000"], 0x40}}, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="09000000010001", 0x7) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0) recvmmsg(r8, &(0x7f0000002600)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/158, 0x9e}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f0000000340)=""/28, 0x1c}, {&(0x7f0000000380)=""/175, 0xaf}], 0x6, &(0x7f00000004c0)=""/86, 0x56}, 0x5}, {{&(0x7f0000000540)=@sco={0x1f, @none}, 0x80, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/1, 0x1}], 0x3}, 0x6}, {{&(0x7f0000000840)=@generic, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/198, 0xc6}, {&(0x7f00000009c0)=""/38, 0x26}, {&(0x7f0000000a00)=""/83, 0x53}, {&(0x7f0000000a80)=""/30, 0x1e}], 0x4, &(0x7f00000027c0)=""/212, 0xfffffffffffffee3}, 0x63}, {{&(0x7f0000000c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=""/76, 0x4c}, 0xffffffff}, {{&(0x7f0000000d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000dc0)=""/220, 0xdc}, {&(0x7f0000000ec0)=""/9, 0x9}, {&(0x7f0000000f00)=""/59, 0x3b}, {&(0x7f0000000f40)=""/130, 0x82}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/73, 0x49}, {&(0x7f0000002080)=""/51, 0x33}, {&(0x7f00000020c0)=""/166, 0xa6}, {&(0x7f0000002180)=""/37, 0x25}], 0x9}, 0x5}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002280)=""/111, 0x6f}, {&(0x7f0000002300)=""/83, 0x53}, {&(0x7f0000002380)=""/70, 0x46}, {&(0x7f0000002400)=""/60, 0x3c}, {&(0x7f0000002440)=""/55, 0x37}, {&(0x7f0000002480)=""/122, 0x7a}], 0x6, &(0x7f0000002580)=""/99, 0x63}, 0xfffffffc}], 0x6, 0x40, &(0x7f0000002780)) 1.390997628s ago: executing program 1 (id=426): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@del={0xf8, 0x11, 0x800, 0x70bd28, 0x25dfdbfd, {{'ctr(blowfish)\x00'}, '\x00', '\x00', 0x400, 0x2400}, [{0x8, 0x1, 0x81}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x3}]}, 0xf8}}, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 1.202972279s ago: executing program 1 (id=428): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) (async) setsockopt(r3, 0x1, 0x3e, &(0x7f0000000200)="07b52866", 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "0000e3ffffff6331ce5db6ba62d46a00"}}}]}, 0x48}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 1.123460287s ago: executing program 0 (id=430): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000240)={0x1f, @none}, 0x8) close(r0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1fffe}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048800}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 999.23095ms ago: executing program 1 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x100) r1 = socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_GET_SCAN(r1, 0x0, 0x8000) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000a000000270000000800270000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20800}, 0x0) 934.972192ms ago: executing program 0 (id=433): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r1, 0x0, r4, 0x0, 0x1100000000f336, 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x9) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x101, 0xfffd, 0x4}, 0xc) listen(r7, 0x7) writev(r6, &(0x7f00000033c0)=[{&(0x7f0000000140)='M', 0x1}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000540)=[{0x1, 0x1, 0xd, 0xa}, {0x3, 0x4, 0xe, 0x7}, {0x5, 0x4, 0x2, 0xa}, {0x2, 0x2, 0xc, 0x6}, {0x2, 0x3, 0x2}, {0x5, 0x3, 0x3, 0x4}, {0x1, 0x4, 0x2, 0x3}], 0x10, 0x800, @void, @value}, 0x94) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRESDEC, @ANYBLOB="080001"], 0x30}, 0x1, 0x0, 0x0, 0x4040805}, 0x0) 801.328897ms ago: executing program 3 (id=434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x6008, r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000480)="b8ade15020b4fe275434443e8a7bf22dad295ad6d6c96f65e3a0db1234a7cac1ea6838d32592c00fcb5451a44e19df2a81c0e811469574a9491972d44cf488ff1e3729bfce3a5a5f356b29b85aabb16abc9ae23350af4873414fb3ac984a7f8bfea7c7c94b961b5c43566a42cf114d05e5ff0e955c34a85f534e564545bfd79872c8e7692603c7a1e0f82c9bf2589f6800404fe7aca60ebf11847f7ddab8d1ed9e972e7eba7ced23e8a26ff653ede612b384e8a8638ee947042390f7e64ab50989dfe8031ca89d843158dc481d0cd817957d8efde4e101702f8a7b379c5cfe", &(0x7f0000000580)=""/216, 0x4}, 0x20) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x891b, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 656.663891ms ago: executing program 3 (id=435): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1c0, 0x240, 0x240, 0x1c0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x12030000}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401fd, @void, @value}, 0x94) 521.598147ms ago: executing program 2 (id=436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x1}}}}, 0x30}}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x854}, 0x1000) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x100000) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) 515.079621ms ago: executing program 3 (id=437): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}], 0x28}}], 0x2, 0x4001c00) 379.151368ms ago: executing program 2 (id=438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0xe0}}, 0x44010) 377.980028ms ago: executing program 3 (id=439): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xe72, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3fad77b7b3f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0xd, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) 352.563435ms ago: executing program 3 (id=440): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20, 'TRACE\x00', 0xe}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000056000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x9f) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x14, 0x4, "5de2151644f052568753d813225e3acf"}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet(r0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20, 'TRACE\x00', 0xe}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000056000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x9f) (async) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x14, 0x4, "5de2151644f052568753d813225e3acf"}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) 293.788155ms ago: executing program 2 (id=441): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000080)={0x594, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x188, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa59}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb4c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x638}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x367a5f3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63dc05dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7733}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53ebbd09}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38cc87a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa5a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x631caf3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1be3e3c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb0c0227}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fde0d6d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x332f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf4b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91ac}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c2941f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4dc73f75}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72a190d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f3a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa068}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x716c06c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e79f582}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa097}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x148eb232}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc685}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d79}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72be418f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5913be10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe5b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5758a8e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2528}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c2c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1578}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3f0}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5410ea9f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77bef1a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6810c753}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x672f05ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc168ab0}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd193032}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fecb38d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x285a105e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b76dcbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13ea5325}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x19c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cadcc1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x188af583}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a35a033}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f15b72a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x350c1e73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b4eb77f}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7356f6a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x470462b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60919134}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcbbb087}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20aa7f6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f8704d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x437f0623}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74f42f6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6583a844}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54cdc984}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ed12184}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42bf27c9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33c797f8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x102e8fcb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12ce27ac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcced79f}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9ff47d5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6215aa18}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66e94b6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1343e710}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47d28c59}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b9734be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6415a2f8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c606e1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x338ac937}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29093402}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66e5467d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a4f9d4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a2786b5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x724d128}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14e769a1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ad44f79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xddaa559}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a80cab4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2402e714}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}]}]}]}, 0x594}, 0x1, 0x0, 0x0, 0x8c0}, 0x1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000006c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040080) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000008c0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r5, 0x201, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004410) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000b00)=0x4504, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000f40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x310, r6, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x2f4, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5e13}, @device_a, @broadcast, @initial, {0x2, 0x3}, "", @value={0x3, 0x1, 0x2, 0x1, 0xfc}}, @random="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"}}]}, 0x310}, 0x1, 0x0, 0x0, 0x24000044}, 0x4000) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000f80)={0x2, 0x4e24, @local}, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000013c0)={0x0}, &(0x7f0000001400)=0xc) r9 = getuid() sendmsg$netlink(r2, &(0x7f00000014c0)={&(0x7f0000000fc0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, 0xc, &(0x7f0000001480)=[{&(0x7f0000001000)={0x120, 0x37, 0x800, 0x70bd2c, 0x25dfdbff, "", [@nested={0x8, 0x90, 0x0, 0x1, [@nested={0x4, 0x12b}]}, @typed={0xc, 0x108, 0x0, 