last executing test programs:

359.329297ms ago: executing program 1 (id=248):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x15, 0x9, 0x35}, 0x2c)

310.608072ms ago: executing program 2 (id=250):
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "173e6335a79630de1125f32bfd49b77c2d01a8ac6334c2bd", "5c341f44cbb52d9d51c5ea017cd89c9cf84a0b6ec3606f3e97d850427a78e750"}}}}}}, 0x0)

248.837578ms ago: executing program 2 (id=251):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0xfdffffb1, @private0, 0x5}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x56500}, 0xfffe, {[0x5447, 0x3, 0x7, 0x1, 0x3, 0xffffffff, 0x9, 0xfffffffa]}}, 0x5c)

248.529553ms ago: executing program 1 (id=252):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000c40)={'wg2\x00', <r3=>0x0})
sendmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000ec0)='O', 0x1}], 0x1}}, {{&(0x7f0000000c80)=@ll={0x11, 0x19, r3, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d00)="c3df", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x1)

248.38814ms ago: executing program 0 (id=253):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20)

179.767647ms ago: executing program 1 (id=254):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
ioctl$TUNGETDEVNETNS(r0, 0xc0189436, 0x20000000)

179.428085ms ago: executing program 2 (id=255):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

179.161105ms ago: executing program 0 (id=256):
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)

179.034701ms ago: executing program 1 (id=257):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000280)={0x1, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @loopback}}}, 0x108)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback}, 0x10)

110.799463ms ago: executing program 2 (id=258):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=""/253, 0xfd}}, {{&(0x7f0000002840)=@tipc=@name, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002740)=""/246, 0xf6}, {&(0x7f0000002900)=""/119, 0x77}, {&(0x7f0000003d40)=""/22, 0x16}], 0x3, &(0x7f0000002980)=""/193, 0xc1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/253, 0xfd}, {&(0x7f0000003b80)=""/215, 0xd7}, {&(0x7f0000003c80)=""/166, 0xa6}], 0x4, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x3, 0x0, 0x0)

110.492951ms ago: executing program 0 (id=259):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"/1247], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

110.265983ms ago: executing program 1 (id=260):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0xfffffffe, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1, 0x100000000, 0xca8, 0x0, 0x1}, {0x3, 0x0, 0x6}, 0xff, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4d5, 0x3c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{@in6=@local, 0x2, 0x33}, 0x20, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3, 0x4, 0x0, 0x81, 0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

