last executing test programs:

707.094578ms ago: executing program 2 (id=188):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000400)={0x5, 0x3, 0x2}, 0x8)
sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000eef0a000f000000028000001294", 0x2e}], 0x1}, 0x0)

610.821708ms ago: executing program 1 (id=190):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20008080)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x24000000}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, 'netdevsim'}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8000}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x40010}, 0x8000)

609.900013ms ago: executing program 2 (id=191):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ef}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r4 = socket(0x2b, 0x80801, 0x1)
sendmmsg(r4, 0x0, 0x0, 0x20000090)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@getchain={0x64, 0x66, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xe, 0x6}, {0xffe0, 0x1}}, [{0x10, 0xb, 0x7ff}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0xad2}, {0x8, 0xb, 0x432}, {0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x40}]}, 0x64}}, 0x0)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5415b4fe}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x9080)
close(0x3)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
sendmsg$can_raw(r7, &(0x7f00000002c0)={&(0x7f0000000140), 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x2, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "c58b8d224bef9eea"}, 0x10}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x5)
connect$netrom(0xffffffffffffffff, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000}, 0x20)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300)='wg1\x00', 0x10)
syz_init_net_socket$ax25(0x3, 0x5, 0x1)
socket$igmp(0x2, 0x3, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xed79]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820)

607.74306ms ago: executing program 0 (id=192):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0xc000)
syz_genetlink_get_family_id$smc(&(0x7f0000000740), r0)

607.471873ms ago: executing program 1 (id=193):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x20f1}}, [@call={0x85, 0x0, 0x0, 0x8d}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

530.340984ms ago: executing program 1 (id=194):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="611087000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001400010000000000000000002c0000001768c4860dda29e452f523d59dfb5e73d75cdcc0efffabd2bcf3ea338c5c6e6b02d39c4c47f2cf8666b9afae56a1055740b4b822acb63281863b60d21ff07b21c2aebedd0735243ddd3e6189a406a61520c3e9f705f633c67b68a64476b092cd9578b4e7550340"], 0x14}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e80)=ANY=[@ANYBLOB="ac87a28e78d07de60d3569067fa6bd7d7aaddbdb4e30d8bf50114548887e71b4876e176ab09012c3ab8e9e550c693f4f688648de13e796eab76cd07021b262e6efc6bd497b977edb3dd7dea1940d070900725fffe27e26f4f84f203e4b28bdfd8fd073974ac16fe05e8dc0e4d74eb38ce20e4a1bc889ad07203a2b696c4929fa526185d2eaa61d35d9ebcb8b17d0ec84e2d278d8a52838c87de4736b93b772e4f7f3fb74f3c9f7a3808cef86ebeea2848b9add2ce493e7a3018e1adf46c5e9b3fb33888b7906d35f11d4b622bc532e0a5ce5f194f4", @ANYRESOCT=r5, @ANYRES16=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x50)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xf5, 0xa3, &(0x7f0000000640)="dc16e8cb41afacd95d36c6e66d1e12804830f7d604b783bd549e585e7218fa3be1faf8a8ecd644b9171a5ac613c79b1e0bbabcb05dca261a3555ae79899970fffed9ea5a8ad57f64a6dc1fe65783e98eda818dc7437974a41317a61b6c816f5dbe2f5bdf9d965f012208b9da804cd52377db3b75bb07403d68b832021ab37c6ebdff3f1b22dada85ae976be9c9b8272797d55c456a18ae48560e04c3012afcaf021bce6fc392e1c670763339b8b3d890edba5eb653c592e81358ed65149c1feff80c9eb9f4d121c223ca0638c2d3d5a6dd1a08bc4aa412eb15b3c8c15b89506baaa5ec390c359585730298cfbca9f9b51a4d78b226", &(0x7f0000000740)=""/163, 0x0, 0x0, 0xa3, 0xce, &(0x7f0000000800)="d319cad46757a38f244aac698ccc303e28021c3001d843618b989a53d989c260d9e3563914575a90830e647e1e860d79939369b6cefd2a12c7c54685b03631667885b097c8f6e345879f12c679f95aa543836debe56f3a6d27894a5f789c79f1be946ff6774e2260dbceb4f0a195268a3247dd261a1771333dfa7c532b2864e69e2ae9cedc4bba4f9e8764bfa8feb08e07d7ecf2cf3fe7c5659326f750b1e1483a422a", &(0x7f0000000a00)="5805287af93f3f119c20376e4b1cb1fe1843e9e65cd7f5c65bdcf2097fcd9cc02c1ff30822208da0749741b9e51479fd3a5109217b6435d696a68e323399aa797761f5ad8359f1023c7144f48fcbefc10b5202a71e47608d6664f76a18744d10e4f0d84cec8517ad098109f425e43410fc7530e470a00ab5b28dbc694242182a2a2875c35d8c004d2f1a1367581551e4552f0dc5365c4829f1e8148743642646fdcc0f61d7d050805cbe91e690b10c0312eefa3b3a4f346fd6708e0ec51d98bfcc71330df66872f9e5aae9949926", 0x3, 0x0, 0x8}, 0x50)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r6)
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000380), 0x4)
bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r9 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
listen(r8, 0x0)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0)
r10 = socket(0x11, 0x3, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r12=>0x0})
bind$packet(r10, &(0x7f0000000180)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=ANY=[], 0xdd12}, {&(0x7f0000000b00)={0x18c, 0x34, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x14, 0x15, 0x0, 0x0, @ipv6=@private0}, @generic="62f440473de8f6cddb1b0c5620ffc9125e60cd65368b749110ea18dd3dc99717644eb5295affe624e16ebc623baa793bfa7bcabafa4e2a3bc7da35b42d24fd40ef080524c31ba947af7ccff26a67b6ed58f12104961b675a611e214f6c25e6551f92d203d3eb0579018945e16a91f951b849af61f65728a5d93fd7de41923404f154bdc63745e95f14facdfadc4fd304e507fd1dd41a44981d5d2b05bade906b7334942b42f77f2e1f6488f8aade490fa7fa277874622abe06dc042fa229e7b62b9854d827e07cb4e374d1d603c7ad86c0e0e69ba95c518c", @generic="d07bab35d0ee4cfd10a53be7dba88b8fbf3e52d26d4c1b41e5f7e1d08cbf70d6b1e4d6efc98a35c617a70c69d5fcea888c7545abc6c8629f120430d22a5938897859f49c1559512f53cbef3a22e7b1ef701df181b9c41a8137af955fb944d2e9dd25ea69574230a0079838b0b4e0ce804b", @generic="f446e63ccb9f2bc2eebe600e9c", @typed={0x8, 0x61, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0xc4, 0x0, 0x0, @fd=r0}]}, 0x18c}, {&(0x7f0000000cc0)={0x194, 0x3e, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x182, 0x2d, 0x0, 0x1, [@nested={0x4, 0x51}, @nested={0x4, 0x94}, @typed={0xc, 0x87, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x15}, @typed={0x8, 0x11b, 0x0, 0x0, @pid}, @generic="ba4f06706fec7eb292d3998ff9663801a00171f9625dd070b111e60d909c525f8f835ec035aa4975eed7399457c6a027b078e61b0d0fc6de3226869bbe30fa4a27542be829e1da732b37a9c1ebda89149da092a8b651bf9f57086767c4f47585b74d98979edef96c691ad9ca70e9862e79b396f89e09cab62f9c51f57afd0fc1688a685e4b3a4faa53beefd1fec2b51f442ab1d34f548c61082ebc6c39e0023e6500cae8d02e07c0912cb4de3d3412c5aa10a8269a2c4b6c13332573e78c1cc5be708efddd32aba223107950cad0bb4ccda700d9b068", @typed={0x8, 0x90, 0x0, 0x0, @uid}, @generic="10c3103bcaf96f85ad9c25a77718a2460fae03106a08c0c57836ed343cd5a43eef85c1ff7a115e005b0a354962050832382d6bd4c17701fea1f7a192c15a8259aaffdb3f9267efbf1a4dbbd572e6d6caab7ee0ee47589c1e92cedad138887b8cb7e7de4778e27f56bcf1693d939d8aa5332f0664fd00"/128]}]}, 0x194}], 0x3, 0x0, 0x0, 0x40}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan3\x00', <r13=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\[)\x00', @ANYRES16=r7, @ANYBLOB="000227bd7000fcdbdf252d00000008000200", @ANYRES32=r13, @ANYBLOB="0c000500fe2e888276b20e2e08002c00076e000008002c00020000000c002d000605feffffffffff08002f000900000005002b000000000006000400a0aa0000"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x10)

