last executing test programs:

856.601375ms ago: executing program 2 (id=36):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000f01000000791094000000000063004800000010009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff70}, 0x48)

766.73373ms ago: executing program 2 (id=38):
r0 = socket$isdn(0x22, 0x3, 0x2)
ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040))
getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe0, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000008c0)={r3, "cb345f3e4d8364661a54b48ef5fd408a"})
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000001900)={0x40000000000000, 0x40, '\x00', 0x1, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001940)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000001980), &(0x7f00000019c0)=0x30)
bind$bt_hci(r4, &(0x7f0000001a00)={0x1f, 0x2, 0x2}, 0x6)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000001a40)=@req={0x7, 0xfffffff9, 0x8, 0x8}, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001a80), r1)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000001ac0)={0xfffffffffffff9d5, {0x25, 0x4, 0x10, 0x4, 0x4}})
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000001b40)={'sit0\x00', &(0x7f0000001b00)={@multicast1, 0x1, 0x0, 0x10, 0x0, [{@local}]}})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001b80)={<r7=>0x0, @loopback, @remote}, &(0x7f0000001bc0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001c40)={'tunl0\x00', &(0x7f0000001c00)={'gretap0\x00', r7, 0x700, 0x7, 0x80000001, 0x8, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @broadcast, @local, {[@noop]}}}}})
r8 = accept(r1, 0x0, &(0x7f0000001c80))
getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000001cc0)=0xa1f, &(0x7f0000001d00)=0x2)
syz_80211_inject_frame(&(0x7f0000001d40)=@broadcast, &(0x7f0000001d80)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7ffb}, @broadcast, @broadcast, @random="9c7feff57b4a", {0xa, 0x5}}, 0x1, 0x4, 0x3f, @void, [{0xdd, 0x57, "ae06595417af40931f820e1dbf14921bb243f5153e63a92d1e930a178ca52b3d0f8a653b482f9200872f25268659a1bf1ef649c4a44653da47d866669620c141b00a0a2cb83acddcc0a61ec25de5fb6c1060bd652215c8"}, {0xdd, 0x86, "3f17dee7b2444a57161495e5f3ff44908cf3f9a48c695be1835305e12ff9a04dd06d3fadcae82d33f25274b45bb804fd5c599629cbcd51a015f17b69eef9afc7d6de4ce20276da65ac43a47b8f14c83043b4fb6ace730ae2252363a5bcb4e50d974185a5ee562dc5f1daa1d47157e751566bd772d2da8b278e1be29a5ecc94c3126b9ae1981a"}, {0xdd, 0xd0, "82ae4b8ad1530a89b2926650f580ccc9eac9ba9b45058a325f070216207f3f2bc4fc47ef3a1dbcc121516c586fe7bdbf1a6298efc3a2434906f77dc7fb48a9824b14aab3e104a79274d3fe66b9a69e57c03ea4add01054a9313e39815b7bfe431c8ecad56702c5aaf5aebda7e53e805732acc3a8df7b9a3c895c2205d058715278dd5dd616efc5f37a2701c9eec0931bd14c33f8f716c8abe3355f35ccf4dcc5357b3fc16a0b14c0b394ee1545e5744e2c7ae0ec52d05ba1d1a44af6370e074a8bcba9390fabb2dadef872158bdf7790"}, {0xdd, 0xe1, "9ffd63240c8d7bf693534fd7668ce7b09c84f3898b2e6d434fe1b07108da01fa9a2231dc8265e3ef357df23d18fe426015da2965764e51494da240e759350a4edc82972e2251e1ba660b0e84d9ce60129cc9ecf78a85914ffecedbad208ea23d0d4faf3e4907fc8dfeb94754390450bf59844711717c65b24e950c8646013a0926fd4a4bf309410f4841a2f851269ba23ff8ca53b6136caee60ebe3cef965bff50b1be2b8aa77e0fda55ec97d56ee1ec56c86289b7fc9def3db7144d8790dc868bf5a9fadc8020533fd97926ce6400df337f263cef323cd61f54c33da0697bcf1a"}]}, 0x2b4)
syz_80211_inject_frame(&(0x7f0000002040), &(0x7f0000002080)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @broadcast, @from_mac, {0xc, 0x5}, @broadcast, @value={0x5, 0x0, 0x2, 0x1, 0x1}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast}]}, 0x34)
shutdown(r6, 0x1)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), r4)
sendmsg$TIPC_CMD_GET_LINKS(r8, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x24, r9, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x8040)

486.613344ms ago: executing program 1 (id=45):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={<r1=>0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x10001, 0x5, 0x2, 0x3, 0x1, 0x9, 0x7fffffffffffffff, 0x0, 0x8, 0x1d, 0x0, 0x7f, 0x3, 0xc, 0x9]}, &(0x7f0000000040)=0x100)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_reply={0x12, 0x0, 0x0, 0x4}}}}}, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r1, 0x1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)

485.117885ms ago: executing program 1 (id=47):
r0 = socket$inet6(0x2d, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0)
close(0x3)
sendmmsg$inet(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000000340)="f911f4ba283f7269e2a1ac47183b9d19d07e17027bc9ecae22c54e893eb653f6804b225773c14e9d83a2976fa594b0ea8b67473271eecdc4ded871283d4e2ca20479528d8c9b2442108e50e6e92ca76b978c971b", 0x54}, {&(0x7f0000000440)="600c3f2ea262ef58af6eda9c0a33c9016675dc42e9681a8c3e5cd4c9c6e47648dc3f37d087c6d45c6ad306", 0x2b}], 0x3}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002980)="2b13", 0x2}], 0x1}}], 0x2, 0x4004894)