106.704658ms ago: executing program 1 (id=261):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000400000004"], 0x50)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r1, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000940)=[{&(0x7f00000002c0)="cbd8c1b9d056a0f61cb7652fc296807b09d708caada74a4d95d5d812c6c9be645bad6469a12ac2e6788d7487e200b7ccc080b0d936943ab41849c6de75c69d9fea6622a8cf60f27946199b94fb627ff0a97ff5ee8c90a9cb2e0e51c2071950c6b2dc6f088050e382963c4e6cc62e432bcaf0c77582d530d23c7e017f1dd6899e6ff0e171423982b824922332182d3911a49f5979f314c7fef8166bffde82606d4c21", 0xa2}, {&(0x7f0000000380)="af475390ba8c9939e21ec14ebe187215cd4ade9909ba4ba2f0fcf4d74f3cf2115810b57d5907fd65b69c02917ae0abe252ec0632b420e98cc51a309b82779c18cf0a36c9207d398b8f76c728c37623f40a6405bc4bb1a4b7dc97e526ee7b19fcb0d9c6cb5a7897c7f93467cc5d4116ac044f5a80606aff6053f27eba8a7842", 0x7f}, {&(0x7f00000006c0)="2907421e4383d85c208e4f9fde576ff45451a65be494119b96e644f22bb48d1b20e5e02927850010337c64d71d79ee2b1dd28f1bca76f2fae40bb2d3daae518b66036d1f1cb057bc3ac1ae9a10cc25a03637", 0x52}, {&(0x7f0000000740)="d1cc17aad770b26caebe7aebc1366d7332da63eddb696888ec161ea89e89d8a38af5d3a3a7052dfcfa7fb4d66f2ee484a85ee2da1f7534e621f9c61a4b180a4614bba0654a4109caf02145f0bd2d3597d4ca424c09c6492ce22aafce930aeeaa6fccdfc7f9a62bc5e7a8f3c74ed28b8ece307149ee034fa9b1ce0685d78817c804827d0c683973a7bb5e1a654b72dfac9e67b410b51e2bd8c3d88a8e635ae0365b3abf83ac263d4e7fddc76975dda9d32f43b0a5623c4b00577e1154dce8129ee7579d440d0cf7e5cb8706c7e7fda2c89b65dcb87aa74bbc6858c53f540a46fd9de110a80965f3459605", 0xea}, {0x0}, {&(0x7f0000000840)="531a89f1ec11520868f2a49cde2b8d0e5a90371d1a440ab9aa3eaa8a", 0x1c}, {&(0x7f0000000880)="ace9cd2e2ccef3bb7ba03e046a07471d5768543c2f3d84b26380984a3676c1191d4e4eb8aa86a8df1101ff7e868e2c50c2f0d3f1c82bd11038701c9290ffd1d7bfd94755c2cba77ddf260f9246d58b7973c5e52794a3bea2a0d8fa0b94fa445ed07c9d0a52434d5f99659f98983cb3fc3f90afb6", 0x74}], 0x7}}, {{&(0x7f0000000a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a40)}, {&(0x7f0000000a80)="26a99d29baec9f5e8d844510d628af81eb4c169f2af31ef7318262694874208398eb42ecdf13dda7f76167b8dd38cb46e904af99dde78b5c57c0dc48f13dedcd7092ae10db8f4f348236ff81650b7ae34e111d3c120aaf84e5f9742e36d0b9eb58200cd16de2b490629c4706e5f33031641958daf2b678eaec32128c85110a7207d7297b502bbe2dad2611c0a070c00a67ba3cc05eb4d38a8a083061baf4b804deef23041c871afab372ecb0f165fe2ca57896ef6741ee9f7afd875b7ec7a69394611f6b69b1a4ad1dc6149b1a3eaebad32cca23a198bbf2b8ff39455320da24571d4c49dc506ca727b089b6184e4378", 0xf0}], 0x2}}], 0x2, 0x4)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180), &(0x7f0000000200)=0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), 0x0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18)