530.063568ms ago: executing program 0 (id=195):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x98, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x72, 0x1e, 0x0, 0x1, [@nested={0x4, 0x17}, @nested={0x4, 0x14}, @generic="8ffa1b3d93c29251d546a79d86f086b7b7fdae834d73649af2dbfb76cfaf4009578c7220414bfd3daeeed0c9440f0cc6c80d6293875be848b9ba3c43af667dddba7a3c2b8227865c2d8be41d9116a4747ca3a19040c1f45e1a4863d6169793faa8d975b7f1ba"]}]}, 0x98}, 0x1, 0x0, 0x0, 0x2400c011}, 0xc000)

407.420494ms ago: executing program 1 (id=196):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000640)={@remote, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40000, 0x40, 0x5, 0x100, 0x6, 0x4005a})
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x20, 0x1, 0x70bd2c, 0x25dfdbf7, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x810)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003b0007a737e41bcac743098701"], 0x2c}}, 0xc000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000015c0)={0x44, r4, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_b, @broadcast, @random="29de1a8c291f", {0xf, 0x9}}, 0x1, 0x3, 0x63, @val={0x10, 0x1, 0x7b}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x194, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "134c0a8f643c3b3fed15f49f6d3230c3cc030b10ec145c11"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e446495c60dc92e5925e261cc6e6ca33adebe13766a70623"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5ee018700010ae820141358c47d61da77bfec028b97a5a07"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "beee16f37479db69d07e2496dafee8a97bd21137ad2388d4"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d76215a077b04b2a0bce43663cfd85b6bbae2308ca36bb72"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "48b5edd656b757e47175f93a97c2080d0b6fb943de4ed408"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4837efa400bc3dec55a666b216d653a3a7c9eb28b13dbd79"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c3c053479147188d29478192a36ce5a4d7545e0529b6914a"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x4)

406.876044ms ago: executing program 0 (id=197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800dd8d0000000002000000020000040000000626dc0000"], 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd25, 0x5dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0xfffffcd1, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x0, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x0, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x0, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x40000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0x0, 0x5, 0x6}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000007c0)=""/195, 0x0, 0xe, '\x00', 0x0, @fallback=0x10}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000400000025d811e067535d00000000dd00000000000000"], 0x50)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05ad6765c66933f2037208040000010000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020600)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r11, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x18, &(0x7f0000000180), &(0x7f0000000140)=""/24}, 0x50)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x4e26, @broadcast}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="36ba6cdbbccc2516ca07b788893cd26c693c6df31bae07e6f1992fdd878ec2abd034341743eeb62b091d50f5c421dfa784b056bca7e4cf2d0a6b1445e92c685f7402662d29913ecf0520d09ccd12ccf1dcfddffc8f0ccc1686a8d8d5775f27aff4d95175d4601f4cc76384e241b988cbc83762a62cbe5c20", 0x78}, {0x0}], 0x2, &(0x7f0000000240)=ANY=[], 0xe8}, 0x0)
setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000180)="00054000", 0x4)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f00000005c0)=0xe2, 0x4)
r12 = openat$cgroup_type(r10, &(0x7f0000000040), 0x2, 0x0)
sendfile(r9, r12, &(0x7f0000000240)=0x6, 0x9)

300.762573ms ago: executing program 0 (id=198):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000400)={0x5, 0x3, 0x2}, 0x8)
sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000efe0a000f000000028000001294", 0x2e}], 0x1}, 0x0)

299.953302ms ago: executing program 2 (id=199):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x414, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x401, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x311, 0x64, 0x0, 0x1, [@nested={0x145, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r0}, @nested={0xb9, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f", @nested={0x6c, 0x1e, 0x0, 0x1, [@nested={0x59, 0xd4, 0x0, 0x1, [@generic="a4803e3fd1af764643b73de45d768de8db52619a63255c11ccef20dfffd887a99225e2f5ecae032cafb7216b237a1429eed88bc6f84aeb562009f34ab2a8894cd1d7697087420e5ab42922b7a9a487ed10c5c0e82b"]}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x100}]}]}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57b5f522ff05f1", @nested={0x15d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x30}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x414}], 0x1}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xc41, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x4, 0x8)