377.535287ms ago: executing program 1 (id=48):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xd}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x8100, r3, {0x0, 0xfff3}, {0xfff2, 0xffff}, {0xffe0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x47}, 0x1, 0x0, 0x0, 0x10}, 0x0)

376.988475ms ago: executing program 0 (id=49):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000007bec5590fe2245bf90b093cc59a642e7f3face2b8b7ddd66d0dcbb4a0a8c1df8541f3d9ae95e3590e1f021c5c26f23074463ce36e19a2f4d882348687fd63747c0efa0cd544f5d480496d78f8d2610c37a0b118b95c5d337b9b051ee09cdc2d92206e9a41307f88264321913bf10ebee1f4d149024148ffefa017da57a8c0ab66aa56d5457a66fb0bd2b31246e29e11cc7df7d8c259ecb5259218e8d5f95116ded65821b52c233f18868fedd82a2e4725e193e5e883135ac8234193ef1964f9"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
unshare(0x28000600)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x48)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c00020000000000000000001c0007800c00018008000100", @ANYRES32=r1], 0x3c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000200)=0x3b2, 0x4)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x2c, 0x19, 0xa428a332fa3ee95f, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000100))

376.74758ms ago: executing program 1 (id=50):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x15, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000f0000000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

287.710899ms ago: executing program 1 (id=51):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x7, 0x4)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)

237.649191ms ago: executing program 1 (id=52):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="64fa6f71cf32", 0x6}], 0x1)
recvfrom$inet6(r0, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000007bec5590fe2245bf90b093cc59a642e7f3face2b8b7ddd66d0dcbb4a0a8c1df8541f3d9ae95e3590e1f021c5c26f23074463ce36e19a2f4d882348687fd63747c0efa0cd544f5d480496d78f8d2610c37a0b118b95c5d337b9b051ee09cdc2d92206e9a41307f88264321913bf10ebee1f4d149024148ffefa017da57a8c0ab66aa56d5457a66fb0bd2b31246e29e11cc7df7d8c259ecb5259218e8d5f95116ded65821b52c233f18868fedd82a2e4725e193e5e883135ac8234193ef1964f9"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, 'v\x00', "07f217bd74511f465bbbd5de01000000f91800", '(\b\x00', "8ce63ecbc640735f"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x303}, "76f7bc3e4ae1c84c", "af19ffff489e82286820d096eb00b40752095b4285514ca312c52e3a08756735", '\x00', "60ff20b1284ad11f"}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c00020000000000000000001c0007800c00018008000100", @ANYRES32=r1], 0x3c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000005c0)='xprtrdma_frwr_maperr\x00', r4, 0x0, 0x4}, 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000019005fe9000000000000000002180000000000000000000008000100ac141400080005000a010102"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

237.310334ms ago: executing program 0 (id=53):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)
socket$isdn(0x22, 0x2, 0x26)
close(0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x10d4, 0x30, 0x9, 0x0, 0x0, {}, [{0x10c0, 0x1, [@m_ctinfo={0x4c, 0x21, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x0, 0x7, 0xa1b}, @TCA_CTINFO_ACT={0x0, 0x3, {0x6, 0x9, 0x0, 0x1de, 0x8}}, @TCA_CTINFO_ZONE={0x0, 0x4, 0x84f}]}, {0x20, 0x6, "7ac7029d8a5c9b267ad5c6e482b6b798df710b1ec7c47292066daf26"}, {0x5c, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x0, 0x9, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0xffffff5a, 0x4, 0x6, 0xfffffffd, 0x6}, 0x3}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x4c, 0xcc, 0x5, 0x8, 0xffffffff}}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x81, 0x2, 0x4, 0x4, 0x77fcd4d5}, 0x6}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x1, 0x4, 0x6, 0x9}, 0x5}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x8000, 0xbaf, 0x2, 0x4, 0x9}, 0x10}}]}, {0x0, 0x6, "85b285b1059cb4c3c9828fee685738f425fc60b3ea1741bc8e74e7844ce9e3686601cd608235641257045020704bd243f6b49cb9f01cab363e19957facd49889f33a69b02c5192f609d4f99f57e2279c2adfdad5423d48df4f4e39e5d95c3f4bf4b891d34f27abee0eac810820db6545516f7ca116c1d304f6713c04f32b01642c407c2259c5b0e2899853f7a6ef08e31df20c0f5fbe1eb1318d177df35ab5d7a60995419add51cff2e4dab07c2d59eeac59f64cd48ed2aba801dbe2cc1541eaa6996236cb2c68efabe4e54e77747078982b788538818952f9caf2ba48474190"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x1}}}}]}]}, 0x10d4}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000ffffffff4a00201c2b238c95becd4d001400020000000000000000000000ffffac1414bb1400030076657468315f766c616e000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x40400c4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)
read$alg(r5, &(0x7f00000009c0)=""/75, 0x4b)
bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x9, 0xd, 0x8, 0x0, 0x4, 0xffff}}, {0x4}}]}]}, 0x58}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdfa53b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r1], 0x398}}, 0x0)