accept(r1, &(0x7f0000000f80)=@in6, 0x0)
ppoll(&(0x7f0000001000), 0x0, &(0x7f0000001040)={0x77359400}, &(0x7f0000001080)={[0x7]}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d80))

59.964996ms ago: executing program 2 (id=262):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)

59.50185ms ago: executing program 0 (id=263):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x2000001, 0x0, 0x9}, {0x10000002, 0x0, 0x2, 0xa}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)

2.513648ms ago: executing program 0 (id=264):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000009cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000078c0)=[{0x108, 0x0, 0x1000, "1ed3270b894201673f50984104bf304bc1b1062b37d2939d306e8dcf7446b981289124e4851125b649ae658e9942f9c8f84e1a05e64edb8d1ba8f96e6b330f1670e0b53387073811c45cf6e1ac94dbc816f3738becac806bf098560992441e235773ee9d6711654b3842e059a291d22a111d97757ccd0901752317782c72e4aa86bd2b5b9282cab6ac7b273cc73b979d7f91dfd32eb9e8205da1ac7e4478abf00bb8755aca28348d853d0aba83012f1368ea259b0e40b8cdb98ced718684e1f44042caedf34cde2d4a0e82a72d05328cebf3e4c98cf35ea0125b533a75e46950fba4382385a4d1a9340e38ec0930aba18774"}, {0x1010, 0x0, 0xa87, "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"}, {0xf0, 0xff, 0x6, "34489571538d673de7dfb10a98fa8f5dbb3581961a7b46acb0ea8131897e7d4025f00569c85d9eba9445b499bbae5d1f263716eca26e91fb19e1508220bf3a8b8fe1da89c69fd9375f86510b26a81fd1d8389b77f7c36046501246af408ddd7ccb6c9dba7e890f63709c687d218ef40750817cd5ef9f6f465b547efa56345069bdbd16b59b6e325702ad1b15b9fee5ca5555c7d6257f4078622f71c1f98c6ef9749c18a272127511469ba8668edde9ad066c4ea386c2f85c0ee82d0bdd1fe2a476690952cda54d6d7b1096979b6b4991fb416c33570b8814c4"}, {0x80, 0x0, 0x9, "9f11f1e904372ee08822446947c4affe1e9187d5358e7be3ec98b8d93a50cf6a6c20a160174ace86253b7198982904e9e24d9e48600938e3bcc56fb36912a8e6b55bb024f614034320e310bbab6f2751779823e92aecec0ef699fdd09264963f0f7e05e2da12f1d6fc"}, {0x90, 0x10e, 0x9, "256ef31f75793145a6962e8a4ce0ca206da28bad1c1864f10e86280dc5922f0f51098dd87cbfaf99a4b60a93e76d944d3c59b7dc93d0207e8156b53b6b96333598c22863b4d5c8be23ff936169f21848b763db6ede7b4224f2e363305834eea4793f079548efc8b6353c28142f3d40cbac16d1f8722e0d9d30"}, {0x50, 0x110, 0xda, "d11154ac4966c2d49739d0fb9e6828ba39b8e5d80f579719dd34123151a663819e83e4ade1f30d104f08c587a878baf1f599ffc4b5d082e2d7d040"}, {0x28, 0x102, 0xd, "fa35d515fceb2543394c30d7cfc55d1ef9"}, {0xc78, 0x119, 0x4, "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"}], 0x2008}, 0x40)