299.442971ms ago: executing program 1 (id=200):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20008080)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x60000000}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, 'netdevsim'}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8000}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x40010}, 0x8000)

220.904309ms ago: executing program 1 (id=201):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000180)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x43)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$rose(r3, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r6, &(0x7f0000000d00)=[{{&(0x7f0000000680)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000080)="659a0597", 0x4}, {&(0x7f0000000400)="32c847256861ab8ec2a4eeb0cfe1764e41a20258407d04c5f97913d32d4824c7c08c0c0b841ce57dfe1d4c5057c0bd17807e2c1bb78d787c322be4ee7f14968309bab4e4ed6df15630c9b5b974b2b98a4c01d721df60ed62bc7f8e92a17cf57a", 0x60}, {&(0x7f0000000480)="d2a9185313c50764a64ea99e8e1d41a587a4d368b0425e55b6ae3defcbddb62a801b604c4284b2a824ca2b9fb62ac24a00d9098e62171efa89f6af38d17c3672a637690ca69cbf8279c21f281705f8e3b7188cebcd0fdb86f7a6e291ac650ffc96b42c79db5e9ad2973eea399c622e0a56066785f455d7db06d7473ac988d77648c8040acc8e8d441eb7508ecf2bd94b99a57be2ffef4b2a63a900ca6739f7b284591ec493ac2843961a3ff2a6dc1adbe39e7967c59a509183ab46ba803b2a1b963cd9998b991d82bb4ccf2a85be6df0feff54e69fb1b39cf9f7c2c01e3a342e289c87d9a289605fb6", 0xe9}, {&(0x7f0000000580)="5133d28549a351baf1f7cfa1e99452ad3bc0d4fbba7ce16abd0707178d80211e42f6b3209d17d0654661db2774a01e2c9130ca5898ec616a205f8e8885bba0b8a279c1dc99a1ff9239aef032f07d342d14fe08ed85a2b43e29a616285f17f56d752acfa4110c8db52286cd770bcfe180c04a0d76", 0x74}, {&(0x7f0000000200)="3481d58ddd71ce5345", 0x9}, {&(0x7f0000000740)="6601059153c4984a3a7e279012ddf1e6fdc696dbe9f3171b66e66493acfbb554abd014f2ef7c190d631acb48a315166a4d5703670ab03cee6db52fbd2aef527bec6d0bee1059b7f7dc0d46cd40cb687e6c1ef89683", 0x55}], 0x6}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)}}], 0x2, 0x4000)
shutdown(r6, 0x1)
setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r7 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
recvfrom$l2tp(r7, 0x0, 0x0, 0x4020, 0x0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/19, @ANYRES32=0x0, @ANYBLOB], 0x68}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x2c, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}, [{0x8, 0xb, 0x7f8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c000)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000060095be"], 0x14}], 0x1}, 0x0)
r11 = openat$cgroup_int(r9, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r9], 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

219.781677ms ago: executing program 0 (id=202):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x48040}, 0xc000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010004b0400000000fcdbdf257a000000", @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001007369740014000280050005005c32bec678352aad673800000005040400ef000000"], 0x40}}, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x8)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0], 0xcfa4)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)="fc")
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0)
close(0x4)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1600000000000000008400000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, 0x0, 0x20000000, 0x4}, 0x20)
syz_emit_ethernet(0x6b, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3c0017be5e0027fbd7ca949415fe5c95ab0010b991a8134d2da6d4a1dfec4657992eb3fc957245c9c2c9eaf4e90d993d931f960eaa1e8420e4f2b47d3493b64ebcf77b53bf382c1571de2bdbd4ee37fd2530f7dd0d99fa3855c1cdc715409c96"], 0x0)
ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f00000000c0)="d161b9e3c3499b7c3aded028133bd774efd4cd1c7b5ff296a13c4e")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x112c}}, 0x880)
r6 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffe}, 0x94)

219.589977ms ago: executing program 2 (id=203):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0}) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
recvmmsg$unix(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000002040)=""/4078, 0xfee}, {&(0x7f00000018c0)=""/181, 0xb5}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000480)=""/120, 0x78}], 0x6}}], 0x1, 0x40000000, 0x0) (async)
write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async)
socket$alg(0x26, 0x5, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) (async)
sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x13, 0x301, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0xffffffffffffff54}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

138.551354ms ago: executing program 2 (id=204):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18}, 0x14010016)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r3, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000040)=""/116, 0x74}, {&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f0000000400)=""/235, 0xeb}, {&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/177, 0xb1}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x7, &(0x7f00000008c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x70dd}, &(0x7f0000000340)=0x4010, &(0x7f0000000780)=0x91, 0xe65, 0x4, 0x4d, 0x9, 0x4a, 0xc}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x7fff}, &(0x7f00000007c0)=0x828, &(0x7f0000000800)=0x7ff, 0xcf7, 0x8, 0x3, 0x9, 0x18, 0x242}}, @rdma_dest={0x18, 0x114, 0x2, {0x81, 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x3}, &(0x7f0000000840)=0x1, &(0x7f0000000880)=0x2, 0x8000000000000001, 0x7, 0x1, 0x9, 0x20, 0x4}}], 0x120, 0x4004000}, 0x8000) (async)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14303}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c0c4}, 0x0)

138.04309ms ago: executing program 0 (id=205):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4aa4)
r3 = socket$pppoe(0x18, 0x1, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r4, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
unshare(0x26020480)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000b40)={0x2, 0x4e22, @empty}, 0x10)