236.937124ms ago: executing program 2 (id=54):
r0 = socket$inet6(0x2d, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0)
close(0x3)
sendmmsg$inet(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000000340)="f911f4ba283f7269e2a1ac47183b9d19d07e17027bc9ecae22c54e893eb653f6804b225773c14e9d83a2976fa594b0ea8b67473271eecdc4ded871283d4e2ca20479528d8c9b2442108e50e6e92ca76b978c971b", 0x54}, {&(0x7f0000000440)="600c3f2ea262ef58af6eda9c0a33c9016675dc42e9681a8c3e5cd4c9c6e47648dc3f37d087c6d45c6ad306", 0x2b}], 0x3}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002980)="2b13", 0x2}], 0x1}}], 0x2, 0x4004894)

165.784551ms ago: executing program 0 (id=55):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x7, 0x6d977d21}}]}, 0xc4}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000030000e0fe01020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007cc00"/112], 0xb8}}, 0x0)

164.812779ms ago: executing program 2 (id=56):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000008000000730a00ff000000003d00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0200000000000025050000000000000095000fa7127e0f000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000000)=""/149, 0x0, 0xc4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffee3, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0xffffffffffffff69}, 0x2d)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)="7a9fa1fd36564abc15ad447288772460f234b48a387af80214cd4110889939034bd30c66fcd0e1ffb4a0bb2d792d3202a3857a1d83e61d669f24eb631a"}, {&(0x7f0000000200)="3471daeae9d3f6f5a558c0b3a328fc9b937bf1ca0c92aa49b781386df0546b16d00a26c034d56a4a1099f86713d49444962965eb8e7062ea43818fbae7fd1355beb12cc54c45ada2516ad56e2c6b29b51f771c6401ae244675e8e61189adf8cdab"}, {&(0x7f0000000280)="fdde8de53f0e28570f734a3c1939ed9f86c686b95ff8bf16a67625c6d2d5d9d1752b229489b232a5c2efb08e71e280c0414acfd63a2ac4cbb12eaef702ba7d04276b503cd5721c4feb1bdeb6836d84f352c82a7a97172090fce074329ab3a11b749aa112c8fd334bd3a69e0767438a88f969556488527045d727c3ae59c43f6e910b985766b2a6cad0021b"}, {&(0x7f0000000340)="880cb31e79292347beafe4091f"}, {&(0x7f0000000440)="6f37fbf96ddbb8db751865b82dc5b3f2af77e133ad71531896dc0bc29daaefdbfdee215ba96a80779880de2645c1ba2572d287fc54eedfcb79f838134e5cce9159ad6ed8d3f89a26c380e1eb0ed3a0c3458106ec0975c86ccf97034e7464d04f15e588ad11e1aae38c60e2264610a63ba86454d63be63348981f2b084dfb6b7417633cd3425d"}, {&(0x7f0000000500)="9ac62c963ac82fd60c6c7dade60bd5b8389bef0e7236b1d51681a00a4a59e009b0a4f79c0a160227f740b70f8a1280069ccdc2522e080ebbbd03c7bf2879038b85439d69965e71b1a18e10b82a5c6b4b602a8bb2a8b9100d42a46ece4de6bea2802e7ff28177398653a16bdf211b0d85e4d687430a593a0a88d8176433318ae73a8db46b30e70b9799488f03a20317815dae4af6a86454f0e5cd2befc21f978a1e54302290dea4663568195ebd37c188201a18299094c68b6ea369fc098e9bf9"}], 0x10000000000001cf)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdfa53b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r1], 0x398}}, 0x0)

164.27909ms ago: executing program 2 (id=57):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000007bec5590fe2245bf90b093cc59a642e7f3face2b8b7ddd66d0dcbb4a0a8c1df8541f3d9ae95e3590e1f021c5c26f23074463ce36e19a2f4d882348687fd63747c0efa0cd544f5d480496d78f8d2610c37a0b118b95c5d337b9b051ee09cdc2d92206e9a41307f88264321913bf10ebee1f4d149024148ffefa017da57a8c0ab66aa56d5457a66fb0bd2b31246e29e11cc7df7d8c259ecb5259218e8d5f95116ded65821b52c233f18868fedd82a2e4725e193e5e883135ac8234193ef1964f9"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c00020000000000000000001c0007800c00018008000100", @ANYRES32=r1], 0x3c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x2c, 0x19, 0xa428a332fa3ee95f, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000007bec5590fe2245bf90b093cc59a642e7f3face2b8b7ddd66d0dcbb4a0a8c1df8541f3d9ae95e3590e1f021c5c26f23074463ce36e19a2f4d882348687fd63747c0efa0cd544f5d480496d78f8d2610c37a0b118b95c5d337b9b051ee09cdc2d92206e9a41307f88264321913bf10ebee1f4d149024148ffefa017da57a8c0ab66aa56d5457a66fb0bd2b31246e29e11cc7df7d8c259ecb5259218e8d5f95116ded65821b52c233f18868fedd82a2e4725e193e5e883135ac8234193ef1964f9"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async)
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c00020000000000000000001c0007800c00018008000100", @ANYRES32=r1], 0x3c}}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x2c, 0x19, 0xa428a332fa3ee95f, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100)) (async)

77.785911ms ago: executing program 0 (id=58):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, 0xffffffffffffffff, 0x852ac000)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000080)=0x7, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)