0x0, @u64=0x45}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r2}, @generic="27bf1203408bcbdaa10b1ac8b0d217c7a9a7a530b490540575657e40d6d051d43be745239c52505b62d9a0e9fc7cef49cec2990bc544f5179b1f27d0dae4317e15dcd92c4f58f7687506154d883bdc07b44bfea86b158df7fb16f658ea30e9fe53ebe8dd53c375fe4a12c9ff1b034e5d1c03d308a0ce2a7e36eb9919916300f35d8637152173ec5a03817b1ccedb517eeabe960b6342697ec64c1f1a93562cbbbe01155fd062c4", @nested={0xc, 0xf2, 0x0, 0x1, [@nested={0x4, 0xa0}, @nested={0x4, 0x3e}]}, @generic="0048a6b0d08fd222b01231f9cda6819c0041121186b3d620a97e38dc4e8216f0127923d23f995f137b1e070fe9b2dfd8b36e2af2147560a2a32be9771c758492"]}, 0x120}, {&(0x7f0000001140)={0x224, 0x12, 0x200, 0x70bd25, 0x25dfdbfb, "", [@nested={0x202, 0x28, 0x0, 0x1, [@generic="a1329ea18c2588e07ae6cbd9335a9cd367ef5960ad1ebb9d8b48adda85918cc03f0b70bf0bb2c53d06ab14e103f4d5f57bbaacb85d03b44c0fae27a7f6b1ac99b3acb7c896d91c82fa00c64c37e31b18a3ed0a2477befd4f1f796dd5826dc7dbf7f7270dcab87527c2d6a983c477c76e30cb6eb9dd846268d6c1daa234d6bc8966ef70bf87a92e1bbf3847f59c6c43568ca51912241c85fb50cdfc99d27abc8163516216cf2369d5758d5e65126a1bf1deb7381accc43279ba", @typed={0x8, 0x118, 0x0, 0x0, @uid=0xee01}, @typed={0x25, 0xf6, 0x0, 0x0, @binary="2541f680e5447a7295992d5b80b9dfbc7594190efba077775017855757c654d5d8"}, @generic="796222c3f32865cee4bea29f72360a2d02f9899f1b", @generic="8c78af0e39d2ea6485e262c44a5ab11b115c67614a253970dec98ce6ad5145969349da6be038ec8f2d548988f6f34b43480208fc8c4da0c413c86551bd9ad2127cd832b3c215dbff5cef7b65fb529a24da652f51fe0c749505947cdc0dd451efd905bf6946c2c7a30d6d61bbc1a9b7f5f74bbbd478b870da8af88c38c30c4f966b97c28d783e33a3871d7858d60412ba45661784e4cc7ee4ab75e8c0342469c955d399b72bd753ad23f1ee38bc376f4365d509fc64d741c06ad08dbbbc3608c31712574bfff4b6cbbf6b0ef1d6adacaf833696cd2d6ba8847abb3b4afeea52dc90cea68ee6b47c3d78b963290c0b2de7fd5411ca55f35709", @typed={0x8, 0x4, 0x0, 0x0, @u32=0x7}]}, @nested={0x10, 0xb8, 0x0, 0x1, [@typed={0x8, 0xaf, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x8c}]}]}, 0x224}, {&(0x7f0000001380)={0x24, 0x1e, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@generic="d6d82bb19aa43bc2be18265b439b28f0efd746"]}, 0x24}, {&(0x7f0000001440)={0x2c, 0x16, 0x1, 0x70bd27, 0x25dfdbfc, "", [@nested={0x1c, 0xe8, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @pid=r8}, @typed={0x8, 0xec, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x9d, 0x0, 0x0, @uid=r9}]}]}, 0x2c}], 0x4, 0x0, 0x0, 0x400c0}, 0x20040010) socket$unix(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x30, r6, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x401, 0x5f}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}]}, 0x30}}, 0x8000) r10 = accept4$packet(0xffffffffffffffff, &(0x7f0000001600), &(0x7f0000001640)=0x14, 0x80000) getsockname$packet(r10, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000016c0)=0x14) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000001700)={0x1, [0x0]}, &(0x7f0000001740)=0x8) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000017c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001800)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001840)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001980)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x54, r12, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x800) 79.204636ms ago: executing program 3 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x7, 0x8, 0x6, 0x6}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="e31cb0f60174ab8b807072f663d10e90adb0f62006bbdce09efc87d1a6990bc8eac426b6ea01a42a8d1bca20dd5648c9eb14be97f2e08316d127b61d13dd39acb6c856e6c978b7c20dc7a5688ccaf86180525361565c5c6b5604ca39eab7b0e7d8129d96632226b78b452e04bdb71ef7a50f99a1197cc5f41a6bb27e8c7dee1a4b7002efbfd6f9171642ace41fb3a1f7", @ANYRES16=r1, @ANYBLOB="01000000000000000000000000000800020000000000"], 0x1c}}, 0x0) 61.494007ms ago: executing program 1 (id=443): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) syz_emit_ethernet(0x36, &(0x7f0000000a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, '\x00\a\x00', 0x0, 0x2b, 0x0, @private1, @mcast2}}}}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) socket(0x25, 0x5, 0xb4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811005000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.294361ms ago: executing program 2 (id=444): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@var={0x1, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x4}, @volatile={0x4, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000440)=@ringbuf={{}, {}, {}, [@jmp, @cb_func, @ringbuf_output]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 4 (id=380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES8=0x0, @ANYRES32=r2, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES8=0x0, @ANYRES32=r2, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 85.286078][ T5817] cgroup: Unknown subsys name 'net' [ 85.435613][ T5817] cgroup: Unknown subsys name 'cpuset' [ 85.445633][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.209138][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.297176][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.321031][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.328823][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.336568][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.344514][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.374009][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.382357][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.390421][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.399182][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.403755][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.407873][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.416727][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.428591][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.429743][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.437809][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.445234][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.451286][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.476611][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.484879][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.493431][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.546010][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.554590][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.563126][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.572020][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.580012][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.977324][ T968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.987777][ T968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.002542][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.010668][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.051500][ T968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.059738][ T968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.080508][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.089698][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.128764][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.137085][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.163453][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.193826][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.248295][ T968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.262347][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.280958][ T968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.285111][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.310223][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.328927][ T968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.343433][ T968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.433147][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.459942][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.795230][ T5877] Zero length message leads to an empty skb [ 92.865133][ T5881] x_tables: duplicate underflow at hook 2 [ 92.900402][ T5878] x_tables: duplicate underflow at hook 2 [ 92.949912][ T5882] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 93.060061][ T5882] bond0: entered promiscuous mode [ 93.066355][ T5882] bond0: entered allmulticast mode [ 93.072489][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.120741][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 93.211423][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 93.241081][ T5890] netlink: 'syz.3.7': attribute type 5 has an invalid length. [ 93.435278][ T5914] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.505361][ T5829] Bluetooth: hci2: command tx timeout [ 93.510348][ T5842] Bluetooth: hci3: command tx timeout [ 93.513136][ T51] Bluetooth: hci0: command tx timeout [ 93.571077][ T51] Bluetooth: hci1: command tx timeout [ 93.651093][ T51] Bluetooth: hci4: command tx timeout [ 93.848751][ T5928] netlink: 'syz.1.16': attribute type 1 has an invalid length. [ 93.884330][ T5928] netlink: 'syz.1.16': attribute type 3 has an invalid length. [ 93.906449][ T5928] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16'. [ 93.934816][ T5928] NCSI netlink: No device for ifindex 131080 [ 94.079208][ T5938] syzkaller1: entered promiscuous mode [ 94.109944][ T5938] syzkaller1: entered allmulticast mode [ 94.159017][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 94.191530][ T5942] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.235276][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 94.280608][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 94.305074][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 94.672255][ T5965] netlink: 'syz.3.27': attribute type 2 has an invalid length. [ 94.831948][ T5930] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 95.041408][ T5982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'. [ 95.342338][ T5999] warning: `syz.0.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.571602][ T51] Bluetooth: hci0: command tx timeout [ 95.577111][ T5829] Bluetooth: hci3: command tx timeout [ 95.577173][ T5842] Bluetooth: hci2: command tx timeout [ 95.600298][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 95.651122][ T5842] Bluetooth: hci1: command tx timeout [ 95.671125][ T6009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.718546][ T6009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.731111][ T5842] Bluetooth: hci4: command tx timeout [ 95.952696][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 97.044401][ T6088] netlink: 'syz.4.60': attribute type 11 has an invalid length. [ 97.132033][ T6095] syz.0.62 uses obsolete (PF_INET,SOCK_PACKET) [ 97.184155][ T3404] cfg80211: failed to load regulatory.db [ 97.652483][ T5842] Bluetooth: hci0: command tx timeout [ 97.652502][ T51] Bluetooth: hci3: command tx timeout [ 97.652540][ T51] Bluetooth: hci2: command tx timeout [ 97.731127][ T51] Bluetooth: hci1: command tx timeout [ 97.811088][ T51] Bluetooth: hci4: command tx timeout [ 98.089019][ T6134] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 98.122354][ T6134] __nla_validate_parse: 8 callbacks suppressed [ 98.122373][ T6134] netlink: 224 bytes leftover after parsing attributes in process `syz.2.72'. [ 98.181869][ T6145] trusted_key: syz.4.73 sent an empty control message without MSG_MORE. [ 98.236851][ T6145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.73'. [ 98.931046][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 99.532604][ T6207] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 99.731274][ T51] Bluetooth: hci0: command tx timeout [ 99.736913][ T5829] Bluetooth: hci2: command tx timeout [ 99.736958][ T5842] Bluetooth: hci3: command tx timeout [ 99.782461][ T6207] bond1: entered promiscuous mode [ 99.787663][ T6207] bond1: entered allmulticast mode [ 99.801453][ T6207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.820289][ T5842] Bluetooth: hci1: command tx timeout [ 99.890977][ T5842] Bluetooth: hci4: command tx timeout [ 100.291442][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.98'. [ 100.302832][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.98'. [ 100.919664][ T6256] Bluetooth: MGMT ver 1.23 [ 100.925448][ T6259] nft_compat: unsupported protocol 0 [ 101.287541][ T6274] : entered promiscuous mode [ 101.488996][ T6282] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 101.665296][ T6296] xt_hashlimit: size too large, truncated to 1048576 [ 101.684407][ T6282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.804060][ T6290] macvtap0: entered promiscuous mode [ 101.823349][ T6290] macvtap0: entered allmulticast mode [ 101.917927][ T6298] bond0: (slave gretap1): making interface the new active one [ 102.055587][ T6298] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 102.124548][ T6298] syz.3.108 (6298) used greatest stack depth: 19176 bytes left [ 102.190349][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.114'. [ 102.560627][ T6321] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.761717][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 102.910525][ T6345] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 