last executing test programs:

3.129636002s ago: executing program 2 (id=384):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="154e0100000000002c0012800b0001006d616373656300001c00028005000c0001"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x1000)
sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0xf}}}, 0x24}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = accept4$packet(r4, &(0x7f0000001380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000013c0)=0x14, 0x0)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000001400)={0x2, 0x7}, 0x4)
getsockopt$packet_int(r5, 0x107, 0x12, 0x0, &(0x7f0000000080))
recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}}], 0x2, 0x60, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r9, &(0x7f00000000c0), 0x9)
sendfile(r9, 0xffffffffffffffff, 0x0, 0x10000)
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000001440)={'pim6reg1\x00', 0x600})
sendmmsg$inet6(r9, &(0x7f0000000cc0), 0x0, 0x931766f6359e6d40)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x13, r3, 0xd0ed2000)
sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000030000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a05000000000000000000070000000900010073797a30000000000c0010400000000010000001140000001000010000000000000000000084000a"], 0xb0}}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000400)={'syztnl1\x00', r7, 0x8000, 0x700, 0x0, 0x9, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x47, 0x29, 0x0, @multicast1, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000640)={'gretap0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x5, 0x7, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}}}})
read(r1, &(0x7f0000000380)=""/4096, 0x1000)

2.680526414s ago: executing program 0 (id=393):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192)