0s ago: executing program 2 (id=206):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}})
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f00000000c0)=0x1e)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x2b, 0x3})
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x7c}}, 0x20000011)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000005000300d60000000900010073797a30000000000900020073797a3200000000b70007"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10716' (ED25519) to the list of known hosts.
syzkaller login: [   50.188212][ T5793] cgroup: Unknown subsys name 'net'
[   50.273865][ T5793] cgroup: Unknown subsys name 'cpuset'
[   50.280058][ T5793] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.117499][ T5793] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.374917][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.378427][ T5217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.381400][ T5217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.384123][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.386859][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.441344][ T5217] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.444902][ T5217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.447893][ T5217] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.455277][ T5217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.459014][ T5217] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.474015][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.490901][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.494600][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.508407][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.518382][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.557313][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   56.683875][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.686007][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.688821][ T5825] bridge_slave_0: entered allmulticast mode
[   56.691558][ T5825] bridge_slave_0: entered promiscuous mode
[   56.701506][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.703646][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.705920][ T5825] bridge_slave_1: entered allmulticast mode
[   56.709797][ T5825] bridge_slave_1: entered promiscuous mode
[   56.736639][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.745107][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.781361][ T5825] team0: Port device team_slave_0 added
[   56.786777][ T5825] team0: Port device team_slave_1 added
[   56.832244][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.835025][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.845608][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.880586][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.883263][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.893419][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.953861][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   57.008270][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   57.024004][ T5825] hsr_slave_0: entered promiscuous mode
[   57.026260][ T5825] hsr_slave_1: entered promiscuous mode
[   57.148031][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.150808][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.153107][ T5829] bridge_slave_0: entered allmulticast mode
[   57.156465][ T5829] bridge_slave_0: entered promiscuous mode
[   57.161124][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.163332][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.165538][ T5832] bridge_slave_0: entered allmulticast mode
[   57.169513][ T5832] bridge_slave_0: entered promiscuous mode
[   57.173163][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.175357][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.177951][ T5832] bridge_slave_1: entered allmulticast mode
[   57.180883][ T5832] bridge_slave_1: entered promiscuous mode
[   57.187894][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.190197][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.192834][ T5829] bridge_slave_1: entered allmulticast mode
[   57.195742][ T5829] bridge_slave_1: entered promiscuous mode
[   57.241066][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.255545][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.269559][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.274328][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.307348][ T5829] team0: Port device team_slave_0 added
[   57.325587][ T5829] team0: Port device team_slave_1 added
[   57.342996][ T5832] team0: Port device team_slave_0 added
[   57.364918][ T5832] team0: Port device team_slave_1 added
[   57.382593][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.384738][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.393549][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.417243][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.419324][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.427091][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.446037][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.448509][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.456114][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.477269][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.479899][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.490260][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.504822][ T5829] hsr_slave_0: entered promiscuous mode
[   57.508756][ T5829] hsr_slave_1: entered promiscuous mode
[   57.511761][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.514194][ T5829] Cannot create hsr debugfs directory
[   57.575768][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.599889][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.615635][ T5832] hsr_slave_0: entered promiscuous mode
[   57.618529][ T5832] hsr_slave_1: entered promiscuous mode
[   57.621393][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.624252][ T5832] Cannot create hsr debugfs directory
[   57.626563][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.640634][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.811490][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.825419][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.836963][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.843869][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.920014][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.926805][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.932845][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.939688][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.952405][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.982123][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   57.995962][ T4972] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.999299][ T4972] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.015524][ T4972] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.018483][ T4972] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.080900][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.100918][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   58.117689][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.120065][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.132632][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.134965][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.170703][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.204841][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   58.223476][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.239709][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.242049][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.246733][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.249155][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.340065][ T5825] veth0_vlan: entered promiscuous mode