2.267889ms ago: executing program 2 (id=265):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x48, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x152}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004)

0s ago: executing program 0 (id=266):
r0 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@local, 0x0, 0x3, 0x4e20, 0x0, 0x2}, {0x0, 0x15000000000000, 0x0, 0x2, 0x8001, 0xffffffffffffffff, 0x0, 0xd3d}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43375' (ED25519) to the list of known hosts.
syzkaller login: [   57.359235][ T5807] cgroup: Unknown subsys name 'net'
[   57.471692][ T5807] cgroup: Unknown subsys name 'cpuset'
[   57.477955][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.315047][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.104965][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.118306][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.121876][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.125181][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.128711][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.149179][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.152241][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.155211][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.158939][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.162778][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.181954][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.187111][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.189938][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.193796][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.197701][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.515444][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   66.620373][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   66.697465][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.701929][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.705275][ T5844] bridge_slave_0: entered allmulticast mode
[   66.711329][ T5844] bridge_slave_0: entered promiscuous mode
[   66.721922][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   66.733821][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.736345][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.740420][ T5844] bridge_slave_1: entered allmulticast mode
[   66.744361][ T5844] bridge_slave_1: entered promiscuous mode
[   66.835005][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.865852][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.871796][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.874472][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.877454][ T5851] bridge_slave_0: entered allmulticast mode
[   66.881867][ T5851] bridge_slave_0: entered promiscuous mode
[   66.914161][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.916532][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.919579][ T5851] bridge_slave_1: entered allmulticast mode
[   66.923779][ T5851] bridge_slave_1: entered promiscuous mode
[   66.927232][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.930414][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.933402][ T5848] bridge_slave_0: entered allmulticast mode
[   66.938420][ T5848] bridge_slave_0: entered promiscuous mode
[   66.943456][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.946384][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.951337][ T5848] bridge_slave_1: entered allmulticast mode
[   66.954950][ T5848] bridge_slave_1: entered promiscuous mode
[   67.014009][ T5844] team0: Port device team_slave_0 added
[   67.038651][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.044778][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.051586][ T5844] team0: Port device team_slave_1 added
[   67.056730][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.063538][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.154759][ T5851] team0: Port device team_slave_0 added
[   67.158769][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.161620][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.171972][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.180077][ T5848] team0: Port device team_slave_0 added
[   67.184018][ T5851] team0: Port device team_slave_1 added
[   67.189952][ T5848] team0: Port device team_slave_1 added
[   67.193208][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.195897][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.206733][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.269565][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.272392][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.282616][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.291187][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.294050][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.305209][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.311249][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.314045][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.324596][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.343703][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.346571][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.357718][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.399077][ T5844] hsr_slave_0: entered promiscuous mode
[   67.402049][ T5844] hsr_slave_1: entered promiscuous mode
[   67.432010][ T5848] hsr_slave_0: entered promiscuous mode
[   67.434417][ T5848] hsr_slave_1: entered promiscuous mode
[   67.437565][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   67.439578][ T5848] Cannot create hsr debugfs directory
[   67.509929][ T5851] hsr_slave_0: entered promiscuous mode