102.934367][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.118'. [ 102.981233][ T6344] openvswitch: netlink: Flow key attr not present in new flow. [ 103.060784][ T6347] netlink: 'syz.1.120': attribute type 1 has an invalid length. [ 103.091616][ T6347] netlink: 'syz.1.120': attribute type 1 has an invalid length. [ 103.177551][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 103.251178][ T5842] Bluetooth: hci4: command tx timeout [ 103.328984][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 103.533454][ T6369] netlink: 58 bytes leftover after parsing attributes in process `syz.1.130'. [ 103.583917][ C0] Unknown status report in ack skb [ 104.013062][ T6390] netlink: zone id is out of range [ 104.038927][ T6390] netlink: zone id is out of range [ 104.064039][ T6390] netlink: zone id is out of range [ 104.102433][ T6390] netlink: zone id is out of range [ 104.108614][ T6390] netlink: zone id is out of range [ 104.131410][ T6390] netlink: zone id is out of range [ 104.159924][ T6390] netlink: zone id is out of range [ 104.179310][ T6390] netlink: zone id is out of range [ 104.321444][ T6406] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 104.454587][ T6409] netlink: 81 bytes leftover after parsing attributes in process `syz.3.137'. [ 104.505968][ T6402] netlink: 'syz.3.137': attribute type 2 has an invalid length. [ 104.542006][ T9] IPVS: starting estimator thread 0... [ 104.632892][ T6407] IPVS: using max 24 ests per chain, 57600 per kthread [ 104.732193][ T6425] sctp: [Deprecated]: syz.1.141 (pid 6425) Use of int in maxseg socket option. [ 104.732193][ T6425] Use struct sctp_assoc_value instead [ 104.981442][ T6433] nbd: must specify at least one socket [ 104.987429][ T6433] nbd: must specify at least one socket [ 105.067450][ T6440] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 105.079847][ T6440] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 105.441884][ T6456] netlink: 'syz.2.144': attribute type 1 has an invalid length. [ 105.508677][ T6456] netlink: 224 bytes leftover after parsing attributes in process `syz.2.144'. [ 105.523081][ T6456] netlink: 'syz.2.144': attribute type 1 has an invalid length. [ 105.639529][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.153'. [ 105.668083][ T6468] netlink: 48 bytes leftover after parsing attributes in process `syz.4.153'. [ 105.765217][ T6479] netlink: 'syz.3.152': attribute type 1 has an invalid length. [ 105.786450][ T6479] netlink: 232 bytes leftover after parsing attributes in process `syz.3.152'. [ 105.841333][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 105.966623][ T6486] x_tables: duplicate underflow at hook 3 [ 105.966624][ T6487] x_tables: duplicate underflow at hook 3 [ 105.966836][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 106.286800][ T6507] sctp: [Deprecated]: syz.0.163 (pid 6507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.286800][ T6507] Use struct sctp_sack_info instead [ 106.566573][ T6523] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.812329][ T6532] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 106.977550][ T6532] bond1: entered promiscuous mode [ 107.065721][ T6532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.175893][ T6550] net_ratelimit: 18 callbacks suppressed [ 107.175915][ T6550] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 107.488007][ T6571] netlink: 'syz.2.180': attribute type 28 has an invalid length. [ 107.530784][ T6571] netlink: 'syz.2.180': attribute type 3 has an invalid length. [ 107.674734][ T6576] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 107.683872][ T3404] IPVS: starting estimator thread 0... [ 107.783771][ T6586] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 107.803899][ T6577] IPVS: using max 27 ests per chain, 64800 per kthread [ 107.830928][ T6586] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 107.960247][ T6595] xt_l2tp: v2 sid > 0xffff: 262144 [ 108.733869][ T6630] __nla_validate_parse: 5 callbacks suppressed [ 108.733888][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 109.289266][ T6663] xt_l2tp: v2 doesn't support IP mode [ 109.306295][ T6660] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 110.044132][ T6701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.219'. [ 110.288968][ T6709] ip6gre1: entered allmulticast mode [ 110.308645][ T6698] netlink: 88 bytes leftover after parsing attributes in process `syz.3.218'. [ 110.332657][ T5200] udevd[5200]: worker [5834] terminated by signal 33 (Unknown signal 33) [ 110.360600][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.218'. [ 111.531481][ T6727] 8021q: VLANs not supported on gre0 [ 111.672469][ T6738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.232'. [ 111.749356][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 111.854034][ T6757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.237'. [ 111.987432][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 112.271494][ T6789] x_tables: duplicate underflow at hook 2 [ 112.415225][ T6800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.253'. [ 112.474973][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'. [ 112.553259][ T6804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.337084][ T6868] sctp: [Deprecated]: syz.0.273 (pid 6868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.337084][ T6868] Use struct sctp_sack_info instead [ 113.666016][ T30] audit: type=1107 audit(1748744114.051:2): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 113.791492][ T6890] veth5: entered promiscuous mode [ 113.877191][ T6903] __nla_validate_parse: 4 callbacks suppressed [ 113.877211][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 113.966292][ T6906] dvmrp0: entered allmulticast mode [ 114.132152][ T6920] netlink: 'syz.1.288': attribute type 4 has an invalid length. [ 114.164269][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 114.261141][ T6925] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 114.324450][ T6925] netlink: 'syz.4.291': attribute type 2 has an invalid length. [ 114.370532][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 114.576675][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'. [ 114.812308][ T6963] netlink: 256 bytes leftover after parsing attributes in process `syz.0.304'. [ 114.823553][ T6963] unsupported nlmsg_type 40 [ 114.880966][ T5842] block nbd0: Receive control failed (result -32) [ 114.930081][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.305'. [ 115.149538][ T6984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.309'. [ 115.160085][ T6984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.309'. [ 115.196851][ T6984] bond2: entered promiscuous mode [ 115.345115][ T6988] netlink: 52 bytes leftover after parsing attributes in process `syz.1.310'. [ 115.354434][ T6988] netlink: 52 bytes leftover after parsing attributes in process `syz.1.310'. [ 115.570235][ T7002] sctp: [Deprecated]: syz.1.313 (pid 7002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.570235][ T7002] Use struct sctp_sack_info instead [ 115.761875][ T7016] netlink: 'syz.2.320': attribute type 7 has an invalid length. [ 115.804799][ T7016] : entered promiscuous mode [ 116.055058][ T7036] Bluetooth: MGMT ver 1.23 [ 116.264570][ T7045] ip6t_REJECT: ECHOREPLY is not supported [ 116.483284][ T7064] netlink: 'syz.0.333': attribute type 10 has an invalid length. [ 117.578835][ T7116] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 117.593273][ T7117] netlink: 'syz.2.347': attribute type 21 has an invalid length. [ 117.601247][ T3404] IPVS: starting estimator thread 0... [ 117.612324][ T7111] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 117.690964][ T7118] IPVS: using max 26 ests per chain, 62400 per kthread [ 117.893565][ T7135] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 117.925185][ T7135] sctp: [Deprecated]: syz.4.355 (pid 7135) Use of int in max_burst socket option. [ 117.925185][ T7135] Use struct sctp_assoc_value instead [ 118.947695][ T7196] __nla_validate_parse: 12 callbacks suppressed [ 118.947715][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 118.954978][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 119.477482][ T7216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.382'. [ 119.599961][ T7211] netlink: 'syz.1.379': attribute type 12 has an invalid length. [ 119.610928][ T7211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.379'. [ 119.622953][ T7215] netem: change failed [ 119.627489][ T7216] netlink: 'syz.3.382': attribute type 4 has an invalid length. [ 119.637038][ T7208] Cannot find add_set index 0 as target [ 119.960017][ T5838] IPVS: starting estimator thread 0... [ 120.053509][ T7227] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 120.070986][ T7232] IPVS: using max 23 ests per chain, 55200 per kthread [ 120.078798][ T7227] netlink: 144 bytes leftover after parsing attributes in process `syz.3.386'. [ 120.540084][ T968] IPVS: stop unused estimator thread 0... [ 120.588385][ T7254] netlink: 'syz.0.390': attribute type 32 has an invalid length. [ 120.612899][ T7255] netlink: 'syz.0.390': attribute type 32 has an invalid length. [ 120.698869][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.708538][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.720568][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.731766][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.739751][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.902231][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.916959][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.029092][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.047339][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.030954][ T7293] netlink: 80 bytes leftover after parsing attributes in process `syz.1.402'. [ 122.561600][ T7309] .: renamed from bond0 (while UP) [ 122.588333][ T51] block nbd1: Receive control failed (result -32) [ 122.693807][ T51] Bluetooth: hci0: command tx timeout [ 122.709524][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.723137][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.741384][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.787486][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.802722][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.215703][ T7336] netlink: 'syz.3.414': attribute type 9 has an invalid length. [ 123.298415][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.307858][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.391718][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.399640][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.471777][ T7342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.416'. [ 123.890986][ T7361] netlink: 72 bytes leftover after parsing attributes in process `syz.1.423'. [ 123.986524][ T7362] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20004 [ 124.452518][ T7372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.426'. [ 124.522320][ T7373] gtp0: entered promiscuous mode [ 124.527554][ T7373] gtp0: entered allmulticast mode [ 124.876463][ T7388] netlink: 256 bytes leftover after parsing attributes in process `syz.3.432'. [ 125.121331][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.130612][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.155754][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.166098][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.174180][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.192351][ T7405] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 125.228115][ T7199] Set syz1 is full, maxelem 65536 reached [ 125.444684][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.457749][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.511949][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.526857][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.796278][ T7393] [ 125.798674][ T7393] ========================= [ 125.803368][ T7393] WARNING: held lock freed! [ 125.807907][ T7393] 6.15.0-syzkaller-07802-g558428921edd #0 Not tainted [ 125.814800][ T7393] ------------------------- [ 125.819405][ T7393] syz.0.433/7393 is freeing memory ffff888079cb6000-ffff888079cb67ff, with a lock still held there! [ 125.830279][ T7393] ffff888079cb6258 (sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP){+.+.}-{0:0}, at: bt_accept_dequeue+0xfc/0x590 [ 125.841501][ T7393] 2 locks held by syz.0.433/7393: [ 125.846560][ T7393] #0: ffff88805de83808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 125.857090][ T7393] #1: ffff888079cb6258 (sk_lock-AF_BLUETOOTH-BTPROTO_L2CAP){+.+.