[   58.359916][ T5825] veth1_vlan: entered promiscuous mode
[   58.387077][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.397034][ T5825] veth0_macvtap: entered promiscuous mode
[   58.399994][ T5217] Bluetooth: hci0: command tx timeout
[   58.419403][ T5825] veth1_macvtap: entered promiscuous mode
[   58.450806][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.456353][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.465365][ T5829] veth0_vlan: entered promiscuous mode
[   58.475200][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.481968][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.485060][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.487932][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.493267][ T5829] veth1_vlan: entered promiscuous mode
[   58.510185][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.559675][ T5217] Bluetooth: hci2: command tx timeout
[   58.567368][ T5217] Bluetooth: hci1: command tx timeout
[   58.580593][ T5829] veth0_macvtap: entered promiscuous mode
[   58.595018][ T5832] veth0_vlan: entered promiscuous mode
[   58.599840][ T5829] veth1_macvtap: entered promiscuous mode
[   58.621651][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.624331][ T5832] veth1_vlan: entered promiscuous mode
[   58.639075][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.641520][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.656711][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.673991][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.676691][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.681235][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.684094][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.690892][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.692290][ T5832] veth0_macvtap: entered promiscuous mode
[   58.701483][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.702444][ T5832] veth1_macvtap: entered promiscuous mode
[   58.742380][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.755292][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.761567][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.764590][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.769896][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.772563][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.793678][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.803930][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.806352][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.871577][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.878077][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.904720][ T4131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.915046][ T4131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.942806][ T5892] raw_sendmsg: syz.0.1 forgot to set AF_INET. Fix it!
[   58.949499][ T4131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.952061][ T4131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.970351][ T5894] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3'.
[   59.054871][ T5897] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   59.070295][ T5897] netlink: 'syz.0.4': attribute type 10 has an invalid length.
[   59.078506][ T5897] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.144599][ T5904] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.187189][ T5904] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET)
[   59.323946][ T5916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'.
[   59.351690][ T5916] tipc: Started in network mode
[   59.353878][ T5916] tipc: Node identity 0a938861dc8, cluster identity 4711
[   59.357018][ T5916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.378850][ T5916] syzkaller0: entered promiscuous mode
[   59.381833][ T5916] syzkaller0: entered allmulticast mode
[   59.388196][ T5919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'.
[   59.413517][ T5916] tipc: Resetting bearer <eth:syzkaller0>
[   59.418803][ T5915] tipc: Resetting bearer <eth:syzkaller0>
[   59.440144][ T5915] tipc: Disabling bearer <eth:syzkaller0>
[   59.462728][ T5921] syz_tun: entered allmulticast mode
[   59.475582][ T5921] syz_tun: left allmulticast mode
[   59.543214][ T5928] tipc: Started in network mode
[   59.544883][ T5928] tipc: Node identity a240966dec39, cluster identity 4711
[   59.549731][ T5928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.553889][ T5928] syzkaller0: entered promiscuous mode
[   59.555707][ T5928] syzkaller0: entered allmulticast mode
[   59.560147][ T5928] tipc: Resetting bearer <eth:syzkaller0>
[   59.569101][ T5928] tipc: Disabling bearer <eth:syzkaller0>
[   60.091287][ T5936] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   60.100455][ T5936] netlink: 'syz.1.16': attribute type 10 has an invalid length.
[   60.106900][ T5936] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   60.184459][ T5941] Zero length message leads to an empty skb
[   60.472772][ T5957] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   60.475103][ T5958] xt_hashlimit: size too large, truncated to 1048576
[   60.478250][ T5217] Bluetooth: hci0: command tx timeout
[   60.504370][ T5957] netlink: 'syz.2.26': attribute type 10 has an invalid length.
[   60.513949][ T5957] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   60.637396][ T5217] Bluetooth: hci1: command tx timeout
[   60.637488][ T5828] Bluetooth: hci2: command tx timeout
[   60.755665][ T5968] netlink: 'syz.0.29': attribute type 1 has an invalid length.
[   60.762088][ T5970] openvswitch: netlink: IP tunnel TTL not specified.
[   60.909831][ T5987] netlink: 'syz.1.34': attribute type 10 has an invalid length.
[   60.956170][ T5989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.083644][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.39'.
[   61.091673][ T5999] netlink: 36 bytes leftover after parsing attributes in process `syz.2.39'.
[   61.244896][ T6014] netlink: 'syz.2.44': attribute type 10 has an invalid length.
[   61.382112][ T6025] netlink: 248 bytes leftover after parsing attributes in process `syz.2.47'.
[   61.414398][ T5989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.469922][ T5989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.526991][ T5989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.568872][ T6032] syzkaller1: entered promiscuous mode
[   61.570943][ T6032] syzkaller1: entered allmulticast mode
[   61.619494][ T5989] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.629314][ T5989] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.640875][ T5989] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.650089][ T5989] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.692847][ T6038] pim6reg: entered allmulticast mode
[   61.720804][ T6038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.807947][ T6037] pim6reg: left allmulticast mode
[   61.914376][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'.
[   62.060005][ T6061] netlink: 'syz.0.52': attribute type 10 has an invalid length.
[   62.251587][ T6071] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   62.267246][ T6073] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.307236][ T6073] netlink: 'syz.1.57': attribute type 4 has an invalid length.
[   62.311898][ T6073] netlink: 'syz.1.57': attribute type 10 has an invalid length.
[   62.322059][ T6073] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.325536][ T6073] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   62.386589][ T6079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.58'.
[   62.392059][ T6079] netlink: 'syz.1.58': attribute type 7 has an invalid length.
[   62.394899][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'.