[   67.513219][ T5851] hsr_slave_1: entered promiscuous mode
[   67.516142][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   67.519958][ T5851] Cannot create hsr debugfs directory
[   67.810722][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.820076][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.825702][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.838949][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.881937][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.900286][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.908689][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.922121][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.963484][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.971056][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.976759][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.983626][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.135537][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.145052][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.163602][   T55] Bluetooth: hci0: command tx timeout
[   68.183259][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   68.201889][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.209991][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   68.227878][   T55] Bluetooth: hci2: command tx timeout
[   68.229989][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.230340][   T55] Bluetooth: hci1: command tx timeout
[   68.233382][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.242615][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.245592][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.251500][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.254426][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.280552][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.283498][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.289808][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   68.323888][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.326193][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.348868][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.351793][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.649029][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.665698][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.723684][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.750025][ T5848] veth0_vlan: entered promiscuous mode
[   68.782257][ T5848] veth1_vlan: entered promiscuous mode
[   68.794497][ T5844] veth0_vlan: entered promiscuous mode
[   68.822056][ T5844] veth1_vlan: entered promiscuous mode
[   68.833078][ T5851] veth0_vlan: entered promiscuous mode
[   68.854110][ T5851] veth1_vlan: entered promiscuous mode
[   68.858580][ T5848] veth0_macvtap: entered promiscuous mode
[   68.876152][ T5848] veth1_macvtap: entered promiscuous mode
[   68.914994][ T5844] veth0_macvtap: entered promiscuous mode
[   68.922746][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.934681][ T5844] veth1_macvtap: entered promiscuous mode
[   68.944134][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.958143][ T5851] veth0_macvtap: entered promiscuous mode
[   68.971652][ T5851] veth1_macvtap: entered promiscuous mode
[   68.975845][ T5873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.980155][ T5873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.989889][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.995962][ T5873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.999700][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.026385][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.056334][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.062371][ T5857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.065330][ T5857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.082749][ T5857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.089894][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.092517][ T5857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.119357][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.123408][ T5857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.140288][ T5857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.143735][ T5857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.229475][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.233358][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.264518][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.271983][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.307917][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.310977][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.322033][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.325081][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.361884][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.366063][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.398877][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.401321][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.401395][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.599587][ T5915] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1'.
[   69.648666][ T5922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5'.
[   69.864667][ T5934] Bluetooth: MGMT ver 1.23
[   70.227515][ T5235] Bluetooth: hci0: command tx timeout
[   70.308908][ T5235] Bluetooth: hci1: command tx timeout
[   70.309710][   T55] Bluetooth: hci2: command tx timeout
[   70.393835][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   70.527693][ T5960] pim6reg: entered allmulticast mode
[   70.532192][ T5960] pim6reg: left allmulticast mode
[   70.684216][ T5971] raw_sendmsg: syz.0.28 forgot to set AF_INET. Fix it!