2.580616212s ago: executing program 0 (id=394):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000001c0))
syz_emit_ethernet(0x12d1, &(0x7f0000000640)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x129b, 0x3a, 0x0, @mcast2, @mcast1, {[], @ndisc_na={0x88, 0x0, 0x0, 0x87, '\x00', @private2={0xfc, 0x2, '\x00', 0x1}, [{0x19, 0x13, "9a31b59fbc322743dd4ff16d224c976bb2fa69b6d39fbec180729371dfffd99ae62f9243dc88e712a9deb7a6aa83d823ee25302599bb3d5afb04d0b8b3badd774b14224111d198981c1c6a95584dda79c79a3d688c69af29e52c2248422ac9c9d8c8243813b984d5bff3bf4c96d3b450e964980c30aa0d0f8b826a264d4b03a0ba45c57bae18807772170b33063006e13f4ca29553b5138a0537"}, {0x19, 0xf, "4f2824fe286b068bdaf16125c692541a3e7cae66342b34692f600880de2d1175a20358a4a69685492ca026757a27e55c4e07c91e17c4d7c28f3f27a1167d147bfa32d0ce4769ac86693013dbff0a1885b4c6cd213b784b41e415f4da7511f2eb78a644a47411f4974d794d06f7dc52aa8f278900066bdc"}, {0x5, 0x2, "2cda6841ab5e2022a094f142ed6ef81e31e8cc"}, {0x4, 0x12, "0313de1bc73f07ff1002ac7a670dfd4718677d9a417df9c2081d8fd46bc108bcaeb4519c2cc206c9457a8e690ab708bb2409a4b68f9010d0a3bb32aa76a24d6aa51d0b5a9b0e7cf9b1f8270b51d65147c97f670513816d7b83c4e2281485bc005d762ba5251d319681a1b8209ed8a9a62edc5322e67e4250b976f1bc669c831005e84687ddae0fec76b84e3d8fd6e89c57db"}, {0x19, 0x18, "3905529db91e94006aaba9aa9c92320f70601cad00d3eae090ac7446c36006412777a91cd531e7246da9cf0e095bd78383dce9b76c3e0d1f69f6202acd689b1357bfa688e40b7ab3a4c908b9a54926ac62445e729e7a46ccea51692629257fe24ef524e41455eff51088f3a0798ba7faa675301d411f6b67355fe06a1438ddf5362711e84588205cd56fc5e5a363878e5cdd113cca27f32fff8b0442094f0e9e35f774f71fdd56c67da47b37276f90e96a8aeac5ee532a357c4efcc3012567551d"}, {0x4, 0x200, "8fa2c58337bec73b4af3ced9046a265655987992963a7e6b0c10483cf6892b4258d01409766b28a90b19913e16f47a5607e5c5dc06d47481c33c601ce649c081f5ace35ed96bf1884761f44b171868361477ddc3b4dea2c238f0b0adbf425389fd6b96e34136f420ccb976a0cd1afd9cedaf489a3034cfee2b9ec158981da1694188985628aaac95ac89fac2ff2d8ba200fcd06a2e2e1f710c08b14c2790b53f1e8f799190c740a3945d4828f5b25bbf9b7b7ab979857996c07f5a3bfd3f7c98b7a91a74d4448a49cfe0afcd568dba9914f422e813ec9a3fd939eccbd8457a93d01e11c5b5931c7be80776a2d218427deab8bf92ea3045a078b69f038d0a4ee52e495b6ac4020945a358c91b84652e32aaf71f60c4b5b789446882a344c572e20409ea16be584148b0869fb146ad92e6666174ca98077bf94dc74b3bb4b942e4fb25f1207715506e33bc646c6dbc9b084a7513e9725bd86c0c0c441d5f9dd568948ba382e9d2103943d9a9d04b97ebfab7dabfb9c9c07845d942ab33066a9e0da2d6f6cf77df43bc65e3ecffe86e063ec11cf8ddfa65ef6dcfb2db977c1d708b0daca67b06c1602fe16c255e4cfb7a96d0ca03c055f1ce82ca0b0765fd269a802d444a88c2d55dfd199d6811a73c4c9b02adc945423cdf9ea18f8737b161086d3edefddc8d5d1347a11e975e69538c477d228738efdb13fecade2c5ab72808378e731e6a0c76d84046ede7bd44ad76b51b8d29c57efcdffe7ccb6ab2610c868b0819bd0503273c45e6e8b7c8176cb9a1e2900e2d1f0d67e07da8fb96d1230359640bdcabf207976564d7b2112a07e478614921b421bca8a68bd4d9bc9d594f2aaa10f84ba73997235fdbe5488886f42a010e1d39bd673d1d4a8c159f5a76da43cbcce33524f269845e6a80c22880c0a6f367b2fca4ec6107f9c600d349a9f0fceaa47bd149ebee37cfc3fdf3b0e454d703ea705b5aa98399209219e4a0a084780266ae45f64a119a3c41acd57ffbc3882f76df7bbd92c3889bdbf6002f49a68e249a04f2f0efd28c279b5286653c03096a0e482b0badcf1f50536abfef1f92aad6f7b418ff307ea75c1206210d12e7a3b2092c98ef850c99bfa129e5fcc1462d5f3502fe090946afdf2b98c0401ba69b7f2b02d0f29e67167ed3b3900d91ff89c0f456c3c03c894fe7f44bcdaf13a1ee12249ec7db38a8101b03db401b78ed13c1bcb3e6b62b024bfe55ef5e21cc8cfa21ca70bd005ec3db8be27f2a0efa69f834eb25dc91feb0eda4e93e5b4cec5d40a43f967c3c9fecb64ca9a6357c6a65bbcbe4882912f55a95c35d326e90e4b13a71fe8ded2c2158fb4313e15d91864de962a66c592d6ae3c772c963647c8c9b3c52c12078056f8febdde874b33f1e08665f2546575b004e286c88dadf6f358767ab1c78fe57df5da13e0333cea427c811b5108a4fed6cdcb18b75b1b7bb69b66374dab7090aceb249b364780448a79214e8fd92ef6d4d83253627b3d021495d48da287a453be9a7e73e66634a214989e4797c078f2e05e6093516321de39ad87cac472c469ed43b532e134e02f5b74b3061318faa3db478effd03c020ee912d08a1ea8132e2962a7f166807516ba7589414ded074e53da3a9c443aa9696c79c4b89431844eaf8de2e969f800f7f5045c24c81eb8984d404508effbad13c61e3c704ed98aae6ba9be5699d19d0c7df0e5c4a6a493426c345b7d6295c69e385b14ef880e029c16a882d548768bdda56d0660836f7446a6ff4ed565dab9d3400c4fbce1122ea43bc0748ee6c5b23885f31720c26eec1ea46162c653bf7e4b3f9ffccfb266ce4f97105fc43a55a52573fe2b8ca221fad531b69ef8a6039f8ff0c30c28bc7794f8230d61e002d28e21ac7d781e3df1a6a340d75cf8390edc9872552f3f3c2a8123dfd25365ca0d5213d7644af7360602c761d7c986635355b14dd5bfd3a8ec97f30494d389127e8bce135be8d3ea3e98b3b284609aaaf28486c1142d7bf16afc2134c53217d78d3b82895515c3fe007d9817348c622e16d2f23203e58e6ea48c7c12ce42053693fd6492a74a483b8d34fd5e905993b59fb3b9c53d93026bb284992ea9fd09a55536a644c7ee5391d5c712871582c1692e2b5aa389774a59fb234e357254097fd92270799bb8fe0563b34df9d51cba521dbeb073a9aa37099131be342415a404698886a01e36173687f994edc3977c6a609d7dff27c347aea9a241de20746d7ff13781608728fe8d11fd450d15942a6da0d9718a12f829e5cdd724a91aeb3d3b65f92f14f3608047d12967e19aeb0ab0d57918bf3d9b8892b696afa296630fcde3a7e03a7f244fbcc7e37ccb36e845f44f709063f7d99b5b9e82475e31084700ef94a91f6f6bc54c7a5dec8f9558938af95b6520112fda46b26a5adbcc677da70e362e76e51a0897594867b3a1ce223148a2e677733158f05eab6e6ff681c0142aa66e3f4e8ed0ff7300d863693641445ecea32009807295162476a07a0eecb96a26105f0fae3f690293608e8a7b33f52cecf88ea60c07d780022ef7a83bb68bff1a2cb1696e50db9ce3adf28f918839cb07c0d1b4fdbe153924004d7098dfe2e64e42daf58856a722f059311d05da4829c4778da0341a10abb6291581948af02fe96f74a133ba88d1ec7b961be13efca9a138bf01c322e70620b078316f2550660aed06daca4dba8d8bd866418f19035d6398a33697d0c751c0068a2d26eb1872712d1ddc16178d0241d31eab293155ed8806fe3eaea7ffdd9e2dbed2fb2290ed0d22c96b0855e04989cc329542cad10ccf840436c8b2f52f4c5cfc872ad090bd16c63260472b9789026de2c0913cb2a8b177825cca803bfb9435ada5810dce7fd147f845dd8e8302be3bab2cdc2d038c6c5824448e1cd3f57eb63ed08fb1d7f2817fafd8fe47951c8d60bf513be1463fb8ef6a447bda0360261247ff9936ed70714c88b0188f93ec5bab25d032020e1e40e1cc523fe251da6125cb951675a37aaa4e0346ae398dc3f9a00e223bf698bee05d091ed83d5bca9020afbbbfe5a875304146f518f9bae0ab1e740fbdc995fdd3fa14da2278e76cdf6a08daaeff1a3aeed41fdc3514e2b4a6cd2c1e57949be1f3fb4015f60be56436fafdf9e854975f0c9d0a6ecef68919358fc8a9edbbf809f5bc6064f3ab0c76e92c52a5a510be78ecfa033876758ae8ac1793d4cd2f20115d7abe1c0b92ba29c0509efb17a21c4741c0e6fe2216fa99d823cb06390c0729e5015918101440ed6d8a0812aa733b39bae34d3e5d15662c5d3267fcf2b0fa8ae908e2d131ee96307aed674111501bfcade83df9257b4d0448997b8e30dd85ac1391561932ada5b852fc1524ccfb6c242e9fe17a81a8f4e53affb046d91b92807338f41f5e75c98ff2e14849e8b7f5a2db91c6776fb3da4f6882b03133f9b0a036120644a33e22def0e88f1cdf90bfd440beefad20d99bd7b610770ea4f728deb26c7453f645c098ddbc4eb09957b47541689c83d08eddc1efcd06df28d50e4897cb9ecd91a60ca9d9adc137df4e1202f70c972aa2ae28984f4f6de1bea86e121190309b094dd74aff2634bacfd5a1913e6b46c42388a50bfcef0bc82c6d8f945e400f85a611f498c796f6c628c9e9145cbe7c617df05dcab9902f5aed7b8ffacdcf1a05f15244b27949b982dd937e01411b6929fcc977a8ae6dae087dc408cd74304508796166e149e63f0c9c0f5d66e41bd72397c5a063e40e28e151c077d88c52e46f8765ae73ab69c03ff8b11e23f01311f266e38256f0a242843b3ef7ae9245e632416313f051b0724978217a31fcced21ed4371a7e7a16b8b11eedaef0b61d012f8f82a40d0d81a58d845861c32cc5b3229d7419ca38ebee8ab73206a4d25a7774c12c496df28f88c6c4c15a4e89eeb0b7c74c86a7c85dbd7ef1653be5fd0bd6b9a39a0b07f2482a1ce0c8e34ce6317c65bffbf27e081b348c4f6bc7959c7e814cd018fcebf6fad8f42cc3cc9c3168aece7c2f3b2a188040e47220c3eec0bd23600c8a7746e71c45c46b9be46cf4c0f7908b7c3ae0ca0d2e76b1fda4cb8c0f2764ccb6e348093d58b5aa9a1b4a9e5b2e671f73fb4f0504fc6808933942784d33f747d8a31dedfc10c3648d0a32bbc9913184fd81fba60366c2f0f33bf72ce2e443d10d240d3467f353e4473ba586c04f1bad9e775c99dd3eb3270dcd9dc342e804bc79ff6d7a9f4b75ac8b11dd90978792d88467eefcbdc88ea926d8d50c20d501a867040cbb8125c732acd4e24698c1d7289b6bb1f0a2c0ccc085719050802363e5ea1b7790476a8d1fb1398ca4ecb907933f71c1187956df0409a795b96a8562bb8084d02a56dbdde403e1190e28f251cbadeaecb90dca01d93b0c6457d036407478d904d7d9b810228423baeb67e7c61e3522c69654fdf47cd9bdf60d356c00de52b72a070ec7fe5c539ee336c2c35afd71b2e027150575233a3e799a9de0c489040cc2d60bcb2531f1a785f0e4aea1f7a5936cae1d470e4ef487c801d5df8293c9a00b455f8644566ef47d02960ce11d58a5c26ae2606127ed14afd5cbc8b87d147fb142c8d9cac28474b1a9aa767fca6cedd36b9380ad4624539e2075070ef876f80348ccfdb13fc74ad8e81e134be53abdf4befe0551063a4b77382cdb134a4c9bcd6272ec38ee3ab76e6f22aef7aaf068959e4908897acea1ef99a60c388a373c8f42cdf6db2775dcd45b6c8d22d6c54acdbc18d1830feaa8c373859db38e151bdd6c31c49ed3237996431887fd9d0b2091628548b9756e7a20c6b2218b60293d251eb071decd6016a42779ab2bfcd0c0cf454b9b076a23f92b51b81f9363fa5db9db00092248ffc66fd2495c5cf3b43e155316e04d4605d078431454ab3c6eec8a78f3e1b29a23518c88f9665b0eceba7a1873d63841fb2a807c3a0ad9980090bf0fb3a80b0b3337b30af432d82c786384b64f30e26dfbc6ecfeeda1be587d7acbdf8c66f53a40670f67b1b69bfc8a629e16bf9feea46bbe77bbdc51f4490937f25ca241f9a831dfd237774888a1b1a9259aa1261346abd88ab147376b719a5dd324e9cea5048c9c42871138d4ccf226393d1b4caff2005ad8f5306e2599dac1f64ee1e0142fe4dcff5c355cc65ee9d71c702cfe852444c3da26667c6de7a872b0e8cd12686aaeeb1f0d7fc9b4cad1fa559e658f85d87505c00ebcec56ac71a0fb1611297f1b4b4cf7545409eb414ed706b7a501d25d55541e301889d0d5ccc905ff0b3702d179c0bbd02aea72e05f3582ef66f86e8c58296eb1f4fa44adc5f8c178e062329bd0de51434f85084b5af0c7c40538db3539bcc240ebc8bbec294b4980816472d40571c7c1ad8f9963fbda28e9168aa5e9b20868d547444a65ac95b7fd9cf3e64da8d8c10dc8bd6f4cfedb92e4cd1369e6cce1b5adf02fc5ad2172fbee746bf897bb6d723537c701c85f7dc976a58704d9582accb79e20314bb5056f063acc7c673cd932f7087c535047df70f45442e65e7b5c052c3758a712eab7398f6c65dccfdbb3330cd55e276e404e1109e1568d271c9e74c509b853fbf7514d239530b6fbb559513c9befb31bf74f6d03f7942969c40eb07ce21787f06d1c43387c43d505c6fba736c80616dbf66e2b9b47c4ac614baa877e01a65aac1d7444335145b5ce92fc50d85d10e7157e854e1d03f7dc56850c300952e2f8f2a904cbc7cd2771cb0ba99f0bad48bc602a4e9e6060ceba78a48db4ec2648cc084086531cdac924d93b4e91524b9243191"}]}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000002000008500000028000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000084ff03001700000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x94)