77.565208ms ago: executing program 0 (id=59):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)='E', 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xffc0, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

288.745µs ago: executing program 2 (id=60):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x240000c0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}, 0x1, 0x0, 0x0, 0xa6975b0d20b3dc1e}, 0x40)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r8, 0x89ec, &(0x7f0000000000)={0xb7, 0xa})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000c00020000000000000000001c0007800c00018008000100", @ANYRES32=r2], 0x3c}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r10, &(0x7f0000002240)=[{{&(0x7f0000001cc0)={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000001e40)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000090000000003f96ec374073100000000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b50302000000000085000000b8000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000040000000001a0a0000000600010011"], 0x1c}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000019005fe90000000000000000021800000000fd010000000008000100ac141400080005400a010102"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r0}, 0x8)

0s ago: executing program 0 (id=61):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c)
socket$isdn(0x22, 0x2, 0x26)
close(0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x10d4, 0x30, 0x9, 0x0, 0x0, {}, [{0x10c0, 0x1, [@m_ctinfo={0x4c, 0x21, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x0, 0x7, 0xa1b}, @TCA_CTINFO_ACT={0x0, 0x3, {0x6, 0x9, 0x0, 0x1de, 0x8}}, @TCA_CTINFO_ZONE={0x0, 0x4, 0x84f}]}, {0x20, 0x6, "7ac7029d8a5c9b267ad5c6e482b6b798df710b1ec7c47292066daf26"}, {0x5c, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x0, 0x9, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0xffffff5a, 0x4, 0x6, 0xfffffffd, 0x6}, 0x3}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x4c, 0xcc, 0x5, 0x8, 0xffffffff}}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x81, 0x2, 0x4, 0x4, 0x77fcd4d5}, 0x6}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x1, 0x4, 0x6, 0x9}, 0x5}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x8000, 0xbaf, 0x2, 0x4, 0x9}, 0x10}}]}, {0x0, 0x6, "85b285b1059cb4c3c9828fee685738f425fc60b3ea1741bc8e74e7844ce9e3686601cd608235641257045020704bd243f6b49cb9f01cab363e19957facd49889f33a69b02c5192f609d4f99f57e2279c2adfdad5423d48df4f4e39e5d95c3f4bf4b891d34f27abee0eac810820db6545516f7ca116c1d304f6713c04f32b01642c407c2259c5b0e2899853f7a6ef08e31df20c0f5fbe1eb1318d177df35ab5d7a60995419add51cff2e4dab07c2d59eeac59f64cd48ed2aba801dbe2cc1541eaa6996236cb2c68efabe4e54e77747078982b788538818952f9caf2ba48474190"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x1}}}}]}]}, 0x10d4}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000ffffffff4a00201c2b238c95becd4d001400020000000000000000000000ffffac1414bb1400030076657468315f766c616e000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x40400c4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)
read$alg(r5, &(0x7f00000009c0)=""/75, 0x4b)
bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x9, 0xd, 0x8, 0x0, 0x4, 0xffff}}, {0x4}}]}]}, 0x58}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdfa53b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r1], 0x398}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13927' (ED25519) to the list of known hosts.
syzkaller login: [   49.384975][ T5815] cgroup: Unknown subsys name 'net'
[   49.510730][ T5815] cgroup: Unknown subsys name 'cpuset'
[   49.517780][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.998587][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.862747][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.866117][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.868917][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.871855][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.874643][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.903284][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.906557][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.909265][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.912547][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.915541][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.968530][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.973658][ T5219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.977115][ T5219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.980369][ T5219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.983285][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.137636][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.224392][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   55.270046][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.272972][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.277812][ T5827] bridge_slave_0: entered allmulticast mode
[   55.281489][ T5827] bridge_slave_0: entered promiscuous mode
[   55.300289][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.303483][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.306751][ T5827] bridge_slave_1: entered allmulticast mode
[   55.309859][ T5827] bridge_slave_1: entered promiscuous mode
[   55.336401][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   55.344571][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.383798][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.466947][ T5827] team0: Port device team_slave_0 added
[   55.469254][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.472893][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.477285][ T5832] bridge_slave_0: entered allmulticast mode
[   55.481430][ T5832] bridge_slave_0: entered promiscuous mode
[   55.486934][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.490106][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.493332][ T5832] bridge_slave_1: entered allmulticast mode