[   70.819562][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'.
[   70.833665][ T5983] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   70.877391][   T33] audit: type=1800 audit(1754849520.386:2): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.34" name="memory.events" dev="tmpfs" ino=99 res=0 errno=0
[   71.008483][ T5994] netlink: 'syz.0.38': attribute type 1 has an invalid length.
[   71.011430][ T5994] netlink: 144 bytes leftover after parsing attributes in process `syz.0.38'.
[   71.014876][ T5994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.38'.
[   71.096225][ T5998] syz.0.40 uses obsolete (PF_INET,SOCK_PACKET)
[   71.193962][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.196638][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   72.316561][   T55] Bluetooth: hci0: command tx timeout
[   72.387434][   T55] Bluetooth: hci2: command tx timeout
[   72.389733][   T55] Bluetooth: hci1: command tx timeout
[   72.431777][ T6046] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland
[   72.835761][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'.
[   73.290446][ T6100] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   73.435013][ T6114] netlink: 'syz.1.78': attribute type 13 has an invalid length.
[   73.441397][ T6114] netlink: 'syz.1.78': attribute type 17 has an invalid length.
[   73.489152][ T6119] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.79'.
[   73.603671][ T6114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.640676][ T6127] team_slave_0: entered promiscuous mode
[   73.643158][ T6127] team_slave_1: entered promiscuous mode
[   73.652288][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.657599][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'.
[   73.661692][ T6127] team_slave_0: left promiscuous mode
[   73.664204][ T6127] team_slave_1: left promiscuous mode
[   73.715518][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.786506][ T6127] team0 (unregistering): Port device team_slave_0 removed
[   73.796715][ T6127] team0 (unregistering): Port device team_slave_1 removed
[   73.867880][ T6131] syzkaller0: entered promiscuous mode
[   73.875056][ T6131] syzkaller0: entered allmulticast mode
[   74.394029][ T5235] Bluetooth: hci0: command tx timeout
[   74.469955][ T5235] Bluetooth: hci1: command tx timeout
[   74.471114][   T55] Bluetooth: hci2: command tx timeout
[   75.236231][ T5907] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[   76.101259][ T6190] warning: `syz.2.105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.403896][   T10] IPVS: starting estimator thread 0...
[   76.497155][ T6210] IPVS: using max 62 ests per chain, 148800 per kthread
[   76.549224][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'.
[   77.830799][   T10] IPVS: starting estimator thread 0...
[   77.929073][ T6264] IPVS: using max 47 ests per chain, 112800 per kthread
[   78.084564][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'.
[   78.377630][ T6317] netlink: 'syz.1.158': attribute type 1 has an invalid length.
[   78.612422][ T6342] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   78.615779][ T6342] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   78.731844][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'.
[   78.735473][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'.
[   78.739319][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'.
[   78.748241][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'.
[   78.766256][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'.
[   79.312937][ T6398] IPv6: addrconf: prefix option has invalid lifetime
[   79.695511][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[   79.701791][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.210'.
[   79.708587][ T6438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.210'.
[   80.051499][ T6479] bridge: RTM_NEWNEIGH with invalid ether address
[   80.562689][ T6514] syzkaller1: entered promiscuous mode
[   80.564559][ T6514] syzkaller1: entered allmulticast mode
[   80.791666][ T6527] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   80.807065][   T10] IPVS: starting estimator thread 0...
[   80.897029][ T6530] IPVS: using max 58 ests per chain, 139200 per kthread
[   81.064536][ T6559] netlink: 'syz.2.262': attribute type 1 has an invalid length.
[   81.145982][ T6565] ------------[ cut here ]------------
[   81.148595][ T6565] WARNING: CPU: 1 PID: 6565 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0
[   81.152376][ T6565] Modules linked in:
[   81.154292][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.2.265 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   81.161452][ T6565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.165182][ T6565] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[   81.168083][ T6565] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 a5 8c 00 cc e8 22 c5 d0 f6 90 0f 0b 90 eb e1 e8 17 c5 d0 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[   81.175208][ T6565] RSP: 0018:ffffc9000633ef70 EFLAGS: 00010283
[   81.177613][ T6565] RAX: ffffffff8aeee699 RBX: ffff888123240000 RCX: 0000000000080000
[   81.180448][ T6565] RDX: ffffc90008aa9000 RSI: 0000000000000363 RDI: 0000000000000364
[   81.183594][ T6565] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8aeee1b3
[   81.186243][ T6565] R10: dffffc0000000000 R11: ffffed1024648031 R12: 1ffff1102464800a
[   81.189109][ T6565] R13: ffff888031bc8e40 R14: 0000000000000001 R15: ffffffff8aeee1b3
[   81.192204][ T6565] FS:  00007faee79ee6c0(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[   81.195553][ T6565] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   81.198482][ T6565] CR2: 0000200000001040 CR3: 000000010f4b2000 CR4: 00000000000006f0