2.580176264s ago: executing program 0 (id=395):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592", 0xdc}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae8", 0xd2}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd", 0x74}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e0", 0x3e}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590c5cdfc691b32669ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1c257d6a19523b800000000000000", 0x57}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61f", 0x80}], 0x3}}], 0x2, 0xc0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x410, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

2.257056583s ago: executing program 2 (id=396):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18)
r1 = socket$caif_stream(0x25, 0x1, 0x4)
sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
connect$tipc(r2, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) (async)
sendmmsg$inet(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x70, 0x0, &(0x7f0000000300)=0xaf00)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x13, 0x4, 0x6, 0x2, 0x0, 0x70bd27, 0x25dfdbfd}, 0x10}}, 0x4080)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000380)=0x3, 0x4) (async)
recvmmsg(r4, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}, 0xa85}], 0x1, 0x0, 0x0)
connect$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x3}}, 0x10)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0)

2.210737075s ago: executing program 2 (id=397):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'vlan1\x00', <r1=>0x0})
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e20, @local}})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000)=0x7, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r5 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004041)
syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0)
sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400})
ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000340)=0x1)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, 0x2420, 0x40910}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x2c}}, 0x20040404)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000040100000f1f7000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0xffd, &(0x7f0000002a80)=""/4093, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r6 = socket$l2tp(0x2, 0x2, 0x73)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'pimreg0\x00'}}, 0x1e)
setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4)

1.667374945s ago: executing program 0 (id=410):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124400000000006113140000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c78cd3e7dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25", @ANYBLOB="b263b65748f6937560011b8aa6312c2ae3ae02335a9cc52e84888f94c64e670409f058080401b5179f5605706f49cd59c04cd3ea22e48bc616c5ad"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

1.610735599s ago: executing program 0 (id=411):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="e1ff0000000000b0cdc5ad4ca6281d0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8014480}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x75}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x88c4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x80)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f00000006c0)=0x3)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x6d5)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x398, 0x100000c, 0x1e0, 0x1e0, 0xc0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'pimreg\x00', {}, {0xff}, 0xff, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xc, 0x2, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0xfff8, 0x2, [0x30, 0x3, 0x1, 0x37, 0x811, 0x33, 0x37, 0x1a, 0x17, 0x3d, 0x4, 0x4, 0x2b, 0x21, 0x1c, 0x5], 0x0, 0x8000, 0x2004927}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xfffd, 0x1}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xffffffff, 0x7fffffff, 0xffffff00, 0xffffff00], 0x4e20, 0x67, 0x3, 0x4, 0x1, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7d, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)
connect$vsock_stream(r6, &(0x7f0000000680)={0x28, 0x0, 0x2710}, 0xf)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r8=>0x0, 0x2f, 0xe9, 0x7, 0x8, 0x1, @private2, @private2, 0x700, 0x1, 0x0, 0x1}})
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.time\x00', 0x0, 0x0)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1480, 0x2104}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x8, 0x4, 0x2, 0x4, 0x1}, @jmp={0x5, 0x1, 0xd, 0x2, 0xb, 0x80, 0x1}, @jmp={0x5, 0x0, 0x3, 0x0, 0x5, 0x30, 0xfffffffffffffffc}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x4f, &(0x7f0000000140)=""/79, 0x41000, 0x33, '\x00', r8, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0x3, 0xb5, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r0, r0, r0, r0, r10, r0, r11, r0], &(0x7f0000000500)=[{0x3, 0x4, 0x7}, {0x3, 0x4, 0x7, 0x9}], 0x10, 0x241a}, 0x94)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x800002, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.609802972s ago: executing program 0 (id=412):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x3, 0x20000000000001e8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x16}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000000000)="4a5b4d2be202310116c656ac6920d7275e99ce515660b56dd390b5bba41ebdcd8b6c182bc8445c809279488b091009454b94a5aa2bf96b6198559b1bc0cdceea85f98a26b7aea591a58fc87456e614f1a1038af7f32692652b88569030", 0x5d}, {&(0x7f0000001140)="12d3be268f4b5a0816ed9c660c1ab599ee140f9e6c62c55bd90aa2dc8de275716dd83f59cc402bad1b5fa23b4bd6a80610a83eed5ac95ea71b2e8bf3fb9706dfafb8c6b689fd89da38cfa733f4b803f9a6830037cb7f673d56d559b882ecbae5433fd984889aa3df63a14cebcb03e3b756121f0f981699c0487476ad99484872ac2eca743300322b7b00476b984c355e088655453005f6d9adb6663da83a33ebc6166a1cfa261242ec9623c173959de3e9a9122eaa0fa69eb125ee1572e22a9b8410bb08f22e68e60174aa161f", 0xcd}, {&(0x7f0000000080)="89db15d6ddf1d998e2cacc1e69", 0xd}], 0x4)

1.56043588s ago: executing program 2 (id=414):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000300)=""/7, 0x44, 0x7, 0x1}, 0x28)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
unshare(0x20000400)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="02000000000000000040000091d145dd3ffc69a140fb1d66fb58dec0c2d7f821ee455c96feece10066a5ab64884c323e9a3622cb9e1a94e0522e1061c562c318e029b9b9e0910a744184043f40d8bf1e4cb85752efc55dcb7341c5044ada02d39e12a0ec00165e5ad79d98be87d33a10421c2f760b81bef14428b48d3b51b499580114282490d05ab7d7afc984d6add05f25cce2cc32eaf1a9374e7489", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
r5 = socket$kcm(0x10, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r7, 0x0, 0x6}, 0x18)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)

1.497590606s ago: executing program 2 (id=416):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ppoll(&(0x7f0000000400)=[{0xffffffffffffffff, 0x65ec}, {0xffffffffffffffff, 0x1220}, {0xffffffffffffffff, 0x58}, {0xffffffffffffffff, 0x2400}, {0xffffffffffffffff, 0x10}], 0x120, &(0x7f0000000080), 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x480, r1, 0x300, 0x0, 0x25dfdbff, {0x1c}, [@ETHTOOL_A_LINKMODES_OURS={0x46c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "478f1f1086e33b51d63f4112616326601f5936e2f9d8e05bb2526ce78eeb941d2fd438554a29bd83c6a103f068260b0257daf22eb7108eef425d583e8253632c44fbf1a3d494ff3144a8f5e7d10b2d454cd7faf513f69bee170883f82eb9af1316"}, @ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "b55a2cb44297eacbde9d223f0b9ba08b6d2ebc96d4ca1ed4fed21544b75668f64c60b02ed9b3fa9e51af9151301a8a2eeaf93c95f4ed9385af9c9227d1c467ae8b23c8c7e6582b54418bd7066128a98ab829fa3c5d1eff557feab62ab8625e0366dccd56d754f82fe2dff011d3ec012ac86aee73a3b8f50bcba22d8815e16cff825e78c534237bfbd66a60fde82d5bc2373fad2308f0ac460e8da3d40aa34098679ba52c6ebcf6a0b46b71001a95a8dd9023b6138130dc2763cc15b1fe3d1990e67d166f4ef2e79a5824851566"}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xbb\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff01}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa7}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '\xa1#:*\\--:+@):):&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_VALUE={0x6f, 0x4, "900c1f8261b3ee857d2bfdb23278b8147e0132a50d4c4a80b70ec270f0d139c9477ec837011568ea7fb41552b35bcfbbc3395a2086f452b14592bba76d7e98a7d42927dfa1355caacb706b9f271b785847623e1211f0d72ffbcd4ada73db620b133ecc5bae7ab36644a75f"}, @ETHTOOL_A_BITSET_MASK={0x8d, 0x5, "8706ee764d0e38c7a48573e83844753fd7093ae59ae7310815c955e6af976d3b30be7a6b4d37c43affbc11059b039e28b1144169b4a17cbc7a61b7ce55e3ebfa44e69f79cb404634ee82faac31470ad13d175e190ed0ce35ed9342fc69f6c3b94c811f200934fd2af8fc144f93f0e6c5185f09c76a781cd0e862d0cc3a3e5eee391d67d02612af58e1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb0, 0x4, "71eaee4356698ae2407407556d423e9b07bd84bb72e76742bc0127835f0fb8f04eb28a15c8085fb07699769100de9c69e6e1aad09c7d2bfb300fd61fba5970db5d2532fe0348ab0b629dabb55387fa43fc8149c6f17e7eb5523a7085529395ea4da0a3399a3c4a5ebc0eab2c0d57598db853bf1d761b7b3b98f07bf7307bb51340c516bc73d26892699ee8c3d00ae16760996291abc509047750df5ed3d4c803f72c71c19c058b7bba011a70"}, @ETHTOOL_A_BITSET_MASK={0x64, 0x5, "0607d2c9d6fb651cbb3130838d3a88f6552d7b04571742fa3e38c62b814f4402759308b046e28f5cae2f861d974c8b03677f33bf85fe856f2eb23a908f758e4bd826d9c20ba67354a449546fc7d89e3c939ca5cc66e61223ea7f0611445a1d6a"}]}]}, 0x480}, 0x1, 0x0, 0x0, 0x20044405}, 0x8044)
r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e, 0xc00)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14}]}]}]}], {0x14}}, 0x80}}, 0x4000000)
close(r3)
bind$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)

