last executing test programs:

1.664067927s ago: executing program 2 (id=3):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1, 0xfffe, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x72, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x2, 0x10, "c600a710a500000000100000000089de"}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000003000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0)

1.527636302s ago: executing program 2 (id=4):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10) (async)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
close(0x4)

1.437198742s ago: executing program 2 (id=5):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000680)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8015}, 0x20000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000040), 0x0}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="0700000f00000000000000000c00000000000010", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000020000000300"/28], 0x50)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x5914392ab19c8ed1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000016}, 0x20008000)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, 0xfffffffffffffffc, 0x0)
r8 = socket$kcm(0x29, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e2b, 0x2, @empty, 0x5a60}, 0x1c)
write$cgroup_subtree(r5, &(0x7f0000000440)={[{0x2d, 'rdma'}]}, 0x6)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000400)={<r10=>r9})
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000180)={r9, r0})
sendmmsg$inet(r8, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)='U', 0xffd8}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="4ae8", 0x2}], 0x1}}], 0x2, 0x20004050)

1.339344771s ago: executing program 2 (id=6):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007112a9000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

1.18718062s ago: executing program 1 (id=8):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010028bd700002dcdf250900020073797a310000000008004100736977001400330069703667726530000000000017000000"], 0x38}, 0x1, 0x0, 0x0, 0xc890}, 0x20000000) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r4=>0xffffffffffffffff}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) (async, rerun: 64)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 64)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000001}, 0x0, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x8, 0x3af81ffd, 0x7fffffff}, 0x0, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=<r11=>0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12)
sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r11, @ANYBLOB="a15013a8a389f7b8ebb2f8b98016ec133a5d9551274958dfaab89671a981eedc44f8d86c55309bf143c7db13f120c10cd33972fdfbd1b6aef0fab9f60369e7afabadba6052f76e596fbdf76af8ad305308ab69a45be1f7451fe1580be20e8940e2ac5b50bc4eb1f2c20cdd632c50d393eeb4db8f53df5c504eb6fe305f01e6421c0976e939c397090c10c6e95a255909b8cc1129eccfcbc85a"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) (async)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801006256c2db0a5dc451f198457857bc03002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r14, 0x0, 0xd}, 0x18) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)

1.075607826s ago: executing program 1 (id=10):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000084)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
unshare(0xc020680)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e21, @remote}, 0x65, 0x0, 0x0, 0x0, 0x8, 0x0, 0x100000a, 0x3, 0xc34})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x200000000000022b)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x44014)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
sendto(r0, &(0x7f0000000200)="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", 0xfb, 0x40000, &(0x7f00000003c0)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2, 0x2}}, 0x80)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x46, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)

1.073720083s ago: executing program 0 (id=12):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x1, @private=0xa010101}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001800)=""/183, 0xb7}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0)

998.764007ms ago: executing program 0 (id=13):
getsockopt(0xffffffffffffffff, 0x118, 0x271d, 0x0, &(0x7f0000000040)) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3)
sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf2509000000050005"], 0x24}, 0x1, 0x0, 0x0, 0x40044080}, 0x4000000) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0xff, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xff000000, 0xffffff00, 0xff000000], 'bond0\x00', 'netdevsim0\x00', {}, {0xff}, 0x2, 0x5, 0x3, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x6, 0xe618}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xc}}}, {{@ipv6={@mcast1, @loopback, [0xffffff00, 0xffffff00, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0xff], 'rose0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x21, 0x5, 0x1, 0x25}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0xa521, 0xeb, 0x1, 0x9, 0x40, 0x0, 0xff]}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0xffffffff, 0xff, 0xff, 0xffffff00], [0xffffffff, 0x0, 0xff, 0xff000000], 'veth0_virt_wifi\x00', 'rose0\x00', {}, {0xff}, 0xd8897ca3bcc96c24, 0x80, 0x4, 0x62}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28}, {"8ab5"}}, @common=@ah={{0x30}, {[0x4d3, 0x4d4], 0xff, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) (async)
write$cgroup_devices(r2, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x0, @xdp={0x2c, 0x4, 0x0, 0x32}, @in={0x2, 0x4e23, @broadcast}, @can, 0xbca, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe2ab, 0xc, 0x9})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0}) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001340)="b6d9d8350c8a10c66942c285dec90714a1234c1bf0aae8f28c4a8ca13c15c1bfba272b664adb5ceae8a78ebe34c66b987f69112aebe511278635c6915b5e1ab262be4dede5d4920f8df92c5c9affe47f3cef0453ac69ae0ed71fb6910c7b629bf5c41f27aec29f1b2df8896aa4fd758bb4f04d14aa1f0c2753753491dc42d9b83fc2d5aa1819a4991dbc716b54278aecdd0c34c6073e27947f50b64339b37d536e", 0xa1}], 0x1, 0x0, 0x150}}], 0x1, 0x8008840) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08004d01", @ANYRES32=r9, @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x184, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_MASK={0x90, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x5c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x184}}, 0x4)