[   55.497940][ T5832] bridge_slave_1: entered promiscuous mode
[   55.511384][ T5827] team0: Port device team_slave_1 added
[   55.582167][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.587127][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.590412][ T5836] bridge_slave_0: entered allmulticast mode
[   55.594564][ T5836] bridge_slave_0: entered promiscuous mode
[   55.600076][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.603255][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.606929][ T5836] bridge_slave_1: entered allmulticast mode
[   55.611011][ T5836] bridge_slave_1: entered promiscuous mode
[   55.616363][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.619538][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.631131][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.639881][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.671906][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.675089][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.686577][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.693371][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.701008][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.729789][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.734550][ T5832] team0: Port device team_slave_0 added
[   55.748032][ T5832] team0: Port device team_slave_1 added
[   55.787224][ T5836] team0: Port device team_slave_0 added
[   55.793106][ T5827] hsr_slave_0: entered promiscuous mode
[   55.795841][ T5827] hsr_slave_1: entered promiscuous mode
[   55.815490][ T5836] team0: Port device team_slave_1 added
[   55.819468][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.821908][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.830887][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.857014][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.859638][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.869852][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.898080][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.900538][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.910113][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.923960][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.926480][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.934961][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.985875][ T5832] hsr_slave_0: entered promiscuous mode
[   55.988685][ T5832] hsr_slave_1: entered promiscuous mode
[   55.990968][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.993738][ T5832] Cannot create hsr debugfs directory
[   56.008524][ T5836] hsr_slave_0: entered promiscuous mode
[   56.011042][ T5836] hsr_slave_1: entered promiscuous mode
[   56.013372][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.016597][ T5836] Cannot create hsr debugfs directory
[   56.217304][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.225308][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.232906][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.244218][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.281449][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.288338][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.298782][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.311101][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.362486][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.372661][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.381215][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.388104][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.460022][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.472120][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.500889][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   56.514627][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   56.528343][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.530871][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.547739][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.552019][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.555272][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.570261][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.573519][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.581334][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.584552][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.616937][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   56.634113][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.636619][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.663697][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.672333][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.685208][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.688844][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.852259][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.892346][ T5836] veth0_vlan: entered promiscuous mode
[   56.900784][ T5836] veth1_vlan: entered promiscuous mode
[   56.920323][ T5219] Bluetooth: hci0: command tx timeout
[   56.950340][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.959832][ T5836] veth0_macvtap: entered promiscuous mode
[   56.966763][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.978292][ T5836] veth1_macvtap: entered promiscuous mode
[   56.997563][ T5219] Bluetooth: hci2: command tx timeout
[   57.000448][ T5219] Bluetooth: hci1: command tx timeout
[   57.011169][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.019425][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.030588][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.034419][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.038972][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.042463][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.072230][ T5827] veth0_vlan: entered promiscuous mode
[   57.089229][ T5832] veth0_vlan: entered promiscuous mode
[   57.093384][ T5827] veth1_vlan: entered promiscuous mode