1.389711745s ago: executing program 2 (id=419):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000010000)=ANY=[@ANYBLOB="18000000010000000000000000000000630104000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d}, 0x94)

499.126825ms ago: executing program 1 (id=423):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) (async)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000000000002e0000000a0001007770616e3100000005002e007f0000000c0005000201aada92afc3aa05002b"], 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711065000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180))

420.809416ms ago: executing program 1 (id=424):
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c000680050001000000000047000280050001000100000006000340"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x3e, 0x107, 0xfffffffe, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x8}, {}, 0x0, 0x0, 0x2, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "776c3dac4c123121daa2ff5cd87186c96a82d89c65ea6ba138aa025681856d0f5f5e956336d23906f1a7e9087ab152c38d015e5be92b828b1f0eb091afe0a4e2ce"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}, 0x1, 0x0, 0x0, 0x200448c1}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

250.538644ms ago: executing program 1 (id=425):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0)
listen(r0, 0xfff)
r1 = accept(r0, 0xfffffffffffffffd, &(0x7f0000000680))
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
r2 = socket$kcm(0x10, 0x2, 0x10)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0xec, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xbc, 0x2, {{0x8, 0x90f0, 0x4, 0x0, 0x0, 0x4}, [@TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xa66, 0x7, 0x12000}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x7, 0xfff, 0x0, 0xb54af9cc}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x5, 0xa, 0xa7a3}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x8}}, @TCA_NETEM_DELAY_DIST={0x3e, 0x2, "ba181d8bf3c1cb21fdf81ed083141ebf59a49158c91f67f2628ad2cd8e850c94a1d0a6e91ad0e48c3f2bf8885d1759f612b200fa6529b693dce9"}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x1, 0x56f5}}]}}}]}, 0xec}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r6, 0x10c, 0x2, &(0x7f0000000100)=0x8a, 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xf, <r7=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r7, 0x4)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x8}, 0x8)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) (async)
listen(r0, 0xfff) (async)
accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (async)
socket$kcm(0x10, 0x2, 0x10) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0xec, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xbc, 0x2, {{0x8, 0x90f0, 0x4, 0x0, 0x0, 0x4}, [@TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xa66, 0x7, 0x12000}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x7, 0xfff, 0x0, 0xb54af9cc}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x5, 0xa, 0xa7a3}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x8}}, @TCA_NETEM_DELAY_DIST={0x3e, 0x2, "ba181d8bf3c1cb21fdf81ed083141ebf59a49158c91f67f2628ad2cd8e850c94a1d0a6e91ad0e48c3f2bf8885d1759f612b200fa6529b693dce9"}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x1, 0x56f5}}]}}}]}, 0xec}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
setsockopt$llc_int(r6, 0x10c, 0x2, &(0x7f0000000100)=0x8a, 0x4) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xf}, 0x8) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r7, 0x4) (async)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x8}, 0x8) (async)

70.810867ms ago: executing program 1 (id=426):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000030000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a05000000000000000000070000000900010073797a30000000000c0010400000000010000001140000001000010000000000000000000084000a"], 0xb0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x11, 0xa, 0x300)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$netlink(0x10, 0x3, 0x7)