994.340847ms ago: executing program 0 (id=14):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x2, @empty, 0x5a60}, 0x1c)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={<r3=>r2})
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r2, r0})
sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)='U', 0x34000}], 0x12}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="4ae8", 0x2}], 0x1}}], 0x2, 0x20004050)

938.555337ms ago: executing program 0 (id=15):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
r3 = socket(0x28, 0x6, 0xad7)
setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000080)=0x101, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80000, 0x8)

820.056702ms ago: executing program 0 (id=16):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000080000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ffff080000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000fedbdf2500"/20, @ANYRES32=0x0, @ANYBLOB="40000000000000000c002b80080003000000"], 0x2c}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x8000000, @empty}}, 0x0, 0x0, 0xfffffffd, 0x0, 0x8a, 0x5}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x70)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x6}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008085}, 0x8814)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
shutdown(r4, 0x2)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000380)={0x2, 0x6e20, @rand_addr=0x64010102}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1a030}}, 0x0)

420.362766ms ago: executing program 0 (id=17):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f00000017c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001940), 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{0x6, 0x80000001}, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x8000000005, 0xd, 0x6, 0x4d1680000000000, 0x2, 0x6, 0x101}}], 0x58}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000fae20200703aba"])
bind$x25(r2, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f400000000010505000000f1000000000a000005a80002806300018014000300fe8000000000000000000000000000bb1400040000000000000000000000000000000000060003400004000006000340000000001400018008000100e0000001080002000a01010114000180080001006401010208000200ac1e00012b2a87ac82f4e903000000000000000000000000000000000014000400000000000000000000000000000020bd0d0000802c0001800600050205050000050002000200000006000400f7020000060005000806000005000300b800000008001a4000000c890000170000000b00"/246], 0xf4}}, 0x0)
getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r1, &(0x7f0000000280)=""/8, 0x8, 0x700, 0x0, 0x0)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xcf, 0x2}, 0x8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00'})

150.105824ms ago: executing program 1 (id=18):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1, 0xfffe, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x72, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x2, 0x10, "c600a710a500000000100000000089de"}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a3000000000f000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0)

149.741209ms ago: executing program 1 (id=19):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r3, 0x1a, 0x0, @val=@target_btf_id=r2}, 0x14)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (rerun: 64)

69.646267ms ago: executing program 2 (id=20):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls=0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)

69.244473ms ago: executing program 1 (id=21):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x0, 0x1000, 0x70, &(0x7f00000001c0)="01c45cc6439663a61a85bf3a04b7dde5622e0fd5b05433df672a1231ad9ff9f88437181441c308b9d5b5a1fde02594312768d2e4ddb8b995d23a39510118511b3c670a254cb3533f0c752d4941a4a8218d5cc768cb0760a739f2492c760fe2ca9d9af65fd0f5a9d50fe8603e45c7ee93", 0xfa, 0x0, &(0x7f0000000240)="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"})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x3e, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)

68.858644ms ago: executing program 2 (id=22):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000c23000/0x2000)=nil, 0x2000, 0x1000002, 0x40031, 0xffffffffffffffff, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a1c000016000000080000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000002000000000851000000600000018100000", @ANYRES32=r5, @ANYRES16=r1], &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd30, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0xffe4}, {0x9, 0x2}, {0xc, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, 0x0, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x10, 0x803, 0x3)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@gettaction={0x84, 0x32, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x85}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x84}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="d7"]}]}}]}]}]}}]}, 0x74}}, 0x20040054)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x4}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r3, 0x0)