[   57.131116][ T5832] veth1_vlan: entered promiscuous mode
[   57.153965][ T5827] veth0_macvtap: entered promiscuous mode
[   57.170462][ T5827] veth1_macvtap: entered promiscuous mode
[   57.188272][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.191469][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.221724][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.234839][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.248207][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.253757][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.258427][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.261010][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.263813][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.267428][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.276750][ T5832] veth0_macvtap: entered promiscuous mode
[   57.290083][ T5832] veth1_macvtap: entered promiscuous mode
[   57.333157][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.381368][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.400275][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.402922][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.408532][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.428264][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.431206][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.433978][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.450408][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.471799][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.474486][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.585770][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.588661][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.619337][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.622986][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.664096][ T5902] delete_channel: no stack
[   57.786962][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.797616][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.805501][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.828745][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'.
[   57.947788][ T5906] infiniband syz!: set active
[   57.949929][ T5906] infiniband syz!: added team_slave_0
[   58.031856][ T5906] RDS/IB: syz!: added
[   58.042676][ T5906] smc: adding ib device syz! with port count 1
[   58.070683][ T5906] smc:    ib device syz! port 1 has pnetid 
[   58.110853][ T5919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.148600][ T5919] 8021q: VLANs not supported on vxcan0
[   58.501461][ T5925] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12'.
[   58.658473][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   58.884946][ T5944] delete_channel: no stack
[   58.924154][  T791] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[   58.983654][   T56] block nbd1: Wrong magic (0xcf745c9d)
[   59.000384][   T54] Bluetooth: hci0: command tx timeout
[   59.052237][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'.
[   59.079242][   T54] Bluetooth: hci1: command tx timeout
[   59.081188][   T54] Bluetooth: hci2: command tx timeout
[   59.088266][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'.
[   59.094856][ T5957] netlink: 88 bytes leftover after parsing attributes in process `syz.2.23'.
[   59.097994][ T5957] netlink: 88 bytes leftover after parsing attributes in process `syz.2.23'.
[   59.291236][ T5963] Zero length message leads to an empty skb
[   59.365064][ T5968] ieee802154 phy0 wpan0: encryption failed: -22
[   59.700210][ T5990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.705148][ T5990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.779933][ T5998] delete_channel: no stack
[   59.978065][ T6012] sctp: [Deprecated]: syz.1.45 (pid 6012) Use of struct sctp_assoc_value in delayed_ack socket option.
[   59.978065][ T6012] Use struct sctp_sack_info instead
[   60.134136][ T6022] 8021q: VLANs not supported on vxcan0
[   60.243598][ T6031] delete_channel: no stack
[   60.459314][ T6055] netlink: 'syz.2.60': attribute type 2 has an invalid length.
[   60.485071][ T6058] delete_channel: no stack
Connection to localhost closed by remote host.
[   60.554135][ T6060] syz!: rxe_newlink: already configured on team_slave_0
[   60.827099][ T5947] ==================================================================
[   60.830714][ T5947] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[   60.834054][ T5947] Read of size 8 at addr ffff8880285140a0 by task khidpd_04585505/5947
[   60.838596][ T5947] 
[   60.839682][ T5947] CPU: 1 UID: 0 PID: 5947 Comm: khidpd_04585505 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   60.839699][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.839706][ T5947] Call Trace:
[   60.839713][ T5947]  <TASK>
[   60.839720][ T5947]  dump_stack_lvl+0x189/0x250
[   60.839739][ T5947]  ? __virt_addr_valid+0x1c8/0x5c0
[   60.839755][ T5947]  ? rcu_is_watching+0x15/0xb0
[   60.839768][ T5947]  ? __kasan_check_byte+0x12/0x40
[   60.839786][ T5947]  ? __pfx_dump_stack_lvl+0x10/0x10
[   60.839799][ T5947]  ? rcu_is_watching+0x15/0xb0
[   60.839812][ T5947]  ? lock_release+0x4b/0x3e0
[   60.839825][ T5947]  ? __virt_addr_valid+0x1c8/0x5c0
[   60.839838][ T5947]  ? __virt_addr_valid+0x4a5/0x5c0
[   60.839853][ T5947]  print_report+0xd2/0x2b0
[   60.839866][ T5947]  ? __mutex_lock+0x738/0xe80
[   60.839878][ T5947]  kasan_report+0x118/0x150
[   60.839894][ T5947]  ? __mutex_lock+0x738/0xe80
[   60.839908][ T5947]  __mutex_lock+0x738/0xe80
[   60.839920][ T5947]  ? __mutex_lock+0x51b/0xe80
[   60.839932][ T5947]  ? l2cap_unregister_user+0x6a/0x1b0
[   60.839946][ T5947]  ? __pfx___mutex_lock+0x10/0x10
[   60.839959][ T5947]  ? __pfx___timer_delete_sync+0x10/0x10
[   60.839978][ T5947]  l2cap_unregister_user+0x6a/0x1b0
[   60.839991][ T5947]  hidp_session_thread+0x3c9/0x410
[   60.840006][ T5947]  ? __pfx_hidp_session_thread+0x10/0x10