932.936µs ago: executing program 1 (id=427):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 1 (id=428):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$tun(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="0001"], 0x42)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (async)
sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
close(0x3)
r2 = epoll_create1(0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/223, 0xdf, 0x1, &(0x7f0000000340)=""/89, 0x59}, &(0x7f00000001c0)=0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r5}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r5}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="8a20bb7f25698086fff451dd167db69f", 0x10) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="8a20bb7f25698086fff451dd167db69f", 0x10)
close(0x3)
epoll_create1(0x0) (async)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80}, 0x50) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x19383fb31bd4d798}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15389' (ED25519) to the list of known hosts.
syzkaller login: [   56.198670][ T5797] cgroup: Unknown subsys name 'net'
[   56.348892][ T5797] cgroup: Unknown subsys name 'cpuset'
[   56.355769][ T5797] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.093462][ T5797] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.494315][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.498155][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.500881][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.504279][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.506920][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.615940][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.619487][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.622172][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.625804][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.628935][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.651728][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.654699][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.657567][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.660604][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.664064][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.730471][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   62.844035][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.847253][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.849696][ T5812] bridge_slave_0: entered allmulticast mode
[   62.852380][ T5812] bridge_slave_0: entered promiscuous mode
[   62.860070][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.862182][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.864553][ T5812] bridge_slave_1: entered allmulticast mode
[   62.867207][ T5812] bridge_slave_1: entered promiscuous mode
[   62.895481][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.899973][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.950301][ T5812] team0: Port device team_slave_0 added
[   62.958177][ T5812] team0: Port device team_slave_1 added
[   63.001767][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.004222][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.011701][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.020567][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.023374][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.032113][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.111021][ T5812] hsr_slave_0: entered promiscuous mode
[   63.114114][ T5812] hsr_slave_1: entered promiscuous mode
[   63.137057][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   63.216151][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   63.312714][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.316097][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.318387][ T5817] bridge_slave_0: entered allmulticast mode
[   63.321171][ T5817] bridge_slave_0: entered promiscuous mode
[   63.341796][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.344420][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.346641][ T5817] bridge_slave_1: entered allmulticast mode
[   63.349390][ T5817] bridge_slave_1: entered promiscuous mode
[   63.392699][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.398692][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.402080][ T5821] bridge_slave_0: entered allmulticast mode
[   63.406289][ T5821] bridge_slave_0: entered promiscuous mode
[   63.411226][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.414526][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.416775][ T5821] bridge_slave_1: entered allmulticast mode
[   63.419608][ T5821] bridge_slave_1: entered promiscuous mode
[   63.435656][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.460419][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.466383][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.480731][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.530547][ T5817] team0: Port device team_slave_0 added
[   63.542410][ T5821] team0: Port device team_slave_0 added
[   63.548833][ T5817] team0: Port device team_slave_1 added
[   63.572544][ T5821] team0: Port device team_slave_1 added
[   63.575526][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.582846][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.599326][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.601893][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.611318][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.624470][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.630946][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.633050][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.641944][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.657173][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.668988][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.671616][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.681977][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.687469][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.689933][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.699901][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.750250][ T5817] hsr_slave_0: entered promiscuous mode
[   63.752734][ T5817] hsr_slave_1: entered promiscuous mode
[   63.755632][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.758073][ T5817] Cannot create hsr debugfs directory
[   63.777760][ T5821] hsr_slave_0: entered promiscuous mode
[   63.780129][ T5821] hsr_slave_1: entered promiscuous mode
[   63.782178][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.784844][ T5821] Cannot create hsr debugfs directory
[   64.051341][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.062738][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.066997][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.075431][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.080826][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.115255][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   64.138538][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.141458][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.168047][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.170947][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.174879][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.187576][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.196945][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.206586][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.329715][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.346640][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   64.357488][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.359775][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.375910][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.379943][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.382845][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.412924][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   64.444892][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.447811][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.465252][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.467539][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.480899][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.518033][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.555709][   T54] Bluetooth: hci0: command tx timeout
[   64.598206][ T5812] veth0_vlan: entered promiscuous mode
[   64.611166][ T5812] veth1_vlan: entered promiscuous mode
[   64.654630][ T5812] veth0_macvtap: entered promiscuous mode
[   64.665611][ T5812] veth1_macvtap: entered promiscuous mode
[   64.687865][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.696531][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.710707][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.714310][   T54] Bluetooth: hci2: command tx timeout
[   64.714508][ T5820] Bluetooth: hci1: command tx timeout
[   64.719078][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.722020][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.725211][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.727897][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.741439][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.816044][ T5817] veth0_vlan: entered promiscuous mode
[   64.838908][ T5817] veth1_vlan: entered promiscuous mode
[   64.850006][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.852868][ T5821] veth0_vlan: entered promiscuous mode
[   64.855520][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.880906][ T5821] veth1_vlan: entered promiscuous mode
[   64.896077][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.898643][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.911908][ T5821] veth0_macvtap: entered promiscuous mode
[   64.925751][ T5817] veth0_macvtap: entered promiscuous mode
[   64.941190][ T5821] veth1_macvtap: entered promiscuous mode
[   64.946914][ T5817] veth1_macvtap: entered promiscuous mode
[   64.976258][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.988178][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.994868][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.006581][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.011913][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.025842][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.028586][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.031485][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.047520][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.054019][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.065987][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.068699][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.071337][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.140827][ T5882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4'.
[   65.168628][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.171072][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.219242][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.221854][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.233620][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.236519][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.286147][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.288707][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.336112][ T5885] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.340232][ T5885] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   65.375465][ T5888] C!: renamed from lo (while UP)