0s ago: executing program 1 (id=23):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000084)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
unshare(0xc020680)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e21, @remote}, 0x65, 0x0, 0x0, 0x0, 0x8, 0x0, 0x100000a, 0x3, 0xc34})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x200000000000022b)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x44014)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
sendto(r1, &(0x7f0000000200)="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", 0xfb, 0x40000, &(0x7f00000003c0)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2, 0x2}}, 0x80)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x46, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13325' (ED25519) to the list of known hosts.
syzkaller login: [   47.526207][ T5802] cgroup: Unknown subsys name 'net'
[   47.611563][ T5802] cgroup: Unknown subsys name 'cpuset'
[   47.615547][ T5802] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.476755][ T5802] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.481443][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.484246][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.487462][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.489881][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.493428][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.495749][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.498517][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.501560][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.504439][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.507535][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.534568][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.537953][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.541156][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.544723][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.547854][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.672720][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   53.810096][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.812253][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.814499][ T5817] bridge_slave_0: entered allmulticast mode
[   53.817776][ T5817] bridge_slave_0: entered promiscuous mode
[   53.826392][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.830003][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.832214][ T5817] bridge_slave_1: entered allmulticast mode
[   53.834769][ T5817] bridge_slave_1: entered promiscuous mode
[   53.843386][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   53.866877][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.877366][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.931129][ T5817] team0: Port device team_slave_0 added
[   53.945656][ T5817] team0: Port device team_slave_1 added
[   53.992458][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.995499][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.998654][ T5816] bridge_slave_0: entered allmulticast mode
[   54.002544][ T5816] bridge_slave_0: entered promiscuous mode
[   54.007123][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.009577][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.012098][ T5816] bridge_slave_1: entered allmulticast mode
[   54.015803][ T5816] bridge_slave_1: entered promiscuous mode
[   54.038471][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.040805][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.048543][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.053573][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.055828][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.064679][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.069520][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   54.109257][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.139868][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.148638][ T5817] hsr_slave_0: entered promiscuous mode
[   54.150856][ T5817] hsr_slave_1: entered promiscuous mode
[   54.229285][ T5816] team0: Port device team_slave_0 added
[   54.243511][ T5816] team0: Port device team_slave_1 added
[   54.245866][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.251132][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.254030][ T5825] bridge_slave_0: entered allmulticast mode
[   54.257772][ T5825] bridge_slave_0: entered promiscuous mode
[   54.279078][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.282001][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.284900][ T5825] bridge_slave_1: entered allmulticast mode
[   54.289117][ T5825] bridge_slave_1: entered promiscuous mode
[   54.308320][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.310479][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.318383][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.331080][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.333373][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.341537][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.349896][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.361110][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.395216][ T5825] team0: Port device team_slave_0 added
[   54.410460][ T5825] team0: Port device team_slave_1 added
[   54.415524][ T5816] hsr_slave_0: entered promiscuous mode
[   54.417919][ T5816] hsr_slave_1: entered promiscuous mode
[   54.419947][ T5816] debugfs: 'hsr0' already exists in 'hsr'
[   54.421752][ T5816] Cannot create hsr debugfs directory
[   54.442285][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.444448][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.452665][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.457075][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.459707][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.468376][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.538621][ T5825] hsr_slave_0: entered promiscuous mode