[   81.201482][ T6565] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   81.202738][ T6565]  <TASK>
[   81.204004][ T6565]  rate_control_rate_init_all_links+0x109/0x1a0
[   81.208092][ T6565]  sta_apply_auth_flags+0x1c2/0x400
[   81.210349][ T6565]  sta_apply_parameters+0xe4b/0x15b0
[   81.212285][ T6565]  ieee80211_add_station+0x424/0x6a0
[   81.214186][ T6565]  rdev_add_station+0x108/0x290
[   81.215686][ T6565]  nl80211_new_station+0x1755/0x1b70
[   81.217634][ T6565]  ? __pfx_nl80211_new_station+0x10/0x10
[   81.219488][ T6565]  ? netdev_run_todo+0xe1d/0xea0
[   81.221453][ T6565]  ? nl80211_pre_doit+0x4f1/0x930
[   81.223445][ T6565]  genl_family_rcv_msg_doit+0x215/0x300
[   81.225593][ T6565]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   81.228145][ T6565]  ? bpf_lsm_capable+0x9/0x20
[   81.229982][ T6565]  ? security_capable+0x7e/0x2e0
[   81.231952][ T6565]  genl_rcv_msg+0x60e/0x790
[   81.233712][ T6565]  ? __pfx_genl_rcv_msg+0x10/0x10
[   81.235617][ T6565]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   81.237916][ T6565]  ? __pfx_nl80211_new_station+0x10/0x10
[   81.240073][ T6565]  ? __pfx_nl80211_post_doit+0x10/0x10
[   81.242227][ T6565]  ? __asan_memcpy+0x40/0x70
[   81.244019][ T6565]  ? __pfx_ref_tracker_free+0x10/0x10
[   81.246149][ T6565]  netlink_rcv_skb+0x208/0x470
[   81.248240][ T6565]  ? __lock_acquire+0xab9/0xd20
[   81.249915][ T6565]  ? __pfx_genl_rcv_msg+0x10/0x10
[   81.251798][ T6565]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   81.253751][ T6565]  ? down_read+0x1ad/0x2e0
[   81.255154][ T6565]  genl_rcv+0x28/0x40
[   81.256647][ T6565]  netlink_unicast+0x82f/0x9e0
[   81.258674][ T6565]  ? __pfx_netlink_unicast+0x10/0x10
[   81.260752][ T6565]  ? netlink_sendmsg+0x642/0xb30
[   81.262746][ T6565]  ? skb_put+0x11b/0x210
[   81.264436][ T6565]  netlink_sendmsg+0x805/0xb30
[   81.266435][ T6565]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.268874][ T6565]  ? aa_sock_msg_perm+0xf1/0x1d0
[   81.270879][ T6565]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   81.272964][ T6565]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.274591][ T6565]  __sock_sendmsg+0x21c/0x270
[   81.275999][ T6565]  ____sys_sendmsg+0x505/0x830
[   81.277661][ T6565]  ? __pfx_____sys_sendmsg+0x10/0x10
[   81.279545][ T6565]  ? import_iovec+0x74/0xa0
[   81.281210][ T6565]  ___sys_sendmsg+0x21f/0x2a0
[   81.283038][ T6565]  ? __pfx____sys_sendmsg+0x10/0x10
[   81.284655][ T6565]  ? __fget_files+0x2a/0x420
[   81.286047][ T6565]  ? __fget_files+0x3a0/0x420
[   81.287626][ T6565]  __x64_sys_sendmsg+0x19b/0x260
[   81.289134][ T6565]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   81.290798][ T6565]  ? rcu_is_watching+0x15/0xb0
[   81.292755][ T6565]  ? do_syscall_64+0xbe/0x3b0
[   81.294668][ T6565]  do_syscall_64+0xfa/0x3b0
[   81.296477][ T6565]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.298579][ T6565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.300635][ T6565]  ? exc_page_fault+0x9f/0xf0
[   81.302242][ T6565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.304023][ T6565] RIP: 0033:0x7faee978ebe9
[   81.305375][ T6565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.312951][ T6565] RSP: 002b:00007faee79ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   81.315846][ T6565] RAX: ffffffffffffffda RBX: 00007faee99b5fa0 RCX: 00007faee978ebe9
[   81.319040][ T6565] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003
[   81.322887][ T6565] RBP: 00007faee9811e19 R08: 0000000000000000 R09: 0000000000000000
[   81.325775][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.328506][ T6565] R13: 00007faee99b6038 R14: 00007faee99b5fa0 R15: 00007ffed0e2c958
[   81.331783][ T6565]  </TASK>
[   81.332946][ T6565] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   81.335384][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.2.265 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   81.339457][ T6565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.343007][ T6565] Call Trace:
[   81.344269][ T6565]  <TASK>
[   81.345422][ T6565]  dump_stack_lvl+0x99/0x250
[   81.347271][ T6565]  ? __asan_memcpy+0x40/0x70
[   81.349166][ T6565]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.351118][ T6565]  ? __pfx__printk+0x10/0x10
[   81.352916][ T6565]  vpanic+0x281/0x750
[   81.354438][ T6565]  ? __pfx__printk+0x10/0x10
[   81.355852][ T6565]  ? __pfx_vpanic+0x10/0x10
[   81.357441][ T6565]  ? is_bpf_text_address+0x292/0x2b0
[   81.359550][ T6565]  panic+0xb9/0xc0
[   81.360904][ T6565]  ? __pfx_panic+0x10/0x10
[   81.362334][ T6565]  __warn+0x31b/0x4b0
[   81.363868][ T6565]  ? rate_control_rate_init+0x64a/0x6e0
[   81.365844][ T6565]  ? rate_control_rate_init+0x64a/0x6e0
[   81.367561][ T6565]  report_bug+0x2be/0x4f0
[   81.368958][ T6565]  ? rate_control_rate_init+0x64a/0x6e0
[   81.370778][ T6565]  ? rate_control_rate_init+0x64a/0x6e0
[   81.372700][ T6565]  ? rate_control_rate_init+0x64c/0x6e0
[   81.374608][ T6565]  handle_bug+0x84/0x160
[   81.376201][ T6565]  exc_invalid_op+0x1a/0x50
[   81.377817][ T6565]  asm_exc_invalid_op+0x1a/0x20
[   81.379506][ T6565] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[   81.381722][ T6565] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 a5 8c 00 cc e8 22 c5 d0 f6 90 0f 0b 90 eb e1 e8 17 c5 d0 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[   81.388371][ T6565] RSP: 0018:ffffc9000633ef70 EFLAGS: 00010283
[   81.390207][ T6565] RAX: ffffffff8aeee699 RBX: ffff888123240000 RCX: 0000000000080000
[   81.392681][ T6565] RDX: ffffc90008aa9000 RSI: 0000000000000363 RDI: 0000000000000364