[   65.379995][ T5888] A link change request failed with some changes committed already. Interface C! may have been left with an inconsistent configuration, please check.
[   65.559873][ T5908] netlink: 'syz.1.9': attribute type 15 has an invalid length.
[   65.666107][ T5905] syzkaller0: entered promiscuous mode
[   65.668013][ T5905] syzkaller0: entered allmulticast mode
[   65.717456][ T5915] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11'.
[   65.774999][ T5916] netlink: 'syz.1.11': attribute type 22 has an invalid length.
[   66.469140][ T5923] netlink: 'syz.2.13': attribute type 1 has an invalid length.
[   66.472675][ T5923] netlink: 180 bytes leftover after parsing attributes in process `syz.2.13'.
[   66.580060][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   66.635284][ T5820] Bluetooth: hci0: command tx timeout
[   66.727029][ T5940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16'.
[   66.743537][ T5942] IPVS: set_ctl: invalid protocol: 282 224.0.0.2:20004
[   66.757800][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'.
[   66.796188][ T5820] Bluetooth: hci2: command tx timeout
[   66.797613][   T54] Bluetooth: hci1: command tx timeout
[   66.957963][ T5950] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   67.048000][ T5957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21'.
[   67.054190][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'.
[   67.393962][ T5992] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.598125][ T6006] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.687576][ T6013] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET)
[   67.752520][ T6018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.35'.
[   67.818254][ T6024] netlink: 176 bytes leftover after parsing attributes in process `syz.2.37'.
[   68.050776][ T6043] macsec0: entered promiscuous mode
[   68.055864][ T6043] macsec1: entered allmulticast mode
[   68.057542][ T6043] macsec0: entered allmulticast mode
[   68.059149][ T6043] veth1_macvtap: entered allmulticast mode
[   68.548508][ T6093] openvswitch: netlink: IPv4 tun info is not correct
[   68.679109][ T6111] IPv6: NLM_F_CREATE should be specified when creating new route
[   68.694179][ T6111] Zero length message leads to an empty skb
[   68.723237][ T5820] Bluetooth: hci0: command tx timeout
[   68.724132][ T6113] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   68.732656][ T6113] xt_hashlimit: max too large, truncated to 1048576
[   68.865392][ T6128] syz_tun: entered allmulticast mode
[   68.873338][ T5820] Bluetooth: hci1: command tx timeout
[   68.874112][ T5814] Bluetooth: hci2: command tx timeout
[   68.881694][ T6127] syz_tun: left allmulticast mode
[   69.009757][ T6126] infiniband syz!: set active
[   69.011599][ T6126] infiniband syz!: added team_slave_0
[   69.039202][ T6126] RDS/IB: syz!: added
[   69.040809][ T6126] smc: adding ib device syz! with port count 1
[   69.042920][ T6126] smc:    ib device syz! port 1 has pnetid 
[   70.794831][ T5814] Bluetooth: hci0: command tx timeout
[   70.953483][ T5814] Bluetooth: hci1: command tx timeout
[   70.965157][ T5814] Bluetooth: hci2: command 0x0419 tx timeout
[   71.206767][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.209408][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   73.033841][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[   86.561484][  T973] cfg80211: failed to load regulatory.db
[   95.223084][ T6169] __nla_validate_parse: 14 callbacks suppressed
[   95.229636][ T6169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.79'.
[   95.278657][ T6175] C: renamed from C! (while UP)
[   95.285577][ T6175] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   95.308954][ T6180] netlink: 32 bytes leftover after parsing attributes in process `syz.1.80'.
[   95.316848][ T6180] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   95.355204][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'.
[   95.448961][ T6200] netlink: 44 bytes leftover after parsing attributes in process `syz.1.87'.
[   95.454029][ T6201] trusted_key: syz.2.88 sent an empty control message without MSG_MORE.
[   95.521218][ T6207] netlink: 252 bytes leftover after parsing attributes in process `syz.1.90'.
[   95.542822][ T6210] netlink: 44 bytes leftover after parsing attributes in process `syz.2.92'.
[   95.696594][ T6223] netlink: 104 bytes leftover after parsing attributes in process `syz.1.96'.
[   95.702120][ T6223] Cannot find add_set index 0 as target
[   95.783868][ T6227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.98'.
[   95.794193][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'.
[   95.805856][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'.
[   95.977996][ T6237] sctp: [Deprecated]: syz.0.101 (pid 6237) Use of int in max_burst socket option deprecated.
[   95.977996][ T6237] Use struct sctp_assoc_value instead
[   96.259474][ T6255] xt_recent: Unsupported userspace flags (00000048)
[   96.296668][ T6231] tipc: Can't bind to reserved service type 1
[   96.436381][ T6263] netlink: 'syz.1.107': attribute type 4 has an invalid length.
[   96.476957][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.480217][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.558470][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.567642][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.622864][ T6263] veth1_macvtap: left allmulticast mode
[   96.639161][ T6263] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.642107][ T6263] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.645972][ T6263] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.649232][ T6263] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.696840][ T6263] macsec0: left allmulticast mode
[   96.737744][ T6263] syz.1.107 (6263) used greatest stack depth: 17728 bytes left
[   96.991705][ T6277] dvmrp1: entered allmulticast mode
[   96.996794][ T6277] dvmrp1: left allmulticast mode
[   98.071494][ T6318] netlink: 'syz.1.123': attribute type 1 has an invalid length.
[   98.090909][ T6318] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.110546][ T5937] IPVS: starting estimator thread 0...
[   98.195026][ T6321] IPVS: using max 62 ests per chain, 148800 per kthread
[   98.282331][ T6328] pimreg3: entered allmulticast mode
[   99.053993][ T6377] delete_channel: no stack
[   99.060980][ T6375] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[   99.160545][ T6382] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   99.174574][ T6385] x_tables: duplicate underflow at hook 3
[   99.386756][ T6393] netlink: 'syz.1.142': attribute type 1 has an invalid length.
[   99.478199][ T6393] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   99.555056][ T6393] veth3: entered promiscuous mode
[   99.580749][ T6393] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   99.616517][ T6404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.637133][ T6402] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   99.640834][ T6402] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  100.420537][ T6415] __nla_validate_parse: 10 callbacks suppressed
[  100.420548][ T6415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.147'.
[  100.478459][ T6420] netlink: 'syz.2.149': attribute type 10 has an invalid length.
[  100.499382][ T6420] team0: Device hsr_slave_0 failed to register rx_handler
[  100.580021][ T6426] netlink: 'syz.0.151': attribute type 1 has an invalid length.
[  100.645601][ T6426] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  100.666426][ T6426] veth3: entered promiscuous mode
[  100.676051][ T6426] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  100.710261][ T6433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.921042][ T6439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.157'.
[  100.987907][ T6437] infiniband syz0: set down
[  100.990401][ T6437] infiniband syz0: added ipvlan1
[  101.030680][ T6437] RDS/IB: syz0: added
[  101.034867][ T6437] smc: adding ib device syz0 with port count 1
[  101.037621][ T6437] smc:    ib device syz0 port 1 has pnetid 
[  101.369926][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.161'.
[  101.391065][ T6451] netlink: 'syz.0.161': attribute type 1 has an invalid length.
[  101.400085][ T6451] netlink: 224 bytes leftover after parsing attributes in process `syz.0.161'.
[  102.100419][ T6469] openvswitch: netlink: Flow key attr not present in new flow.
[  102.368956][ T6475] pim6reg1: entered promiscuous mode
[  102.371055][ T6475] pim6reg1: entered allmulticast mode
[  102.460191][ T6479] netlink: 'syz.1.167': attribute type 1 has an invalid length.
[  102.463067][ T6479] netlink: 236 bytes leftover after parsing attributes in process `syz.1.167'.
[  102.951681][ T6493] netlink: 56 bytes leftover after parsing attributes in process `syz.0.170'.
[  103.095210][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'.
[  103.291822][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.176'.
[  103.382130][ T6524] netlink: 'syz.1.181': attribute type 1 has an invalid length.
[  103.432418][ T6524] veth7: entered promiscuous mode
[  103.438746][ T6524] bond3: (slave veth7): Enslaving as a backup interface with a down link
[  103.691217][ T6555] netlink: 'syz.1.190': attribute type 1 has an invalid length.
[  103.752420][ T6558] netlink: 9 bytes leftover after parsing attributes in process `syz.2.191'.
[  103.757455][ T6555] veth9: entered promiscuous mode
[  103.774484][ T6555] bond4: (slave veth9): Enslaving as a backup interface with a down link
[  103.779823][ T6558] gretap0: entered promiscuous mode
[  103.793967][ T6558] netlink: 5 bytes leftover after parsing attributes in process `syz.2.191'.
[  103.803522][ T6558] 0XD: renamed from gretap0
[  103.806663][ T6558] 0XD: left promiscuous mode
[  103.808207][ T6558] 0XD: entered allmulticast mode
[  103.811800][ T6558] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check.
[  103.886869][ T6564] bridge0: entered allmulticast mode
[  104.009836][ T6572] hsr_slave_0: left promiscuous mode
[  104.012805][ T6572] hsr_slave_1: left promiscuous mode
[  104.786997][ T6632] bridge0: entered allmulticast mode
[  104.789201][ T6632] openvswitch: netlink: nsh attr 12 is out of range max 3
[  104.791396][ T6632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.922815][ T6647] openvswitch: netlink: Flow key attr not present in new flow.
[  105.059148][ T6659] syzkaller0: entered promiscuous mode
[  105.061803][ T6659] syzkaller0: entered allmulticast mode
[  105.064822][ T6661] netlink: 'syz.0.218': attribute type 1 has an invalid length.
[  106.446911][ T6680] __nla_validate_parse: 6 callbacks suppressed
[  106.446923][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'.
[  106.477147][ T6681] netlink: 'syz.2.224': attribute type 58 has an invalid length.
[  106.513658][ T6681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.224'.
[  106.639098][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'.
[  106.806613][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'.
[  106.809673][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'.
[  106.878173][ T6711] 0XD: left allmulticast mode