[   54.540802][ T5825] hsr_slave_1: entered promiscuous mode
[   54.542881][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   54.544631][ T5825] Cannot create hsr debugfs directory
[   54.546696][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.552830][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.563482][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.569033][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.641370][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.643703][ T5817] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.646371][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.648653][ T5817] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.730990][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.734636][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.747758][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.753279][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.768223][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.785342][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.798369][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.811707][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.819010][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.828025][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.832891][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.842173][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   54.858081][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.860687][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.873181][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.875999][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.963699][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.980953][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.991789][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   55.010541][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.012906][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.017824][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   55.025267][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.027693][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.039795][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.042106][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.054495][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.056829][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.070082][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.124307][ T5817] veth0_vlan: entered promiscuous mode
[   55.131455][ T5817] veth1_vlan: entered promiscuous mode
[   55.152452][ T5817] veth0_macvtap: entered promiscuous mode
[   55.163195][ T5817] veth1_macvtap: entered promiscuous mode
[   55.182817][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.193419][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.211530][ T5672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.223522][ T5672] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.229891][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.233028][ T5672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.239211][ T5672] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.275642][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.301619][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.313212][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.336311][ T5816] veth0_vlan: entered promiscuous mode
[   55.352326][ T5816] veth1_vlan: entered promiscuous mode
[   55.354781][ T5825] veth0_vlan: entered promiscuous mode
[   55.359041][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.360476][ T5825] veth1_vlan: entered promiscuous mode
[   55.367479][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.393073][ T5816] veth0_macvtap: entered promiscuous mode
[   55.411431][ T5825] veth0_macvtap: entered promiscuous mode
[   55.415301][ T5816] veth1_macvtap: entered promiscuous mode
[   55.421310][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.427521][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.431940][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.435309][ T5825] veth1_macvtap: entered promiscuous mode
[   55.467317][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.470167][ T5672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.473399][ T5672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.495998][ T5672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.505261][ T5672] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.512415][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.527407][   T55] Bluetooth: hci0: command tx timeout
[   55.528510][ T5824] Bluetooth: hci1: command tx timeout
[   55.555319][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.559216][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.564729][ T5672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.573518][ T5672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.591238][ T5672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.598679][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.601017][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.604551][ T5672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.608612][ T5824] Bluetooth: hci2: command tx timeout
[   55.685395][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.701711][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.725562][ T5889] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.735749][ T5889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   55.746120][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.747706][ T5889] xt_socket: unknown flags 0x50
[   55.749771][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.755729][ T5889] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   55.824440][ T5894] gretap1: entered promiscuous mode