[   81.395021][ T6565] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8aeee1b3
[   81.397685][ T6565] R10: dffffc0000000000 R11: ffffed1024648031 R12: 1ffff1102464800a
[   81.400713][ T6565] R13: ffff888031bc8e40 R14: 0000000000000001 R15: ffffffff8aeee1b3
[   81.403695][ T6565]  ? rate_control_rate_init+0x163/0x6e0
[   81.405819][ T6565]  ? rate_control_rate_init+0x163/0x6e0
[   81.407977][ T6565]  ? rate_control_rate_init+0x649/0x6e0
[   81.410151][ T6565]  rate_control_rate_init_all_links+0x109/0x1a0
[   81.412533][ T6565]  sta_apply_auth_flags+0x1c2/0x400
[   81.414533][ T6565]  sta_apply_parameters+0xe4b/0x15b0
[   81.416579][ T6565]  ieee80211_add_station+0x424/0x6a0
[   81.418617][ T6565]  rdev_add_station+0x108/0x290
[   81.420603][ T6565]  nl80211_new_station+0x1755/0x1b70
[   81.422677][ T6565]  ? __pfx_nl80211_new_station+0x10/0x10
[   81.424835][ T6565]  ? netdev_run_todo+0xe1d/0xea0
[   81.426739][ T6565]  ? nl80211_pre_doit+0x4f1/0x930
[   81.428694][ T6565]  genl_family_rcv_msg_doit+0x215/0x300
[   81.430840][ T6565]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   81.433214][ T6565]  ? bpf_lsm_capable+0x9/0x20
[   81.434924][ T6565]  ? security_capable+0x7e/0x2e0
[   81.436436][ T6565]  genl_rcv_msg+0x60e/0x790
[   81.437849][ T6565]  ? __pfx_genl_rcv_msg+0x10/0x10
[   81.439681][ T6565]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   81.441758][ T6565]  ? __pfx_nl80211_new_station+0x10/0x10
[   81.443930][ T6565]  ? __pfx_nl80211_post_doit+0x10/0x10
[   81.446064][ T6565]  ? __asan_memcpy+0x40/0x70
[   81.447866][ T6565]  ? __pfx_ref_tracker_free+0x10/0x10
[   81.449919][ T6565]  netlink_rcv_skb+0x208/0x470
[   81.451864][ T6565]  ? __lock_acquire+0xab9/0xd20
[   81.453787][ T6565]  ? __pfx_genl_rcv_msg+0x10/0x10
[   81.455759][ T6565]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   81.457821][ T6565]  ? down_read+0x1ad/0x2e0
[   81.459583][ T6565]  genl_rcv+0x28/0x40
[   81.461180][ T6565]  netlink_unicast+0x82f/0x9e0
[   81.463044][ T6565]  ? __pfx_netlink_unicast+0x10/0x10
[   81.465119][ T6565]  ? netlink_sendmsg+0x642/0xb30
[   81.467008][ T6565]  ? skb_put+0x11b/0x210
[   81.468675][ T6565]  netlink_sendmsg+0x805/0xb30
[   81.470531][ T6565]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.472615][ T6565]  ? aa_sock_msg_perm+0xf1/0x1d0
[   81.474599][ T6565]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   81.476633][ T6565]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.478678][ T6565]  __sock_sendmsg+0x21c/0x270
[   81.480235][ T6565]  ____sys_sendmsg+0x505/0x830
[   81.481696][ T6565]  ? __pfx_____sys_sendmsg+0x10/0x10
[   81.483404][ T6565]  ? import_iovec+0x74/0xa0
[   81.484757][ T6565]  ___sys_sendmsg+0x21f/0x2a0
[   81.486223][ T6565]  ? __pfx____sys_sendmsg+0x10/0x10
[   81.487812][ T6565]  ? __fget_files+0x2a/0x420
[   81.489232][ T6565]  ? __fget_files+0x3a0/0x420
[   81.490757][ T6565]  __x64_sys_sendmsg+0x19b/0x260
[   81.492316][ T6565]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   81.493990][ T6565]  ? rcu_is_watching+0x15/0xb0
[   81.495444][ T6565]  ? do_syscall_64+0xbe/0x3b0
[   81.496880][ T6565]  do_syscall_64+0xfa/0x3b0
[   81.498313][ T6565]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.499917][ T6565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.501818][ T6565]  ? exc_page_fault+0x9f/0xf0
[   81.503373][ T6565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.505395][ T6565] RIP: 0033:0x7faee978ebe9
[   81.506797][ T6565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.512948][ T6565] RSP: 002b:00007faee79ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   81.515683][ T6565] RAX: ffffffffffffffda RBX: 00007faee99b5fa0 RCX: 00007faee978ebe9
[   81.518122][ T6565] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003
[   81.520564][ T6565] RBP: 00007faee9811e19 R08: 0000000000000000 R09: 0000000000000000
[   81.522974][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.525415][ T6565] R13: 00007faee99b6038 R14: 00007faee99b5fa0 R15: 00007ffed0e2c958
[   81.527784][ T6565]  </TASK>
[   81.529322][ T6565] Kernel Offset: disabled
[   81.530673][ T6565] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:12:10  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822e450c RBX=0000000000000001 RCX=ffff88802496d640 RDX=0000000000000000
RSI=ffffffff822e4207 RDI=ffffffff8e139ee0 RBP=ffff88801b076de0 RSP=ffffc900030bf588
R8 =ffff88801b076ddf R9 =1ffff1100360edbb R10=dffffc0000000000 R11=ffffed100360edbc
R12=0000000000000000 R13=0000000000000001 R14=ffffffff822e4207 R15=ffff88801b076dd8
RIP=ffffffff819d6bf0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555942da500 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c340e03 CR3=000000010f7a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2bd2012e53
XMM06=0000000000000000 00007f2bd2012e4d XMM07=0000000000000000 00007f2bd2012e61
XMM08=0000000000000000 00007f2bd2012ee7 XMM09=0000000000000000 00007f2bd2012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006d RBX=000000000000006d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000010640 RDI=0000000000010641 RBP=00000000000003f8 RSP=ffffc9000633e710
R8 =ffff888020ae0237 R9 =1ffff1100415c046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af28f2 R14=ffffffff99de74e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faee79ee6c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001040 CR3=000000010f4b2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007faeea4ed100 00007faee9987460 XMM05=00007faee9987478 00007faee99874c0
XMM06=00007faee99874b8 00007faee99874b0 XMM07=00007faee99874a8 00007faee99874a0
XMM08=0000000000000000 00007faee9812ee7 XMM09=0000000000000000 00007faee9812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