[  106.937352][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.940793][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.128561][ T6711] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.138617][ T6711] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.238183][ T6711] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.245738][ T6711] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.248945][ T6711] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.252217][ T6711] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.358401][   T33] audit: type=1800 audit(1751553383.215:2): pid=6733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.234" name="memory.events" dev="tmpfs" ino=398 res=0 errno=0
[  107.368446][ T6733] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  107.371536][ T6733] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  107.411854][ T6738] xt_hashlimit: size too large, truncated to 1048576
[  107.512288][ T6745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.236'.
[  107.517558][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'.
[  107.521388][ T6745] netlink: 31 bytes leftover after parsing attributes in process `syz.1.236'.
[  107.526120][ T6745] netlink: 'syz.1.236': attribute type 3 has an invalid length.
[  107.529191][ T6745] netlink: 'syz.1.236': attribute type 2 has an invalid length.
[  107.533247][ T6745] netlink: 31 bytes leftover after parsing attributes in process `syz.1.236'.
[  107.541892][ T6745] netlink: 'syz.1.236': attribute type 2 has an invalid length.
[  107.766139][ T6750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.821258][ T6750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.877796][ T6757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.221414][ T6762] bridge0: port 3(erspan0) entered blocking state
[  108.224647][ T6762] bridge0: port 3(erspan0) entered disabled state
[  108.227913][ T6762] erspan0: entered allmulticast mode
[  108.231998][ T6762] erspan0: entered promiscuous mode
[  108.236135][ T6762] bridge0: port 3(erspan0) entered blocking state
[  108.238468][ T6762] bridge0: port 3(erspan0) entered forwarding state
[  108.251661][ T6762] erspan0: left allmulticast mode
[  108.253552][ T6762] erspan0: left promiscuous mode
[  108.256348][ T6762] bridge0: port 3(erspan0) entered disabled state
[  108.306980][ T6764] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.241'.
[  108.446420][ T6772] netlink: 'syz.0.244': attribute type 1 has an invalid length.
[  108.449029][ T6772] netlink: 'syz.0.244': attribute type 1 has an invalid length.
[  108.456099][ T6773] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  108.460499][ T6772] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  108.805679][ T6798] tipc: Started in network mode
[  108.808976][ T6798] tipc: Node identity ac14140f, cluster identity 4711
[  108.819842][ T6798] tipc: New replicast peer: 255.255.255.255
[  108.830182][ T6798] tipc: Enabled bearer <udp:syz2>, priority 10
[  108.852991][ T6802] sctp: [Deprecated]: syz.1.253 (pid 6802) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.852991][ T6802] Use struct sctp_sack_info instead
[  109.265435][ T6823] bridge: RTM_NEWNEIGH with invalid state 0x31
[  109.374251][   T24] IPVS: starting estimator thread 0...
[  109.468004][ T6836] IPVS: using max 62 ests per chain, 148800 per kthread
[  109.824422][   T24] tipc: Node number set to 2886997007
[  110.608999][ T6865] openvswitch: netlink: IP tunnel dst address not specified
[  110.727896][ T6865] netlink: 'syz.1.276': attribute type 1 has an invalid length.
[  110.862262][ T6878] netlink: 'syz.1.280': attribute type 2 has an invalid length.
[  111.372863][ T6922] netlink: 'syz.0.294': attribute type 1 has an invalid length.
[  111.385343][ T6922] netlink: 'syz.0.294': attribute type 2 has an invalid length.
[  111.428274][ T6925] bridge_slave_0: left allmulticast mode
[  111.430236][ T6925] bridge_slave_0: left promiscuous mode
[  111.432675][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.438361][ T6925] bridge_slave_1: left allmulticast mode
[  111.440513][ T6925] bridge_slave_1: left promiscuous mode
[  111.442394][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.457389][ T6925] bond0: (slave bond_slave_0): Releasing backup interface
[  111.466888][ T6925] bond0: (slave bond_slave_1): Releasing backup interface
[  111.489716][ T6925] team0: Port device team_slave_0 removed
[  111.507197][ T6925] team0: Port device team_slave_1 removed
[  111.509938][ T6925] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.512288][ T6925] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.517461][ T6925] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.519738][ T6925] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.529119][ T6925] bond2: (slave ip6gretap1): Releasing backup interface
[  111.531368][ T6925] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 26:79:68:b8:bc:3b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  111.540905][ T6925] bond2: (slave veth3): Releasing backup interface
[  111.572409][ T5937] syz!: Port: 1 Link DOWN
[  111.653855][ T6937] __nla_validate_parse: 11 callbacks suppressed
[  111.653877][ T6937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.298'.
[  111.981779][ T6959] netlink: 'syz.1.305': attribute type 21 has an invalid length.
[  111.985729][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'.
[  112.163814][ T6969] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  112.167612][ T6969] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  112.641758][ T6980] netlink: 'syz.0.311': attribute type 1 has an invalid length.
[  112.876234][ T7002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.882053][ T7002] netlink: 'syz.2.317': attribute type 2 has an invalid length.
[  113.005664][ T7007] netlink: 'syz.0.319': attribute type 1 has an invalid length.
[  113.049710][ T7007] veth5: entered promiscuous mode
[  113.062060][ T7007] bond3: (slave veth5): Enslaving as a backup interface with a down link
[  113.135265][ T7022] netlink: 72 bytes leftover after parsing attributes in process `syz.1.323'.
[  113.155861][ T7025] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  113.159746][ T7024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.324'.
[  113.173413][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'.
[  113.318305][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'.
[  113.321954][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'.
[  113.325857][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'.
[  113.335883][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'.
[  113.338683][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'.
[  113.388393][ T7039] netlink: 'syz.0.329': attribute type 1 has an invalid length.
[  113.422416][ T7039] veth7: entered promiscuous mode
[  113.425898][ T7039] bond4: (slave veth7): Enslaving as a backup interface with a down link
[  113.683981][ T7068] netlink: 'syz.0.337': attribute type 1 has an invalid length.
[  113.733210][ T7068] veth9: entered promiscuous mode
[  113.739243][ T7068] bond5: (slave veth9): Enslaving as a backup interface with a down link
[  114.067742][ T7085] Driver unsupported XDP return value 0 on prog  (id 95) dev N/A, expect packet loss!
[  114.114109][ T7089] netlink: 'syz.0.345': attribute type 1 has an invalid length.
[  114.267706][ T7096] netlink: 'syz.1.347': attribute type 1 has an invalid length.
[  114.342245][ T7089] veth11: entered promiscuous mode
[  114.350383][ T7089] bond6: (slave veth11): Enslaving as a backup interface with a down link
[  114.354570][ T7098] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  114.570489][ T7110] delete_channel: no stack
[  114.669221][ T7117] tap0: tun_chr_ioctl cmd 35111
[  114.760570][ T7124] netlink: 'syz.2.357': attribute type 2 has an invalid length.
[  115.174886][ T7136] xt_hashlimit: size too large, truncated to 1048576
[  116.049853][ T7184] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  116.190526][ T7202] netlink: 'syz.2.381': attribute type 1 has an invalid length.
[  116.246727][ T7207] netlink: 'syz.0.380': attribute type 12 has an invalid length.
[  116.296781][ T7213] openvswitch: netlink: Flow key attr not present in new flow.
[  117.377754][ T7278] __nla_validate_parse: 46 callbacks suppressed
[  117.377768][ T7278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'.
[  117.767726][ T7307] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  117.801843][ T7307] bridge0: left allmulticast mode
[  117.810367][ T7307] validate_nla: 2 callbacks suppressed
[  117.810410][ T7307] netlink: 'syz.1.409': attribute type 1 has an invalid length.
[  117.816880][ T7307] netlink: 236 bytes leftover after parsing attributes in process `syz.1.409'.
[  117.820739][ T7307] NCSI netlink: No device for ifindex 813332851
[  117.842696][ T7313] xt_CONNSECMARK: invalid mode: 254
[  118.214221][ T7332] lo speed is unknown, defaulting to 1000
[  118.223225][ T7332] lo speed is unknown, defaulting to 1000
[  118.227476][ T7332] lo speed is unknown, defaulting to 1000
[  118.239408][ T7332] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  118.258838][ T7332] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  118.308894][ T7332] lo speed is unknown, defaulting to 1000
[  118.319112][ T7332] lo speed is unknown, defaulting to 1000
[  118.338774][ T7332] lo speed is unknown, defaulting to 1000
[  118.351820][   T12] bridge_slave_1: left allmulticast mode
[  118.354255][   T12] bridge_slave_1: left promiscuous mode
[  118.357030][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.372054][   T12] bridge_slave_0: left allmulticast mode
[  118.375884][   T12] bridge_slave_0: left promiscuous mode
[  118.380995][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.426975][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  118.434482][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  118.438017][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  118.443670][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  118.449519][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.469542][ T7338] openvswitch: netlink: Flow key attr not present in new flow.
[  118.541134][   T12] bridge0 (unregistering): left allmulticast mode
[  118.668330][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.673318][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.677236][   T12] bond0 (unregistering): Released all slaves
[  118.685312][   T12] bond1 (unregistering): Released all slaves
[  118.692967][   T12] bond2 (unregistering): Released all slaves
[  119.168180][ T7335] lo speed is unknown, defaulting to 1000
[  119.307521][ T7369] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.425'.
[  119.325151][ T7369] sctp: [Deprecated]: syz.1.425 (pid 7369) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.325151][ T7369] Use struct sctp_sack_info instead
[  119.455888][   T12] hsr_slave_0: left promiscuous mode
[  119.458102][   T12] hsr_slave_1: left promiscuous mode
[  119.460179][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.463391][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.511969][ T3014] smc: removing ib device syz0
[  119.660305][   T12] team0 (unregistering): Port device team_slave_1 removed
[  119.680620][   T12] team0 (unregistering): Port device team_slave_0 removed
[  119.935120][   T10] ==================================================================