[   62.557309][ T5828] Bluetooth: hci0: command tx timeout
[   62.717494][ T5828] Bluetooth: hci1: command tx timeout
[   62.727983][ T5828] Bluetooth: hci2: command tx timeout
[   62.867089][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.65'.
[   62.908839][ T6106] syzkaller0: entered promiscuous mode
[   62.910752][ T6106] syzkaller0: entered allmulticast mode
[   64.030351][ T6152] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.040943][ T6154] batadv_slave_1: entered promiscuous mode
[   64.057709][ T6152] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.104696][ T6152] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.140865][ T6152] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.356522][ T6170] validate_nla: 4 callbacks suppressed
[   64.356564][ T6170] netlink: 'syz.2.86': attribute type 1 has an invalid length.
[   64.409331][ T6175] tap0: tun_chr_ioctl cmd 1074025678
[   64.411691][ T6175] tap0: group set to 0
[   64.484902][ T6177] netlink: 'syz.2.88': attribute type 10 has an invalid length.
[   64.539537][ T6179] C: renamed from team_slave_0 (while UP)
[   64.543681][ T6179] netlink: 'syz.2.89': attribute type 3 has an invalid length.
[   64.545951][ T6179] __nla_validate_parse: 1 callbacks suppressed
[   64.545958][ T6179] netlink: 152 bytes leftover after parsing attributes in process `syz.2.89'.
[   64.553086][ T6179] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   64.640290][ T5828] Bluetooth: hci0: command tx timeout
[   64.786370][ T6193] warning: `syz.2.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.797587][ T5828] Bluetooth: hci2: command tx timeout
[   64.797747][ T5217] Bluetooth: hci1: command tx timeout
[   64.840824][ T6148] batadv_slave_1: left promiscuous mode
[   64.869750][  T792] cfg80211: failed to load regulatory.db
[   64.946488][ T6199] IPVS: Scheduler module ip_vs_sip not found
[   64.950937][ T6199] xt_bpf: check failed: parse error
[   64.990299][ T6206] netlink: 'syz.1.96': attribute type 10 has an invalid length.
[   65.035214][ T6210] xt_hashlimit: invalid rate
[   65.376402][ T6219] netlink: 96 bytes leftover after parsing attributes in process `syz.2.101'.
[   65.387007][ T6219] vlan2: entered allmulticast mode
[   65.390841][ T6219] gretap0: entered allmulticast mode
[   65.454091][ T6221] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.504681][    C0] vcan0: j1939_tp_rxtimer: 0xffff888026fcec00: rx timeout, send abort
[   65.533336][ T6221] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.588219][ T6221] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.647442][ T6221] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.694400][ T6152] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.705562][ T6152] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.713109][ T6152] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.723212][ T6152] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.762575][ T6221] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.780170][ T6221] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.792715][ T6221] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.809131][ T6221] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.815525][ T6222] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.819193][ T6228] netlink: 'syz.0.104': attribute type 10 has an invalid length.
[   65.872314][ T6222] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.912255][ T6222] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.962190][ T6222] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.005231][    C0] vcan0: j1939_tp_rxtimer: 0xffff888026fce000: rx timeout, send abort
[   66.009117][    C0] vcan0: j1939_tp_rxtimer: 0xffff888026fcec00: abort rx timeout. Force session deactivation
[   66.119403][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.107'.
[   66.129604][ T6244] netlink: 36 bytes leftover after parsing attributes in process `syz.1.107'.
[   66.183178][ T6247] Bluetooth: MGMT ver 1.23
[   66.356409][ T6254] netlink: 14 bytes leftover after parsing attributes in process `syz.0.112'.
[   66.362922][ T6254] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   66.410634][ T6256] netlink: 'syz.0.113': attribute type 64 has an invalid length.
[   66.508743][    C0] vcan0: j1939_tp_rxtimer: 0xffff888026fce000: abort rx timeout. Force session deactivation
[   66.516938][ T6262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.114'.
[   66.520459][ T6262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.114'.
[   67.213959][ T6272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.117'.
[   67.384041][ T6283] netlink: 14 bytes leftover after parsing attributes in process `syz.1.120'.
[   67.386805][ T6283] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   67.451070][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.122'.
[   67.469172][ T6288] geneve2: entered allmulticast mode
[   67.484152][    T9] IPVS: starting estimator thread 0...
[   67.577914][ T6291] IPVS: using max 62 ests per chain, 148800 per kthread
[   67.790065][ T6311] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   67.795260][ T6311] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   67.994589][ T6332] netlink: 'syz.1.136': attribute type 1 has an invalid length.
[   68.050741][    T9] IPVS: starting estimator thread 0...
[   68.137571][ T6337] IPVS: using max 62 ests per chain, 148800 per kthread
[   68.201276][ T6348] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   68.206459][ T6348] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   68.416870][ T6352] infiniband syz0: set down
[   68.420859][ T6352] infiniband syz0: added ipvlan1
[   68.462710][ T6352] RDS/IB: syz0: added
[   68.467515][ T6352] smc: adding ib device syz0 with port count 1
[   68.469682][ T6352] smc:    ib device syz0 port 1 has pnetid 
[   69.881816][ T6222] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.894718][ T6222] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.907464][ T6222] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.920878][ T6222] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.399244][    T9] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   71.044770][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.050807][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.683822][ T5889] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   74.240301][   T66] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   78.078809][ T1089] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   79.999899][ T4972] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   83.848522][ T1088] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   85.759238][   T32] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   86.401320][  T792] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   88.321490][    T9] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   88.962122][ T1088] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   91.519599][ T1088] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   94.719564][   T32] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   97.287854][ T1088] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   99.940423][ T6386] __nla_validate_parse: 7 callbacks suppressed
[   99.940439][ T6386] netlink: 92 bytes leftover after parsing attributes in process `syz.2.146'.
[  100.051655][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'.
[  100.059863][ T6391] syzkaller0: entered promiscuous mode
[  100.062077][ T6391] syzkaller0: entered allmulticast mode
[  100.206538][ T6401] netlink: 14 bytes leftover after parsing attributes in process `syz.2.152'.
[  100.479988][ T4972] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  101.036126][ T6401] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  101.162964][ T6407] netlink: 732 bytes leftover after parsing attributes in process `syz.2.153'.
