last executing test programs:

1.813315556s ago: executing program 2 (id=317):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x9, &(0x7f0000000180)="c1ed35db8763061b2a1189ac08f73f782d400f425f7ddfc97139336d2c599c45c64800e16c361889c5eed027314233a5eabae133bbb2c5ca45e246a06073cbe72cba3c011e439a84a656af994faa682154d54a6dd7d9503c6093bc086dd0e552304b3f0b8d82420b49ddc363a4288cd0706c15074f322123fe946ac0722bf3e46766")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r2, 0x8b32, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYBLOB="782a0d0da8b22a2128a0504cfdc45bd1860120819eceb5c9953f7c8174d9cd940fc3787aaf40e22ed73bbae19be4c3197623e7615894f9b5810a6ec76576865ecf88c9bcc042759f157136bb76ff055c76a03025879b3ae8b3422826f8d07499337f03a73140bd26c121283b2b8c37b5c9197ff7b5be0c307f8c14489f9f83a15ea4010d984dafede5efb83de7e733c985633f360b637bae6777b9a35ca3807239ad6490616b59efeaf307110717934e32b37b5f5508d5eb1778d20afda0293ce93879271f975173814e82586376fe97e23e45d7f6bd1bc4893259f364751d58140c04433c185b1beb8de8b3813f004e7667e5250834d463e46b0d635822f11d777a45153dccd361d3310c4de6d0808eed5dc79ade0e22c18f316fc425fdf50121b3a65be2f58317bce7038a03bafc41d75b4c9e775dcaddeaf90d01ece329f3408316510b0ba6da25f95a0e4c9c858b9c3985ab8c469f5cf41243d83ce1fe698cde36b38c95ca4b6c5d6f74dcb6e6eb32453e93b4a980daf2f6edb5252e36a139e6ece3de0d0e314c82b4f0048c24d06f5c8a96477277289624fa3bc2d4acd6d5294cb3384403ee302964ee7fe306878d63bfee3d6a6298681734165467947217a3ecaecc81627130ddc0d3eb69d741c6ae264a4f51da84196c09638b1e29c36228218c775631e7abb6ec95f582b8b7ddba63b4dd8bc3c33d406333205919518ad7fba12d7604b9b615b74c6ee5a53328c0580979e2f45f31439d22553603a2b1ebf2315a513916a6f7983f8cf1677c7419000d45fa7234803d8e86c341b6c1a8d4e5e4609bf2e19165559f8980642ca79648b71882c91527d948efdae031fdb5aa462e5db768c7fc445f419d97b3846aac60d481415f608be9dee44da94af6afaac0edd396d85716add7889ae948acc521474477d8c38f3bba491a668beaf35938184bd9bc128c99cce0703ac7312377064ed44f732cb731584f5dbff47d3906910bf02efa9023ba905260a38c1c5d8c979aa16dd9b2e2fd442660726f0a36e5c7bcbf97fe3fbf74d2a9f04bbee8af26a15f2ceff305995f6459493876f4f164414ac41f367badb744526a4ab4a74b04063751aa02611b31891fb4ed98228e6ba2e878a0ca5675aeb39c019854cde5e0f6c2e9ef7615c349ffebfcb4aa4a7b88795d3c26a0165ec269f110c5c4902d298df9ee1935ffd74d9fc8aec17b9edba7edab8683ebe39c4634272fc05b6e1e5a7d45253c8079f8f96b09853f9299d438110742ca05591b488e73e29f4aeb2252fb48374b9d73c25124aec36cc4dc8830db72534f1eb2e88995c996b6eb16872cdee4a5917819069fdda51c513831bd02adbada691abe9814a1cd2c13a6dfaf7f4424bf99aed5821aa745778ed92d5644787b79af7c0bff64b2352bec97407a92705e03310e26d5e46e0d6bc5f895bdd873559770f3e136c2c353d92c3ffd8254232f882f82cfe3c4ec5ba6d2de26bfeef0b503d30c7392f9f15c0b1dc5d9e93d92ec37ca7a4f70e1b7172820c2182f0e01823a40205ec0793595e07f6c612