}-{0:0}, at: bt_accept_dequeue+0xfc/0x590 [ 125.868566][ T7393] [ 125.868566][ T7393] stack backtrace: [ 125.874500][ T7393] CPU: 1 UID: 0 PID: 7393 Comm: syz.0.433 Not tainted 6.15.0-syzkaller-07802-g558428921edd #0 PREEMPT(full) [ 125.874529][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.874550][ T7393] Call Trace: [ 125.874558][ T7393] [ 125.874567][ T7393] dump_stack_lvl+0x189/0x250 [ 125.874606][ T7393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.874638][ T7393] ? __pfx__printk+0x10/0x10 [ 125.874673][ T7393] debug_check_no_locks_freed+0x18b/0x1c0 [ 125.874705][ T7393] ? __sk_destruct+0x4e1/0x660 [ 125.874725][ T7393] kfree+0xfd/0x440 [ 125.874754][ T7393] __sk_destruct+0x4e1/0x660 [ 125.874775][ T7393] bt_accept_dequeue+0x3ce/0x590 [ 125.874808][ T7393] l2cap_sock_cleanup_listen+0x2f/0x3e0 [ 125.874832][ T7393] l2cap_sock_release+0x5d/0x1d0 [ 125.874853][ T7393] sock_close+0xc3/0x240 [ 125.874875][ T7393] ? __pfx_sock_close+0x10/0x10 [ 125.874897][ T7393] __fput+0x44c/0xa70 [ 125.874923][ T7393] task_work_run+0x1d1/0x260 [ 125.874946][ T7393] ? __pfx_task_work_run+0x10/0x10 [ 125.874971][ T7393] ? exit_to_user_mode_loop+0x40/0x110 [ 125.874997][ T7393] exit_to_user_mode_loop+0xec/0x110 [ 125.875022][ T7393] do_syscall_64+0x2bd/0x3b0 [ 125.875046][ T7393] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.875067][ T7393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.875089][ T7393] ? clear_bhb_loop+0x60/0xb0 [ 125.875111][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.875129][ T7393] RIP: 0033:0x7fb14498e969 [ 125.875151][ T7393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.875168][ T7393] RSP: 002b:00007ffddc587118 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 125.875188][ T7393] RAX: 0000000000000000 RBX: 00007fb144bb7ba0 RCX: 00007fb14498e969 [ 125.875202][ T7393] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 125.875213][ T7393] RBP: 00007fb144bb7ba0 R08: 0000000000000180 R09: 00000016dc58740f [ 125.875226][ T7393] R10: 00007fb144bb7ac0 R11: 0000000000000246 R12: 000000000001eb27 [ 125.875238][ T7393] R13: 00007fb144bb6080 R14: ffffffffffffffff R15: 00007ffddc587230 [ 125.875261][ T7393] [ 126.096156][ T7393] ================================================================== [ 126.104284][ T7393] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 126.112363][ T7393] Read of size 4 at addr ffff888079cb61c4 by task syz.0.433/7393 [ 126.120108][ T7393] [ 126.122455][ T7393] CPU: 0 UID: 0 PID: 7393 Comm: syz.0.433 Not tainted 6.15.0-syzkaller-07802-g558428921edd #0 PREEMPT(full) [ 126.122479][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.122489][ T7393] Call Trace: [ 126.122499][ T7393] [ 126.122507][ T7393] dump_stack_lvl+0x189/0x250 [ 126.122538][ T7393] ? __virt_addr_valid+0x1c8/0x5c0 [ 126.122555][ T7393] ? rcu_is_watching+0x15/0xb0 [ 126.122580][ T7393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.122606][ T7393] ? rcu_is_watching+0x15/0xb0 [ 126.122630][ T7393] ? lock_release+0x4b/0x3e0 [ 126.122653][ T7393] ? __virt_addr_valid+0x1c8/0x5c0 [ 126.122669][ T7393] ? __virt_addr_valid+0x4a5/0x5c0 [ 126.122687][ T7393] print_report+0xd2/0x2b0 [ 126.122709][ T7393] ? do_raw_spin_lock+0x23d/0x290 [ 126.122725][ T7393] kasan_report+0x118/0x150 [ 126.122751][ T7393] ? do_raw_spin_lock+0x23d/0x290 [ 126.122771][ T7393] do_raw_spin_lock+0x23d/0x290 [ 126.122787][ T7393] ? lock_acquire+0x5f/0x360 [ 126.122808][ T7393] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.122826][ T7393] ? __sk_destruct+0x4e1/0x660 [ 126.122843][ T7393] ? release_sock+0x2f/0x1f0 [ 126.122866][ T7393] release_sock+0x2f/0x1f0 [ 126.122890][ T7393] bt_accept_dequeue+0x512/0x590 [ 126.122919][ T7393] l2cap_sock_cleanup_listen+0x2f/0x3e0 [ 126.122939][ T7393] l2cap_sock_release+0x5d/0x1d0 [ 126.122957][ T7393] sock_close+0xc3/0x240 [ 126.122977][ T7393] ? __pfx_sock_close+0x10/0x10 [ 126.122996][ T7393] __fput+0x44c/0xa70 [ 126.123019][ T7393] task_work_run+0x1d1/0x260 [ 126.123040][ T7393] ? __pfx_task_work_run+0x10/0x10 [ 126.123061][ T7393] ? exit_to_user_mode_loop+0x40/0x110 [ 126.123085][ T7393] exit_to_user_mode_loop+0xec/0x110 [ 126.123108][ T7393] do_syscall_64+0x2bd/0x3b0 [ 126.123131][ T7393] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.123150][ T7393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.123167][ T7393] ? clear_bhb_loop+0x60/0xb0 [ 126.123186][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.123203][ T7393] RIP: 0033:0x7fb14498e969 [ 126.123218][ T7393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.123233][ T7393] RSP: 002b:00007ffddc587118 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 126.123251][ T7393] RAX: 0000000000000000 RBX: 00007fb144bb7ba0 RCX: 00007fb14498e969 [ 126.123263][ T7393] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 126.123273][ T7393] RBP: 00007fb144bb7ba0 R08: 0000000000000180 R09: 00000016dc58740f [ 126.123285][ T7393] R10: 00007fb144bb7ac0 R11: 0000000000000246 R12: 000000000001eb27 [ 126.123296][ T7393] R13: 00007fb144bb6080 R14: ffffffffffffffff R15: 00007ffddc587230 [ 126.123317][ T7393] [ 126.123322][ T7393] [ 126.395589][ T7393] Allocated by task 51: [ 126.399903][ T7393] kasan_save_track+0x3e/0x80 [ 126.404594][ T7393] __kasan_kmalloc+0x93/0xb0 [ 126.409285][ T7393] __kmalloc_noprof+0x27a/0x4f0 [ 126.414160][ T7393] sk_prot_alloc+0xe7/0x220 [ 126.418665][ T7393] sk_alloc+0x3a/0x370 [ 126.422734][ T7393] bt_sock_alloc+0x3b/0x310 [ 126.427255][ T7393] l2cap_sock_new_connection_cb+0xe2/0x2b0 [ 126.433074][ T7393] l2cap_connect_cfm+0x37a/0x1040 [ 126.438103][ T7393] hci_remote_features_evt+0x581/0x8e0 [ 126.443587][ T7393] hci_event_packet+0x7e3/0x1200 [ 126.448706][ T7393] hci_rx_work+0x46a/0xe80 [ 126.453232][ T7393] process_scheduled_works+0xae1/0x17b0 [ 126.458985][ T7393] worker_thread+0x8a0/0xda0 [ 126.463854][ T7393] kthread+0x70e/0x8a0 [ 126.468034][ T7393] ret_from_fork+0x3fc/0x770 [ 126.472744][ T7393] ret_from_fork_asm+0x1a/0x30 [ 126.477652][ T7393] [ 126.480165][ T7393] Freed by task 7393: [ 126.484423][ T7393] kasan_save_track+0x3e/0x80 [ 126.489289][ T7393] kasan_save_free_info+0x46/0x50 [ 126.494510][ T7393] __kasan_slab_free+0x62/0x70 [ 126.499432][ T7393] kfree+0x18e/0x440 [ 126.503446][ T7393] __sk_destruct+0x4e1/0x660 [ 126.508145][ T7393] bt_accept_dequeue+0x3ce/0x590 [ 126.513358][ T7393] l2cap_sock_cleanup_listen+0x2f/0x3e0 [ 126.519017][ T7393] l2cap_sock_release+0x5d/0x1d0 [ 126.523996][ T7393] sock_close+0xc3/0x240 [ 126.528258][ T7393] __fput+0x44c/0xa70 [ 126.532663][ T7393] task_work_run+0x1d1/0x260 [ 126.537715][ T7393] exit_to_user_mode_loop+0xec/0x110 [ 126.543029][ T7393] do_syscall_64+0x2bd/0x3b0 [ 126.548274][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.554539][ T7393] [ 126.556918][ T7393] The buggy address belongs to the object at ffff888079cb6000 [ 126.556918][ T7393] which belongs to the cache kmalloc-2k of size 2048 [ 126.571179][ T7393] The buggy address is located 452 bytes inside