[   60.840047][ T5947]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   60.840067][ T5947]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   60.840079][ T5947]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   60.840091][ T5947]  ? __kthread_parkme+0x7b/0x200
[   60.840106][ T5947]  ? __kthread_parkme+0x1a1/0x200
[   60.840122][ T5947]  kthread+0x711/0x8a0
[   60.840137][ T5947]  ? __pfx_hidp_session_thread+0x10/0x10
[   60.840148][ T5947]  ? __pfx_kthread+0x10/0x10
[   60.840163][ T5947]  ? _raw_spin_unlock_irq+0x23/0x50
[   60.840179][ T5947]  ? lockdep_hardirqs_on+0x9c/0x150
[   60.840190][ T5947]  ? __pfx_kthread+0x10/0x10
[   60.840205][ T5947]  ret_from_fork+0x3fc/0x770
[   60.840219][ T5947]  ? __pfx_ret_from_fork+0x10/0x10
[   60.840232][ T5947]  ? __switch_to_asm+0x39/0x70
[   60.840246][ T5947]  ? __switch_to_asm+0x33/0x70
[   60.840260][ T5947]  ? __pfx_kthread+0x10/0x10
[   60.840275][ T5947]  ret_from_fork_asm+0x1a/0x30
[   60.840294][ T5947]  </TASK>
[   60.840299][ T5947] 
[   60.937880][ T5947] Allocated by task 5836:
[   60.939732][ T5947]  kasan_save_track+0x3e/0x80
[   60.941775][ T5947]  __kasan_kmalloc+0x93/0xb0
[   60.943796][ T5947]  __kmalloc_noprof+0x27a/0x4f0
[   60.945900][ T5947]  hci_alloc_dev_priv+0x28/0x2040
[   60.948095][ T5947]  vhci_create_device+0x120/0x6e0
[   60.950268][ T5947]  vhci_write+0x3ce/0x4a0
[   60.952127][ T5947]  vfs_write+0x54b/0xa90
[   60.953898][ T5947]  ksys_write+0x145/0x250
[   60.955726][ T5947]  do_syscall_64+0xfa/0x3b0
[   60.957709][ T5947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.960211][ T5947] 
[   60.961277][ T5947] Freed by task 6055:
[   60.962992][ T5947]  kasan_save_track+0x3e/0x80
[   60.965056][ T5947]  kasan_save_free_info+0x46/0x50
[   60.967228][ T5947]  __kasan_slab_free+0x62/0x70
[   60.969297][ T5947]  kfree+0x18e/0x440
[   60.971055][ T5947]  bt_host_release+0x82/0x90
[   60.973101][ T5947]  device_release+0x9c/0x1c0
[   60.975115][ T5947]  kobject_put+0x22b/0x480
[   60.977059][ T5947]  vhci_release+0x88/0xd0
[   60.978896][ T5947]  __fput+0x44c/0xa70
[   60.980591][ T5947]  task_work_run+0x1d4/0x260
[   60.982766][ T5947]  do_exit+0x6b5/0x22e0
[   60.984623][ T5947]  do_group_exit+0x21c/0x2d0
[   60.986633][ T5947]  get_signal+0x1286/0x1340
[   60.988591][ T5947]  arch_do_signal_or_restart+0x9a/0x750
[   60.990949][ T5947]  exit_to_user_mode_loop+0x75/0x110
[   60.993205][ T5947]  do_syscall_64+0x2bd/0x3b0
[   60.995193][ T5947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.997787][ T5947] 
[   60.998837][ T5947] Last potentially related work creation:
[   61.001210][ T5947]  kasan_save_stack+0x3e/0x60
[   61.003243][ T5947]  kasan_record_aux_stack+0xbd/0xd0
[   61.005507][ T5947]  insert_work+0x3d/0x330
[   61.007348][ T5947]  __queue_work+0xbd9/0xfe0
[   61.009321][ T5947]  queue_work_on+0x181/0x270
[   61.011347][ T5947]  process_scheduled_works+0xae1/0x17b0
[   61.013755][ T5947]  worker_thread+0x8a0/0xda0
[   61.015772][ T5947]  kthread+0x711/0x8a0
[   61.017592][ T5947]  ret_from_fork+0x3fc/0x770
[   61.019597][ T5947]  ret_from_fork_asm+0x1a/0x30
[   61.021633][ T5947] 
[   61.022708][ T5947] Second to last potentially related work creation:
[   61.025487][ T5947]  kasan_save_stack+0x3e/0x60
[   61.027486][ T5947]  kasan_record_aux_stack+0xbd/0xd0
[   61.029698][ T5947]  insert_work+0x3d/0x330
[   61.031534][ T5947]  __queue_work+0xcfc/0xfe0
[   61.033528][ T5947]  call_timer_fn+0x17e/0x5f0
[   61.035579][ T5947]  __run_timer_base+0x646/0x860
[   61.037776][ T5947]  run_timer_softirq+0xb7/0x180
[   61.039648][ T5947]  handle_softirqs+0x286/0x870
[   61.041622][ T5947]  __irq_exit_rcu+0xca/0x1f0
[   61.043392][ T5947]  irq_exit_rcu+0x9/0x30
[   61.045015][ T5947]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   61.047044][ T5947]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   61.049244][ T5947] 
[   61.050125][ T5947] The buggy address belongs to the object at ffff888028514000
[   61.050125][ T5947]  which belongs to the cache kmalloc-8k of size 8192
[   61.056100][ T5947] The buggy address is located 160 bytes inside of
[   61.056100][ T5947]  freed 8192-byte region [ffff888028514000, ffff888028516000)
[   61.062161][ T5947] 
[   61.063278][ T5947] The buggy address belongs to the physical page:
[   61.066124][ T5947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28510
[   61.069833][ T5947] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   61.073377][ T5947] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   61.076458][ T5947] page_type: f5(slab)
[   61.077995][ T5947] raw: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001
[   61.081218][ T5947] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   61.084792][ T5947] head: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001
[   61.088628][ T5947] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   61.092253][ T5947] head: 00fff00000000003 ffffea0000a14401 00000000ffffffff 00000000ffffffff
[   61.095843][ T5947] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   61.099507][ T5947] page dumped because: kasan: bad access detected
[   61.102272][ T5947] page_owner tracks the page as allocated
[   61.104397][ T5947] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5572, tgid 5572 (start-stop-daem), ts 30543588333, free_ts 28484367947
[   61.112971][ T5947]  post_alloc_hook+0x240/0x2a0
[   61.115056][ T5947]  get_page_from_freelist+0x21e4/0x22c0
[   61.117331][ T5947]  __alloc_frozen_pages_noprof+0x181/0x370
[   61.119286][ T5947]  alloc_pages_mpol+0x232/0x4a0
[   61.120943][ T5947]  allocate_slab+0x8a/0x3b0
[   61.122507][ T5947]  ___slab_alloc+0xbfc/0x1480
[   61.124118][ T5947]  __kmalloc_cache_noprof+0x296/0x3d0
[   61.125956][ T5947]  tomoyo_init_log+0x111f/0x1f70
[   61.127628][ T5947]  tomoyo_supervisor+0x340/0x1480
[   61.129337][ T5947]  tomoyo_env_perm+0x149/0x1e0
[   61.130943][ T5947]  tomoyo_find_next_domain+0x15cf/0x1aa0
[   61.132819][ T5947]  tomoyo_bprm_check_security+0x11c/0x180