736ec2d3ac8e964539f259c1269de161a04242f27651eeeb6ed04ec369467aec79cfff62468784a15e0e4567d65c3fe20094dafa076769720ef92ab9676a60e0eee381f4d3d3d3ada59d6143724550b93f637e0a9d33e7f0527a6c33844d0f0841f78938bd61934dac1d285a377e7e9cc32730c425dfa40164bfe1e42b405bc9b6a62823b1cc97b4981f3851ad55e9c8f594032f7557106eb2ff22fdf61d686f2778cbdf351720c46b9aecc9bb6d78a99b2abbb37c0449ac0a1c4de4733f61b0cc42747a40a9dab138f122112cdaa79041460145e83bfa68974174cfe33ee3cb356899223dd86ee71d71f52cf7b28fbbfb1f9518436093ac3428ba763e608713fd06d2e722d46b9bd25d37ece56745dc66981b14d7043961c98f190e6c6112a1a213b76d929c739203f0db9daceb7f51969857897efbeeef9c97ce5efd132a9de16cc369e168b3ae01fda8e5f40c02297874b7545ed539cfd434ae6dafcb4823521ef26f9ded215cca5f05485b3e2ac9771cbfe1776b9b67a0ee90245ffe505434a779849c2d6f23a8154835dd44dd9f4ac72a54d4175e4c3d8f5d52465c180ee8aa2777d95c934570fdeb69ca33d5eb6ceeae00d12045a96dc82448287cd5eb77897504db0d94a3a9e47e0307f64b41dba7e01b1bfc836bfb45c3e34b9ad5af949381fad0d5841c131b98fdad86144802bd202419fe88553230c4a3e66bba28e300ffc83935ddf1e314ff76d5b7bc64ab226049f660f7c7c8178acab0e53f7b2ea9809e0d03f275a08f39862c5ecd0180bd63f49e69d5933129c18d79fa8a032ac56bd42113e2ecfb0e0a505b1e962b7e0990677be754cb316b5bb0ecca2e85883b5853d2e52a63b22df5c50b912cf875a51168b17cc8903d19226e8ec61a9499768f0668fc1ce965f65666709fd050f91f9170fc05af6e1cc2ceafa04e25bc82dcbbfe28a7b4f3e99ec2df97a715577266b4b4bbb14cf5cfed316fa6c94c27e2e6175b62746df1c686126bc69709a902a85d9ad47f1ef9538bc8995353c001e7f3cba1d7a3a12b7b239771493553cb3397b30751f134471b36199f0b15f54bc0ce9c554b3ab2f3f01efa80115f155553aeb47bdc72e1d81e210962b6476888a71facb0f3c11220c8ea28b7a5688580b12fef78c9f77c99b7254f2cb51019f27a19df91ccfd40e3052646b93ff9b68512cfddaf34c4c01715b58448b0d232933250f0c34bd7833718795841182296951d93403f581c46e3e2db3c62261e32df0c2d02b405251edc8108b6df59fe17b13ce0fffdf257dbb98134454379ab2dc1cdbc8972e9afa3a16bc5b8c2bbb277ae313a211ac35277892887fc729aefca677674c65291ed1e1754c5258cadd192c33492d78ec6fddc1ee056aa726a16fb4e408c3cf9b843a2c71eabb1a5de20f31ad912589fb935ffdeaad875eddd51444c756b1f8c53e546b544f69fd3d2e101522a6ecf7d7590e410bc2467230ce74a8cdec8a39f8961268bcc8c340168f1894420972ab8ad873d0d669ccd74427b081a14432ac04e5e138fa55012fcb2d9682cbf9a4df98055427323d9da3d24fa22a986029806e502b6a33c052c59f07d36ddb5929ae72433af4b4ea3340926579dc54eae215d335a81f7632c5168c0f31fb38c6021911deab85ff6428620d9e3f14276a8b52111d544d6b79b8490621fc6abdb6e23f56a3e6ae50cc776a58cea37ffd9898e03ffedc629b72e5d0803b7d8400c87ed77df6a7d4b207733b442c8763c39b399408ae3e7320536bd2b024a77e46dd20d28ff57b1cf89ed4b51f403ed75e7950071477e29d97d6da81d94e2b8b6b33a1fcb4d90eb0692766646ad1f08e44841ca31e1e392baa6de902dca16805d252c53881ea86a7a078515876539037147ec39026c5ea2b8310e1e16a9a6364bb1c74a7cc182953eb5ceef1e02