[  101.166890][ T6407] netlink: 732 bytes leftover after parsing attributes in process `syz.2.153'.
[  101.291743][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'.
[  101.295175][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'.
[  101.442598][ T6424] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  101.487974][ T6424] block nbd0: server does not support multiple connections per device.
[  101.500692][ T6424] block nbd0: shutting down sockets
[  101.592656][ T6431] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  101.611821][ T6431] netlink: 14 bytes leftover after parsing attributes in process `syz.2.160'.
[  101.615310][ T6431] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  101.731671][ T6437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.163'.
[  101.859985][ T6449] Cannot find set identified by id 0 to match
[  102.020736][ T6465] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  102.021806][ T6454] delete_channel: no stack
[  102.039409][ T6465] netlink: 14 bytes leftover after parsing attributes in process `syz.2.170'.
[  102.046034][ T6465] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  102.342989][   T66] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  102.467994][ T6499] trusted_key: syz.2.178 sent an empty control message without MSG_MORE.
[  102.533827][ T6505] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  102.540129][ T6505] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  102.721696][ T6518] Cannot find add_set index 0 as target
[  102.792078][ T6523] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  102.797807][ T6523] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  102.888026][ T6530] tipc: New replicast peer: 255.255.255.255
[  102.891715][ T6530] tipc: Enabled bearer <udp:syz2>, priority 10
[  103.003681][ T6542] openvswitch: netlink: Flow actions attr not present in new flow.
[  103.182121][ T6549] netlink: 'syz.2.199': attribute type 1 has an invalid length.
[  103.203208][ T6551] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  103.214571][ T6551] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  103.373302][ T1088] smc: removing ib device syz0
[  103.398456][ T6568] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  103.416250][ T6570] bridge_slave_0: left allmulticast mode
[  103.419793][ T6570] bridge_slave_0: left promiscuous mode
[  103.422841][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.435689][ T6570] bridge_slave_1: left allmulticast mode
[  103.447669][ T6570] bridge_slave_1: left promiscuous mode
[  103.449673][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.470177][ T6570] bond0: (slave bond_slave_0): Releasing backup interface
[  103.475800][ T6570] bond0: (slave bond_slave_1): Releasing backup interface
[  103.493842][ T6570] team0: Port device team_slave_0 removed
[  103.499753][ T6570] team0: Port device team_slave_1 removed
[  103.502280][ T6570] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.504615][ T6570] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.508566][ T6570] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.510839][ T6570] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.519946][ T6570] bond0: (slave wlan1): Releasing backup interface
[  103.532400][ T5875] ==================================================================
[  103.534837][ T5875] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[  103.537486][ T5875] Read of size 8 at addr ffff88802e1e02e8 by task kworker/1:4/5875
[  103.540549][ T5875] 
[  103.541666][ T5875] CPU: 1 UID: 0 PID: 5875 Comm: kworker/1:4 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  103.541677][ T5875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.541683][ T5875] Workqueue: events smc_ib_port_event_work
[  103.541700][ T5875] Call Trace:
[  103.541704][ T5875]  <TASK>
[  103.541734][ T5875]  dump_stack_lvl+0x189/0x250
[  103.541745][ T5875]  ? __virt_addr_valid+0x1c8/0x5c0
[  103.541755][ T5875]  ? rcu_is_watching+0x15/0xb0
[  103.541765][ T5875]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.541773][ T5875]  ? rcu_is_watching+0x15/0xb0
[  103.541781][ T5875]  ? lock_release+0x4b/0x3e0
[  103.541790][ T5875]  ? __virt_addr_valid+0x1c8/0x5c0
[  103.541799][ T5875]  ? __virt_addr_valid+0x4a5/0x5c0
[  103.541808][ T5875]  print_report+0xd2/0x2b0
[  103.541815][ T5875]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  103.541826][ T5875]  kasan_report+0x118/0x150
[  103.541836][ T5875]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  103.541848][ T5875]  __ethtool_get_link_ksettings+0x6e/0x190
[  103.541859][ T5875]  ib_get_eth_speed+0x15e/0x7b0
[  103.541871][ T5875]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  103.541882][ T5875]  ? do_raw_spin_unlock+0x4d/0x240
[  103.541895][ T5875]  rxe_query_port+0x93/0x3b0
[  103.541904][ T5875]  ib_query_port+0x170/0x830
[  103.541912][ T5875]  smc_ib_port_event_work+0x15a/0x940
[  103.541924][ T5875]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.541935][ T5875]  ? process_scheduled_works+0x9ef/0x17b0
[  103.541944][ T5875]  ? process_scheduled_works+0x9ef/0x17b0
[  103.541952][ T5875]  process_scheduled_works+0xae1/0x17b0
[  103.541965][ T5875]  ? __pfx_process_scheduled_works+0x10/0x10
[  103.541976][ T5875]  worker_thread+0x8a0/0xda0
[  103.541985][ T5875]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  103.541997][ T5875]  ? __kthread_parkme+0x7b/0x200
[  103.542007][ T5875]  kthread+0x711/0x8a0
[  103.542017][ T5875]  ? __pfx_worker_thread+0x10/0x10
[  103.542025][ T5875]  ? __pfx_kthread+0x10/0x10
[  103.542035][ T5875]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.542045][ T5875]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.542055][ T5875]  ? __pfx_kthread+0x10/0x10
[  103.542065][ T5875]  ret_from_fork+0x3fc/0x770
[  103.542073][ T5875]  ? __pfx_ret_from_fork+0x10/0x10
[  103.542082][ T5875]  ? __switch_to_asm+0x39/0x70
[  103.542091][ T5875]  ? __switch_to_asm+0x33/0x70
[  103.542099][ T5875]  ? __pfx_kthread+0x10/0x10
[  103.542109][ T5875]  ret_from_fork_asm+0x1a/0x30
[  103.542121][ T5875]  </TASK>
[  103.542124][ T5875] 
[  103.614491][ T5875] Allocated by task 5832:
[  103.615768][ T5875]  kasan_save_track+0x3e/0x80
[  103.617140][ T5875]  __kasan_kmalloc+0x93/0xb0
[  103.618588][ T5875]  __kvmalloc_node_noprof+0x30d/0x5f0
[  103.620317][ T5875]  alloc_netdev_mqs+0xa6/0x11e0
[  103.621838][ T5875]  rtnl_create_link+0x31f/0xd10
[  103.623436][ T5875]  rtnl_newlink_create+0x25c/0xb00
[  103.625100][ T5875]  rtnl_newlink+0x16d6/0x1c70
[  103.626633][ T5875]  rtnetlink_rcv_msg+0x7cf/0xb70
[  103.628217][ T5875]  netlink_rcv_skb+0x208/0x470
[  103.629799][ T5875]  netlink_unicast+0x75b/0x8d0
[  103.631337][ T5875]  netlink_sendmsg+0x805/0xb30
[  103.632953][ T5875]  __sock_sendmsg+0x21c/0x270
[  103.634410][ T5875]  __sys_sendto+0x3bd/0x520
[  103.635885][ T5875]  __x64_sys_sendto+0xde/0x100
[  103.637543][ T5875]  do_syscall_64+0xfa/0x3b0
[  103.638965][ T5875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.640887][ T5875] 
[  103.641643][ T5875] Freed by task 6565:
[  103.643174][ T5875]  kasan_save_track+0x3e/0x80
[  103.644813][ T5875]  kasan_save_free_info+0x46/0x50
[  103.646701][ T5875]  __kasan_slab_free+0x62/0x70
[  103.648261][ T5875]  kfree+0x18e/0x440
[  103.649550][ T5875]  device_release+0x9c/0x1c0
[  103.651052][ T5875]  kobject_put+0x22b/0x480
[  103.652689][ T5875]  netdev_run_todo+0xd2e/0xea0
[  103.654284][ T5875]  rtnl_dellink+0x537/0x710
[  103.656017][ T5875]  rtnetlink_rcv_msg+0x7cf/0xb70
[  103.657784][ T5875]  netlink_rcv_skb+0x208/0x470
[  103.659344][ T5875]  netlink_unicast+0x75b/0x8d0
[  103.660910][ T5875]  netlink_sendmsg+0x805/0xb30
[  103.662482][ T5875]  __sock_sendmsg+0x21c/0x270