[   61.134681][ T5947]  security_bprm_check+0x89/0x270
[   61.136361][ T5947]  bprm_execve+0x8ee/0x1450
[   61.137911][ T5947]  do_execveat_common+0x510/0x6a0
[   61.139601][ T5947]  __x64_sys_execve+0x94/0xb0
[   61.141170][ T5947] page last free pid 5286 tgid 5286 stack trace:
[   61.143250][ T5947]  __free_frozen_pages+0xc71/0xe70
[   61.144907][ T5947]  __put_partials+0x161/0x1c0
[   61.146500][ T5947]  put_cpu_partial+0x17c/0x250
[   61.148090][ T5947]  __slab_free+0x2f7/0x400
[   61.149546][ T5947]  qlist_free_all+0x97/0x140
[   61.151091][ T5947]  kasan_quarantine_reduce+0x148/0x160
[   61.152842][ T5947]  __kasan_slab_alloc+0x22/0x80
[   61.154472][ T5947]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   61.156456][ T5947]  getname_flags+0xb8/0x540
[   61.158119][ T5947]  do_sys_openat2+0xbc/0x1c0
[   61.159619][ T5947]  __x64_sys_openat+0x138/0x170
[   61.161206][ T5947]  do_syscall_64+0xfa/0x3b0
[   61.162686][ T5947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.164619][ T5947] 
[   61.165435][ T5947] Memory state around the buggy address:
[   61.167272][ T5947]  ffff888028513f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   61.169853][ T5947]  ffff888028514000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   61.172435][ T5947] >ffff888028514080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   61.175067][ T5947]                                ^
[   61.176808][ T5947]  ffff888028514100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   61.179361][ T5947]  ffff888028514180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   61.181944][ T5947] ==================================================================
[   61.185220][ T5947] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   61.188087][ T5947] CPU: 1 UID: 0 PID: 5947 Comm: khidpd_04585505 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   61.192912][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.196734][ T5947] Call Trace:
[   61.198054][ T5947]  <TASK>
[   61.199191][ T5947]  dump_stack_lvl+0x99/0x250
[   61.200972][ T5947]  ? __asan_memcpy+0x40/0x70
[   61.202722][ T5947]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.204686][ T5947]  ? __pfx__printk+0x10/0x10
[   61.206488][ T5947]  panic+0x2db/0x790
[   61.208012][ T5947]  ? __pfx_panic+0x10/0x10
[   61.209725][ T5947]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   61.211950][ T5947]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   61.214206][ T5947]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   61.216651][ T5947]  ? print_memory_metadata+0x314/0x400
[   61.218712][ T5947]  ? __mutex_lock+0x738/0xe80
[   61.220472][ T5947]  check_panic_on_warn+0x89/0xb0
[   61.222439][ T5947]  ? __mutex_lock+0x738/0xe80
[   61.224357][ T5947]  end_report+0x78/0x160
[   61.226105][ T5947]  kasan_report+0x129/0x150
[   61.227877][ T5947]  ? __mutex_lock+0x738/0xe80
[   61.229728][ T5947]  __mutex_lock+0x738/0xe80
[   61.231506][ T5947]  ? __mutex_lock+0x51b/0xe80
[   61.233314][ T5947]  ? l2cap_unregister_user+0x6a/0x1b0
[   61.235340][ T5947]  ? __pfx___mutex_lock+0x10/0x10
[   61.237042][ T5947]  ? __pfx___timer_delete_sync+0x10/0x10
[   61.238955][ T5947]  l2cap_unregister_user+0x6a/0x1b0
[   61.240713][ T5947]  hidp_session_thread+0x3c9/0x410
[   61.242431][ T5947]  ? __pfx_hidp_session_thread+0x10/0x10
[   61.244297][ T5947]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   61.246274][ T5947]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   61.248322][ T5947]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   61.250363][ T5947]  ? __kthread_parkme+0x7b/0x200
[   61.252109][ T5947]  ? __kthread_parkme+0x1a1/0x200
[   61.253845][ T5947]  kthread+0x711/0x8a0
[   61.255273][ T5947]  ? __pfx_hidp_session_thread+0x10/0x10
[   61.257170][ T5947]  ? __pfx_kthread+0x10/0x10
[   61.258743][ T5947]  ? _raw_spin_unlock_irq+0x23/0x50
[   61.260534][ T5947]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.262304][ T5947]  ? __pfx_kthread+0x10/0x10
[   61.263863][ T5947]  ret_from_fork+0x3fc/0x770
[   61.265445][ T5947]  ? __pfx_ret_from_fork+0x10/0x10
[   61.267132][ T5947]  ? __switch_to_asm+0x39/0x70
[   61.268709][ T5947]  ? __switch_to_asm+0x33/0x70
[   61.270310][ T5947]  ? __pfx_kthread+0x10/0x10
[   61.271905][ T5947]  ret_from_fork_asm+0x1a/0x30
[   61.273550][ T5947]  </TASK>
[   61.275247][ T5947] Kernel Offset: disabled
[   61.276689][ T5947] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:40:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff90253c70 RCX=dffffc0000000000 RDX=ffffffff90253c3c
RSI=ffffffff90d8cc0c RDI=ffffffff8be28be0 RBP=ffffffff90253c3c RSP=ffffc90000007658
R8 =000000000000000e R9 =ffffffff8172aae5 R10=ffffc90000007778 R11=ffffffff81ad03a0
R12=ffffffff8b6d4fe5 R13=ffffffff90253c3c R14=ffffc90000007728 R15=ffffffff90253c54
RIP=ffffffff8172bd4e RFL=00000803 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6e0b6a6d58 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6e0a986478 00007f6e0a986450 XMM03=00007f6e0a986488 00007f6e0a986480
XMM04=00007f6e0b4ed100 00007f6e0a986440 XMM05=00007f6e0a986458 00007f6e0a9864a0
XMM06=00007f6e0a986498 00007f6e0a986490 XMM07=00007f6e0a986488 00007f6e0a986480
XMM08=00088002003c0064 7766000100088001 XMM09=0000000000000000 00007f6e0a811df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003fff370
R8 =ffff888020478237 R9 =1ffff1100408f046 R10=dffffc0000000000 R11=ffffffff85460dc0
R12=dffffc0000000000 R13=ffffffff99aee8ae R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c250dbb CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=28004b0008000000 0000010008000406
XMM02=f9ac79a963033d65 a655b6757f52a0a9 XMM03=275716de09042890 3e42687da0ee883f
XMM04=70110d7b47ebe883 175d91f32b6a715f XMM05=f33147de34c99846 fdc504771768e6eb
XMM06=d7f92a28ab0cae80 b351b88296edebd0 XMM07=ed7775a7d23844b3 e4fbd2b39a6eb7e1
XMM08=234cefbdecf07011 0d7b47ebe883175d XMM09=0000000000000000 00007fe22cc11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