[  119.938328][   T10] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[  119.941538][   T10] Read of size 8 at addr ffff88802f3362e8 by task kworker/0:1/10
[  119.945358][   T10] 
[  119.946308][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  119.946327][   T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.946336][   T10] Workqueue: events smc_ib_port_event_work
[  119.946360][   T10] Call Trace:
[  119.946367][   T10]  <TASK>
[  119.946374][   T10]  dump_stack_lvl+0x189/0x250
[  119.946409][   T10]  ? __virt_addr_valid+0x1c8/0x5c0
[  119.946424][   T10]  ? rcu_is_watching+0x15/0xb0
[  119.946446][   T10]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.946465][   T10]  ? rcu_is_watching+0x15/0xb0
[  119.946484][   T10]  ? lock_release+0x4b/0x3e0
[  119.946506][   T10]  ? __virt_addr_valid+0x1c8/0x5c0
[  119.946524][   T10]  ? __virt_addr_valid+0x4a5/0x5c0
[  119.946538][   T10]  print_report+0xd2/0x2b0
[  119.946557][   T10]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  119.946574][   T10]  kasan_report+0x118/0x150
[  119.946591][   T10]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  119.946611][   T10]  __ethtool_get_link_ksettings+0x6e/0x190
[  119.946629][   T10]  ib_get_eth_speed+0x15e/0x7b0
[  119.946647][   T10]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  119.946665][   T10]  ? do_raw_spin_unlock+0x4d/0x240
[  119.946684][   T10]  rxe_query_port+0x93/0x3b0
[  119.946708][   T10]  ib_query_port+0x170/0x830
[  119.946726][   T10]  smc_ib_port_event_work+0x15a/0x940
[  119.946746][   T10]  ? _raw_spin_unlock_irq+0x23/0x50
[  119.946764][   T10]  ? process_scheduled_works+0x9ef/0x17b0
[  119.946784][   T10]  ? process_scheduled_works+0x9ef/0x17b0
[  119.946804][   T10]  process_scheduled_works+0xae1/0x17b0
[  119.946833][   T10]  ? __pfx_process_scheduled_works+0x10/0x10
[  119.946856][   T10]  worker_thread+0x8a0/0xda0
[  119.946876][   T10]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  119.946897][   T10]  ? __kthread_parkme+0x7b/0x200
[  119.946912][   T10]  kthread+0x711/0x8a0
[  119.946928][   T10]  ? __pfx_worker_thread+0x10/0x10
[  119.946947][   T10]  ? __pfx_kthread+0x10/0x10
[  119.946960][   T10]  ? _raw_spin_unlock_irq+0x23/0x50
[  119.946976][   T10]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.946994][   T10]  ? __pfx_kthread+0x10/0x10
[  119.947038][   T10]  ret_from_fork+0x3fc/0x770
[  119.947059][   T10]  ? __pfx_ret_from_fork+0x10/0x10
[  119.947078][   T10]  ? __switch_to_asm+0x39/0x70
[  119.947091][   T10]  ? __switch_to_asm+0x33/0x70
[  119.947102][   T10]  ? __pfx_kthread+0x10/0x10
[  119.947116][   T10]  ret_from_fork_asm+0x1a/0x30
[  119.947134][   T10]  </TASK>
[  119.947139][   T10] 
[  120.033550][   T10] Allocated by task 5812:
[  120.035267][   T10]  kasan_save_track+0x3e/0x80
[  120.037164][   T10]  __kasan_kmalloc+0x93/0xb0
[  120.038977][   T10]  __kvmalloc_node_noprof+0x30d/0x5f0
[  120.041124][   T10]  alloc_netdev_mqs+0xa6/0x11e0
[  120.043058][   T10]  rtnl_create_link+0x31f/0xd10
[  120.044971][   T10]  rtnl_newlink_create+0x25c/0xb00
[  120.046980][   T10]  rtnl_newlink+0x16d6/0x1c70
[  120.048886][   T10]  rtnetlink_rcv_msg+0x7cf/0xb70
[  120.050578][   T10]  netlink_rcv_skb+0x208/0x470
[  120.052049][   T10]  netlink_unicast+0x75b/0x8d0
[  120.053433][   T10]  netlink_sendmsg+0x805/0xb30
[  120.054897][   T10]  __sock_sendmsg+0x21c/0x270
[  120.056365][   T10]  __sys_sendto+0x3bd/0x520
[  120.057766][   T10]  __x64_sys_sendto+0xde/0x100
[  120.059241][   T10]  do_syscall_64+0xfa/0x3b0
[  120.060621][   T10]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.062399][   T10] 
[  120.063110][   T10] Freed by task 12:
[  120.064236][   T10]  kasan_save_track+0x3e/0x80
[  120.065603][   T10]  kasan_save_free_info+0x46/0x50
[  120.067074][   T10]  __kasan_slab_free+0x62/0x70
[  120.068456][   T10]  kfree+0x18e/0x440
[  120.069603][   T10]  device_release+0x9c/0x1c0
[  120.070933][   T10]  kobject_put+0x22b/0x480
[  120.072282][   T10]  netdev_run_todo+0xd2e/0xea0
[  120.073669][   T10]  default_device_exit_batch+0x81e/0x890
[  120.075318][   T10]  ops_undo_list+0x525/0x990
[  120.076745][   T10]  cleanup_net+0x4c5/0x800
[  120.078131][   T10]  process_scheduled_works+0xae1/0x17b0
[  120.079831][   T10]  worker_thread+0x8a0/0xda0
[  120.081260][   T10]  kthread+0x711/0x8a0
[  120.082496][   T10]  ret_from_fork+0x3fc/0x770
[  120.083894][   T10]  ret_from_fork_asm+0x1a/0x30
[  120.085358][   T10] 
[  120.086110][   T10] The buggy address belongs to the object at ffff88802f336000
[  120.086110][   T10]  which belongs to the cache kmalloc-cg-4k of size 4096
[  120.090359][   T10] The buggy address is located 744 bytes inside of
[  120.090359][   T10]  freed 4096-byte region [ffff88802f336000, ffff88802f337000)
[  120.094375][   T10] 
[  120.095119][   T10] The buggy address belongs to the physical page:
[  120.097005][   T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f330
[  120.099581][   T10] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  120.102141][   T10] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  120.104429][   T10] page_type: f5(slab)
[  120.105675][   T10] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[  120.108295][   T10] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  120.110907][   T10] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[  120.113537][   T10] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  120.116065][   T10] head: 00fff00000000003 ffffea0000bccc01 00000000ffffffff 00000000ffffffff
[  120.118716][   T10] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  120.121325][   T10] page dumped because: kasan: bad access detected
[  120.123286][   T10] page_owner tracks the page as allocated
[  120.125014][   T10] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5812, tgid 5812 (syz-executor), ts 63167905300, free_ts 0
[  120.131115][   T10]  post_alloc_hook+0x240/0x2a0
[  120.132531][   T10]  get_page_from_freelist+0x21e4/0x22c0
[  120.134182][   T10]  __alloc_frozen_pages_noprof+0x181/0x370
[  120.135956][   T10]  alloc_pages_mpol+0x232/0x4a0
[  120.137475][   T10]  allocate_slab+0x8a/0x3b0
[  120.138865][   T10]  ___slab_alloc+0xbfc/0x1480
[  120.140324][   T10]  __kmalloc_cache_noprof+0x296/0x3d0
[  120.141970][   T10]  ipv6_add_dev+0x6ca/0x1370
[  120.143412][   T10]  addrconf_notify+0x794/0x1010
[  120.144888][   T10]  notifier_call_chain+0x1b6/0x3e0
[  120.146472][   T10]  register_netdevice+0x1608/0x1ae0
[  120.148061][   T10]  virt_wifi_newlink+0x428/0x860
[  120.149540][   T10]  rtnl_newlink_create+0x310/0xb00
[  120.151100][   T10]  rtnl_newlink+0x16d6/0x1c70
[  120.152536][   T10]  rtnetlink_rcv_msg+0x7cf/0xb70
[  120.154036][   T10]  netlink_rcv_skb+0x208/0x470
[  120.155491][   T10] page_owner free stack trace missing
[  120.157131][   T10] 
[  120.157844][   T10] Memory state around the buggy address:
[  120.159512][   T10]  ffff88802f336180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.161842][   T10]  ffff88802f336200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.164222][   T10] >ffff88802f336280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.166587][   T10]                                                           ^
[  120.168825][   T10]  ffff88802f336300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.171238][   T10]  ffff88802f336380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  120.173691][   T10] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  120.188347][   T10] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  120.190588][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  120.194209][   T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.197267][   T10] Workqueue: events smc_ib_port_event_work
[  120.198998][   T10] Call Trace:
[  120.200043][   T10]  <TASK>
[  120.200950][   T10]  dump_stack_lvl+0x99/0x250
[  120.202357][   T10]  ? __asan_memcpy+0x40/0x70
[  120.203863][   T10]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.205401][   T10]  ? __pfx__printk+0x10/0x10
[  120.206770][   T10]  panic+0x2db/0x790
[  120.207967][   T10]  ? __pfx_panic+0x10/0x10
[  120.209373][   T10]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  120.211158][   T10]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.213038][   T10]  ? print_memory_metadata+0x314/0x400
[  120.214661][   T10]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  120.216449][   T10]  check_panic_on_warn+0x89/0xb0
[  120.217920][   T10]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  120.219701][   T10]  end_report+0x78/0x160
[  120.220996][   T10]  kasan_report+0x129/0x150
[  120.222355][   T10]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  120.224110][   T10]  __ethtool_get_link_ksettings+0x6e/0x190
[  120.225827][   T10]  ib_get_eth_speed+0x15e/0x7b0
[  120.227305][   T10]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  120.228973][   T10]  ? do_raw_spin_unlock+0x4d/0x240
[  120.230590][   T10]  rxe_query_port+0x93/0x3b0
[  120.231998][   T10]  ib_query_port+0x170/0x830
[  120.233378][   T10]  smc_ib_port_event_work+0x15a/0x940
[  120.235030][   T10]  ? _raw_spin_unlock_irq+0x23/0x50
[  120.236873][   T10]  ? process_scheduled_works+0x9ef/0x17b0
[  120.238664][   T10]  ? process_scheduled_works+0x9ef/0x17b0
[  120.240344][   T10]  process_scheduled_works+0xae1/0x17b0
[  120.242172][   T10]  ? __pfx_process_scheduled_works+0x10/0x10
[  120.244012][   T10]  worker_thread+0x8a0/0xda0
[  120.245432][   T10]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.247380][   T10]  ? __kthread_parkme+0x7b/0x200
[  120.248849][   T10]  kthread+0x711/0x8a0
[  120.250091][   T10]  ? __pfx_worker_thread+0x10/0x10
[  120.251612][   T10]  ? __pfx_kthread+0x10/0x10
[  120.253003][   T10]  ? _raw_spin_unlock_irq+0x23/0x50
[  120.254526][   T10]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.256193][   T10]  ? __pfx_kthread+0x10/0x10
[  120.257564][   T10]  ret_from_fork+0x3fc/0x770
[  120.258953][   T10]  ? __pfx_ret_from_fork+0x10/0x10
[  120.260438][   T10]  ? __switch_to_asm+0x39/0x70
[  120.261844][   T10]  ? __switch_to_asm+0x33/0x70
[  120.263278][   T10]  ? __pfx_kthread+0x10/0x10
[  120.264635][   T10]  ret_from_fork_asm+0x1a/0x30
[  120.266074][   T10]  </TASK>
[  120.267557][   T10] Kernel Offset: disabled
[  120.268893][   T10] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:36:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000d7090
R8 =ffff888107d20237 R9 =1ffff11020fa4046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48f4 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff47677f1c CR3=0000000031282000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00000000000000ff 0000000000000000
XMM02=00ff000000000000 0000000000ff0000 XMM03=ff00ff00ffffff00 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11003750ac8 RBX=ffffffff8f50ffb0 RCX=ffffffff819da768 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8f50ff60 RBP=1ffffffff1ea1fec RSP=ffffc900000f73f8
R8 =ffffffff8f50ff67 R9 =1ffffffff1ea1fec R10=dffffc0000000000 R11=fffffbfff1ea1fed
R12=ffffffff8f50ff60 R13=ffffffff8f50ffb0 R14=dffffc0000000000 R15=ffff88801ba81cc0
RIP=ffffffff8223b9ad RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d53b8d3a18 CR3=000000010ac00000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=0000000000000000 0000000000000000
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=00000000000000ff 000000000000ff00
XMM04=0000000000ff0000 0000ff0000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