[  103.664408][ T5875]  ____sys_sendmsg+0x505/0x830
[  103.666050][ T5875]  ___sys_sendmsg+0x21f/0x2a0
[  103.667753][ T5875]  __x64_sys_sendmsg+0x19b/0x260
[  103.669677][ T5875]  do_syscall_64+0xfa/0x3b0
[  103.671325][ T5875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.673530][ T5875] 
[  103.674564][ T5875] The buggy address belongs to the object at ffff88802e1e0000
[  103.674564][ T5875]  which belongs to the cache kmalloc-cg-4k of size 4096
[  103.679772][ T5875] The buggy address is located 744 bytes inside of
[  103.679772][ T5875]  freed 4096-byte region [ffff88802e1e0000, ffff88802e1e1000)
[  103.685221][ T5875] 
[  103.686227][ T5875] The buggy address belongs to the physical page:
[  103.688707][ T5875] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e1e0
[  103.691758][ T5875] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  103.694947][ T5875] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  103.698043][ T5875] page_type: f5(slab)
[  103.699769][ T5875] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[  103.703354][ T5875] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  103.706976][ T5875] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[  103.710608][ T5875] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  103.714218][ T5875] head: 00fff00000000003 ffffea0000b87801 00000000ffffffff 00000000ffffffff
[  103.717664][ T5875] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  103.720642][ T5875] page dumped because: kasan: bad access detected
[  103.723314][ T5875] page_owner tracks the page as allocated
[  103.725678][ T5875] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5832, tgid 5832 (syz-executor), ts 57694831586, free_ts 0
[  103.734733][ T5875]  post_alloc_hook+0x240/0x2a0
[  103.736785][ T5875]  get_page_from_freelist+0x21e4/0x22c0
[  103.739188][ T5875]  __alloc_frozen_pages_noprof+0x181/0x370
[  103.741672][ T5875]  alloc_pages_mpol+0x232/0x4a0
[  103.743752][ T5875]  allocate_slab+0x8a/0x3b0
[  103.745686][ T5875]  ___slab_alloc+0xbfc/0x1480
[  103.747647][ T5875]  __kvmalloc_node_noprof+0x429/0x5f0
[  103.749720][ T5875]  alloc_netdev_mqs+0xa6/0x11e0
[  103.751597][ T5875]  rtnl_create_link+0x31f/0xd10
[  103.753489][ T5875]  rtnl_newlink_create+0x25c/0xb00
[  103.755486][ T5875]  rtnl_newlink+0x16d6/0x1c70
[  103.757220][ T5875]  rtnetlink_rcv_msg+0x7cf/0xb70
[  103.759143][ T5875]  netlink_rcv_skb+0x208/0x470
[  103.761029][ T5875]  netlink_unicast+0x75b/0x8d0
[  103.762929][ T5875]  netlink_sendmsg+0x805/0xb30
[  103.764882][ T5875]  __sock_sendmsg+0x21c/0x270
[  103.766792][ T5875] page_owner free stack trace missing
[  103.768836][ T5875] 
[  103.769757][ T5875] Memory state around the buggy address:
[  103.771930][ T5875]  ffff88802e1e0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.775078][ T5875]  ffff88802e1e0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.778082][ T5875] >ffff88802e1e0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.781083][ T5875]                                                           ^
[  103.783926][ T5875]  ffff88802e1e0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.786915][ T5875]  ffff88802e1e0380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.789393][ T5875] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  103.818002][ T5875] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  103.820787][ T5875] CPU: 1 UID: 0 PID: 5875 Comm: kworker/1:4 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  103.825498][ T5875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.829332][ T5875] Workqueue: events smc_ib_port_event_work
[  103.831599][ T5875] Call Trace:
[  103.832936][ T5875]  <TASK>
[  103.834124][ T5875]  dump_stack_lvl+0x99/0x250
[  103.835951][ T5875]  ? __asan_memcpy+0x40/0x70
[  103.837795][ T5875]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.839845][ T5875]  ? __pfx__printk+0x10/0x10
[  103.841683][ T5875]  panic+0x2db/0x790
[  103.843253][ T5875]  ? __pfx_panic+0x10/0x10
[  103.845038][ T5875]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  103.847378][ T5875]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  103.849885][ T5875]  ? print_memory_metadata+0x314/0x400
[  103.852010][ T5875]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  103.854331][ T5875]  check_panic_on_warn+0x89/0xb0
[  103.856246][ T5875]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  103.858627][ T5875]  end_report+0x78/0x160
[  103.860324][ T5875]  kasan_report+0x129/0x150
[  103.862150][ T5875]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  103.864539][ T5875]  __ethtool_get_link_ksettings+0x6e/0x190
[  103.866991][ T5875]  ib_get_eth_speed+0x15e/0x7b0
[  103.868947][ T5875]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  103.871107][ T5875]  ? do_raw_spin_unlock+0x4d/0x240
[  103.873134][ T5875]  rxe_query_port+0x93/0x3b0
[  103.874949][ T5875]  ib_query_port+0x170/0x830
[  103.876781][ T5875]  smc_ib_port_event_work+0x15a/0x940
[  103.878902][ T5875]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.880954][ T5875]  ? process_scheduled_works+0x9ef/0x17b0
[  103.883187][ T5875]  ? process_scheduled_works+0x9ef/0x17b0
[  103.885326][ T5875]  process_scheduled_works+0xae1/0x17b0
[  103.887678][ T5875]  ? __pfx_process_scheduled_works+0x10/0x10
[  103.890084][ T5875]  worker_thread+0x8a0/0xda0
[  103.891914][ T5875]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  103.894372][ T5875]  ? __kthread_parkme+0x7b/0x200
[  103.896349][ T5875]  kthread+0x711/0x8a0
[  103.897987][ T5875]  ? __pfx_worker_thread+0x10/0x10
[  103.900054][ T5875]  ? __pfx_kthread+0x10/0x10
[  103.901884][ T5875]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.903941][ T5875]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.906017][ T5875]  ? __pfx_kthread+0x10/0x10
[  103.907827][ T5875]  ret_from_fork+0x3fc/0x770
[  103.909616][ T5875]  ? __pfx_ret_from_fork+0x10/0x10
[  103.911619][ T5875]  ? __switch_to_asm+0x39/0x70
[  103.913480][ T5875]  ? __switch_to_asm+0x33/0x70
[  103.915316][ T5875]  ? __pfx_kthread+0x10/0x10
[  103.917156][ T5875]  ret_from_fork_asm+0x1a/0x30
[  103.919017][ T5875]  </TASK>
[  103.920822][ T5875] Kernel Offset: disabled
[  103.922523][ T5875] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:02:37  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8a285b42 RBX=00007f40252e5720 RCX=000000000005bf73 RDX=ffffffff8a285e01
RSI=ffffffff8a285b42 RDI=0000000000000009 RBP=ffffffff8a285b42 RSP=00007ffdb168e0e0
R8 =00007f40247b6038 R9 =00007f40247a2000 R10=00007f4023bff008 R11=0000000000000009
R12=0000000000000009 R13=0000000000000000 R14=ffffffff8a285b42 R15=000000000005bf73
RIP=00007f402446e934 RFL=00000282 [--S----] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555580ab9500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c377e96 CR3=0000000020a69000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4024785478 00007f4024785450 XMM03=00007f4024785488 00007f4024785480
XMM04=00007f40252ed100 00007f4024785440 XMM05=00007f4024785458 00007f40247854a0
XMM06=00007f4024785498 00007f4024785490 XMM07=00007f4024785488 00007f4024785480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4024611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004307090
R8 =ffff888107ba0237 R9 =1ffff11020f74046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78ca R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000b038 CR3=0000000122764000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=00007fbd1b785478 00007fbd1b785450 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007fbd1b785458 00007fbd1b7854a0
XMM06=00007fbd1b785498 00007fbd1b785490 XMM07=00007fbd1b785488 00007fbd1b785480
XMM08=8391509ac567799e e3db1adca6f23f1a XMM09=0000000000000000 00007fbd1b611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