[   55.865523][ T5889] x_tables: duplicate underflow at hook 1
[   55.898424][ T5898] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7'.
[   56.048783][ T5912] rdma_op ffff8881b5c091f0 conn xmit_rdma 0000000000000000
[   56.312470][ T5932] netlink: 'syz.0.16': attribute type 13 has an invalid length.
[   56.393292][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.396223][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.455235][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.460454][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.571240][ T5672] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.584523][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.588174][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.594616][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.639772][ T5937] atomic_op ffff88810a60f998 conn xmit_atomic 0000000000000000
[   56.715447][ T5939] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17'.
[   56.718752][ T5939] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17'.
[   57.040508][ T5950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'.
[   57.066291][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'.
[   57.077511][ T5952] Zero length message leads to an empty skb
[   57.532046][ T5938] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[   57.535668][ T5938] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[   57.538239][ T5938] CPU: 1 UID: 0 PID: 5938 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) 
[   57.540868][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   57.543801][ T5938] RIP: 0010:klist_del+0x49/0x110
[   57.545265][ T5938] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 bc e6 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b bc e6 f6 4d 8b 7e 58 4c 89 f7 e8 3f f8
[   57.550976][ T5938] RSP: 0018:ffffc90005547748 EFLAGS: 00010202
[   57.552764][ T5938] RAX: 000000000000000b RBX: ffff888103f0bc60 RCX: ffff88816d5c5700
[   57.555050][ T5938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[   57.557441][ T5938] RBP: ffffc90005547870 R08: ffff8881bcbb1f03 R09: 1ffff110379763e0
[   57.559759][ T5938] R10: dffffc0000000000 R11: ffffed10379763e1 R12: dffffc0000000000
[   57.562056][ T5938] R13: 1ffff110207e178c R14: 0000000000000000 R15: ffff88811384e758
[   57.564353][ T5938] FS:  0000000000000000(0000) GS:ffff8882a9f31000(0000) knlGS:0000000000000000
[   57.567100][ T5938] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   57.569087][ T5938] CR2: 000055f92f725278 CR3: 000000000dd38000 CR4: 00000000000006f0
[   57.571600][ T5938] Call Trace:
[   57.572620][ T5938]  <TASK>
[   57.573494][ T5938]  device_del+0x280/0x8e0
[   57.574902][ T5938]  ? _raw_spin_unlock_irq+0x2e/0x50
[   57.576787][ T5938]  ? pm_runtime_set_memalloc_noio+0x1f4/0x260
[   57.578662][ T5938]  ? __pfx_device_del+0x10/0x10
[   57.580176][ T5938]  ? netdev_unregister_kobject+0x344/0x450
[   57.582052][ T5938]  unregister_netdevice_many_notify+0x1df2/0x2390
[   57.583920][ T5938]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[   57.585937][ T5938]  ? rtnl_net_dev_lock+0x257/0x2f0
[   57.587633][ T5938]  unregister_netdevice_queue+0x33c/0x380
[   57.589372][ T5938]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[   57.591231][ T5938]  ? rtnl_net_dev_lock+0x36/0x2f0
[   57.592825][ T5938]  ? rtnl_net_dev_lock+0x2de/0x2f0
[   57.594380][ T5938]  unregister_netdev+0x1f/0x60
[   57.596098][ T5938]  bnep_session+0x294d/0x2b40
[   57.597663][ T5938]  ? rcu_is_watching+0x15/0xb0
[   57.599367][ T5938]  ? trace_sched_exit_tp+0x36/0x110
[   57.601190][ T5938]  ? __lock_acquire+0xab9/0xd20
[   57.602913][ T5938]  ? __pfx_bnep_session+0x10/0x10
[   57.604759][ T5938]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   57.606863][ T5938]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   57.609071][ T5938]  ? __pfx_woken_wake_function+0x10/0x10
[   57.611011][ T5938]  ? __kthread_parkme+0x7b/0x200
[   57.612804][ T5938]  ? __kthread_parkme+0x1a1/0x200
[   57.614621][ T5938]  kthread+0x711/0x8a0
[   57.616050][ T5938]  ? __pfx_bnep_session+0x10/0x10
[   57.617698][ T5938]  ? __pfx_kthread+0x10/0x10
[   57.619074][ T5938]  ? _raw_spin_unlock_irq+0x23/0x50
[   57.620680][ T5938]  ? lockdep_hardirqs_on+0x9c/0x150
[   57.622287][ T5938]  ? __pfx_kthread+0x10/0x10
[   57.623667][ T5938]  ret_from_fork+0x4bc/0x870
[   57.625015][ T5938]  ? __pfx_ret_from_fork+0x10/0x10
[   57.626573][ T5938]  ? __switch_to_asm+0x39/0x70
[   57.628065][ T5938]  ? __switch_to_asm+0x33/0x70
[   57.629482][ T5938]  ? __pfx_kthread+0x10/0x10
[   57.630882][ T5938]  ret_from_fork_asm+0x1a/0x30
[   57.632313][ T5938]  </TASK>
[   57.633252][ T5938] Modules linked in:
[   57.635078][ T5938] ---[ end trace 0000000000000000 ]---
[   57.639477][ T5938] RIP: 0010:klist_del+0x49/0x110
[   57.641398][ T5938] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 bc e6 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b bc e6 f6 4d 8b 7e 58 4c 89 f7 e8 3f f8
[   57.647858][ T5938] RSP: 0018:ffffc90005547748 EFLAGS: 00010202
[   57.650150][ T5938] RAX: 000000000000000b RBX: ffff888103f0bc60 RCX: ffff88816d5c5700
[   57.652767][ T5938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[   57.655299][ T5938] RBP: ffffc90005547870 R08: ffff8881bcbb1f03 R09: 1ffff110379763e0
[   57.658144][ T5938] R10: dffffc0000000000 R11: ffffed10379763e1 R12: dffffc0000000000
[   57.660530][ T5938] R13: 1ffff110207e178c R14: 0000000000000000 R15: ffff88811384e758
[   57.662901][ T5938] FS:  0000000000000000(0000) GS:ffff8882a9f31000(0000) knlGS:0000000000000000
[   57.665577][ T5938] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   57.667780][ T5938] CR2: 000055f92f725278 CR3: 000000000dd38000 CR4: 00000000000006f0
[   57.670161][ T5938] Kernel panic - not syncing: Fatal exception
[   57.672669][ T5938] Kernel Offset: disabled
[   57.673984][ T5938] Rebooting in 86400 seconds..