of [ 126.571179][ T7393] freed 2048-byte region [ffff888079cb6000, ffff888079cb6800) [ 126.585522][ T7393] [ 126.587857][ T7393] The buggy address belongs to the physical page: [ 126.594352][ T7393] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79cb0 [ 126.603222][ T7393] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 126.611909][ T7393] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 126.619665][ T7393] page_type: f5(slab) [ 126.623738][ T7393] raw: 00fff00000000040 ffff88801a442000 ffffea0001efd000 0000000000000002 [ 126.632477][ T7393] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 126.641594][ T7393] head: 00fff00000000040 ffff88801a442000 ffffea0001efd000 0000000000000002 [ 126.650277][ T7393] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 126.659222][ T7393] head: 00fff00000000003 ffffea0001e72c01 00000000ffffffff 00000000ffffffff [ 126.668090][ T7393] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 126.677059][ T7393] page dumped because: kasan: bad access detected [ 126.683572][ T7393] page_owner tracks the page as allocated [ 126.689378][ T7393] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6672, tgid 6670 (syz.0.211), ts 109604245397, free_ts 109053657943 [ 126.710762][ T7393] post_alloc_hook+0x240/0x2a0 [ 126.715639][ T7393] get_page_from_freelist+0x21e0/0x22c0 [ 126.721195][ T7393] __alloc_frozen_pages_noprof+0x181/0x370 [ 126.727017][ T7393] alloc_pages_mpol+0x232/0x4a0 [ 126.731968][ T7393] allocate_slab+0x8a/0x3b0 [ 126.736486][ T7393] ___slab_alloc+0xbfc/0x1480 [ 126.741170][ T7393] __kmalloc_cache_noprof+0x296/0x3d0 [ 126.746725][ T7393] do_check_common+0x1e2/0x20b0 [ 126.751588][ T7393] bpf_check+0x13664/0x19c60 [ 126.756182][ T7393] bpf_prog_load+0x1318/0x1930 [ 126.760952][ T7393] __sys_bpf+0x5f1/0x860 [ 126.765207][ T7393] __x64_sys_bpf+0x7c/0x90 [ 126.769634][ T7393] do_syscall_64+0xfa/0x3b0 [ 126.774146][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.780127][ T7393] page last free pid 6648 tgid 6648 stack trace: [ 126.786452][ T7393] __free_frozen_pages+0xc6e/0xe50 [ 126.791659][ T7393] __put_partials+0x161/0x1c0 [ 126.797044][ T7393] put_cpu_partial+0x17c/0x250 [ 126.801813][ T7393] __slab_free+0x2f7/0x400 [ 126.806319][ T7393] qlist_free_all+0x97/0x140 [ 126.810913][ T7393] kasan_quarantine_reduce+0x148/0x160 [ 126.816416][ T7393] __kasan_slab_alloc+0x22/0x80 [ 126.821299][ T7393] __kmalloc_noprof+0x224/0x4f0 [ 126.826160][ T7393] tomoyo_encode+0x28b/0x550 [ 126.830867][ T7393] tomoyo_path_perm+0x2b3/0x4b0 [ 126.835815][ T7393] tomoyo_path_symlink+0xa3/0xe0 [ 126.840855][ T7393] security_path_symlink+0x177/0x380 [ 126.846243][ T7393] do_symlinkat+0x107/0x3f0 [ 126.850757][ T7393] __x64_sys_symlinkat+0x95/0xb0 [ 126.855708][ T7393] do_syscall_64+0xfa/0x3b0 [ 126.860323][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.866317][ T7393] [ 126.868647][ T7393] Memory state around the buggy address: [ 126.874364][ T7393] ffff888079cb6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.882433][ T7393] ffff888079cb6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.890502][ T7393] >ffff888079cb6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.898753][ T7393] ^ [ 126.905209][ T7393] ffff888079cb6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.913293][ T7393] ffff888079cb6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.921627][ T7393] ================================================================== [ 126.930081][ T7393] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 126.937469][ T7393] CPU: 0 UID: 0 PID: 7393 Comm: syz.0.433 Not tainted 6.15.0-syzkaller-07802-g558428921edd #0 PREEMPT(full) [ 126.949306][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.959388][ T7393] Call Trace: [ 126.962679][ T7393] [ 126.965624][ T7393] dump_stack_lvl+0x99/0x250 [ 126.970238][ T7393] ? __asan_memcpy+0x40/0x70 [ 126.974929][ T7393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.980258][ T7393] ? __pfx__printk+0x10/0x10 [ 126.984883][ T7393] panic+0x2db/0x790 [ 126.988798][ T7393] ? __pfx_panic+0x10/0x10 [ 126.993246][ T7393] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 126.999287][ T7393] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 127.005192][ T7393] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 127.011541][ T7393] ? print_memory_metadata+0x314/0x400 [ 127.017017][ T7393] ? do_raw_spin_lock+0x23d/0x290 [ 127.022057][ T7393] check_panic_on_warn+0x89/0xb0 [ 127.027036][ T7393] ? do_raw_spin_lock+0x23d/0x290 [ 127.032096][ T7393] end_report+0x78/0x160 [ 127.036452][ T7393] kasan_report+0x129/0x150 [ 127.041174][ T7393] ? do_raw_spin_lock+0x23d/0x290 [ 127.046264][ T7393] do_raw_spin_lock+0x23d/0x290 [ 127.051227][ T7393] ? lock_acquire+0x5f/0x360 [ 127.055835][ T7393] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 127.061391][ T7393] ? __sk_destruct+0x4e1/0x660 [ 127.066426][ T7393] ? release_sock+0x2f/0x1f0 [ 127.071036][ T7393] release_sock+0x2f/0x1f0 [ 127.075593][ T7393] bt_accept_dequeue+0x512/0x590 [ 127.080750][ T7393] l2cap_sock_cleanup_listen+0x2f/0x3e0 [ 127.086397][ T7393] l2cap_sock_release+0x5d/0x1d0 [ 127.091375][ T7393] sock_close+0xc3/0x240 [ 127.095669][ T7393] ? __pfx_sock_close+0x10/0x10 [ 127.100556][ T7393] __fput+0x44c/0xa70 [ 127.104689][ T7393] task_work_run+0x1d1/0x260 [ 127.109423][ T7393] ? __pfx_task_work_run+0x10/0x10 [ 127.114556][ T7393] ? exit_to_user_mode_loop+0x40/0x110 [ 127.120124][ T7393] exit_to_user_mode_loop+0xec/0x110 [ 127.125512][ T7393] do_syscall_64+0x2bd/0x3b0 [ 127.130125][ T7393] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.135375][ T7393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.141477][ T7393] ? clear_bhb_loop+0x60/0xb0 [ 127.146174][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.152387][ T7393] RIP: 0033:0x7fb14498e969 [ 127.157070][ T7393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.176785][ T7393] RSP: 002b:00007ffddc587118 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 127.185562][ T7393] RAX: 0000000000000000 RBX: 00007fb144bb7ba0 RCX: 00007fb14498e969 [ 127.193631][ T7393] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 127.201619][ T7393] RBP: 00007fb144bb7ba0 R08: 0000000000000180 R09: 00000016dc58740f [ 127.209772][ T7393] R10: 00007fb144bb7ac0 R11: 0000000000000246 R12: 000000000001eb27 [ 127.217769][ T7393] R13: 00007fb144bb6080 R14: ffffffffffffffff R15: 00007ffddc587230 [ 127.225776][ T7393] [ 127.229178][ T7393] Kernel Offset: disabled [ 127.233554][ T7393] Rebooting in 86400 seconds..