a81528fb5bef9934434932921e59eb8c3a4f86484a8e6489c6eac4d43577d29168f5edfd52539eb846646835776ad961abd85ef53e16fb44aff4491ca2591678eae599dd6c01fe8e6ecdcd863d0bc62a807914025447f9e5d1fc6a8c3bd44572a4a308fccc316fccfd65835e55089ec8237f459329c8e61046d1b8f4f39083163696d46d0f3bf2acfe46fe43d7469db26a79b31d39b18ba8669d68765a8a36c6301c45a0e744e6d8a3091d8542a007046ba21eb018afd3d3bf07526179e0430d6f4a2f3b798cb1a85ba83fcbc7f304284fd24d772fd0912fbe0273115140fa44b554d0d952161bdbb16f8915c93ae3a86843ec83908bf2386c3d4d80b6fbeb77edf2bba6d153ae620837ea355592c1ff040a4f97cac9652a18640556f94156d2d6b71e5efbda17c5a042a7410846e0d42aad2685181af115e553daf502ebbd5479c5fc922ffe5549682fa9992f9f0befd107a5241b559243d0e1e197507a20b05d39ff269a6b3cfc9c75287fb895c4c2b982689b97a365a37c38b426926e3ef665f8bdf3b476fc40923e34d5565c517625fa13449ea049dd554e3d40d9f81071b3bcf05bd25ac360fd3d54f40aeafc569cdbe7b3c4dcbf25439815e50be83ce14c6b8ba83e1c9fc199e8be80ce71e40ad5af56a718f15c2c15a6d8b6ff7c45ccae7c1c0100605b8516f007b9de7c4344cca9c2a2d68b15738d70f966612b3ef795de3b718401c3606235aabb38d480ce20a4a5e5c69ca13f4d1eda50abac4fd107e8428161fcbb58bcd30ad3e7270b6d6323ec4aa283e8b0302a4a3c568fac19e79be502be2a775fc8ad84d9131995539ab587b3ec9ccfd7ee96e568784da1b4050a02f113b499d59d03740ff14c066b0fd38239a50ee4f3e761496de78b272dc8a77fcaef366bac17d47e3b917bdfdadec4edec0abfcbac34eb5ae72e7cc53c6bbfd78f468d2ea89b22c47a4ca022a0eac7bf54a3cc40955d57c980d8406d910995d8a3e524a9ac9ac6e66aed9ab0505091fea561242cd69342eda21141882a91ba1c65e30bae5a6313eab00d8d3eb046519945b29c08c2228f76524415327351024aa9f7cd53c87cab064c16683f9a99b48e441167e58277c4a7149b8bd1e0185fd02f727844fce78cda9253afc48fb3455f6252032c695b3fe45c14e16bc0c233fd4e60ce6faa2fb93013774a38046dc42f859eb062d38d062e3bc4fe918356465c59178b0ec81fd8dc3b0b3a4ca5be4491cdca88dea239926a7d41482edd222e228e13ccc485369ea251a4d85f41daef2c97d5e04c50ffe2d971274ec049a0cb571dea600923dbee747a763a5c964400e3f2d4d8c0ff8a8cba24e47d607feae9ee59bfd0b8ed1a75c772169d131723623160574ad815e55efd88d91c8116491e85b32c6d74cf14c828340e72b7be24b4feab063cd903989054c4a82e0ee26d46bd6ba075fcf60f7783714d306bdf4f48c60f76a6e297508280022443497bf6255ccc50b1297f6b364575968f86a78f7f06f920dea46a93c043da1ea97c72fbdf466fd2bd88436952e9c2d85826286a84e6d3d97631fd1b292fa13ea631cde29935a3975220d51937b1671055bcc237fc3c12e5b8ca5be6ea2977e74b1b449df0d603ba75d19b85446651945cb581f11e68d511fc8d04af80cb08d140e246edcff1eab25d4004fe84cbec9abca25b0f288f43baaa47f7cab146ecc817fe61904701f7a76ebe5e030e9cbb70ead860437d13935894c4a04e63d3aefd4dcadbbe932d2096c2f6effa538a8ef4b8f75fdb370a8062e809b9aa6faf56a0c3bf136dfc34452824e574266d1aa164dadef9aa2c9b5127e10b4a5dc9085bc1aad1756527ecab3410438d5e46fd7d9ce4a3aa0de4dacdf08d97bcc248d866b71eba18619bd4e9f4cf29077e8e7041674d59c2d48514f8fbeb7faac2efb52dd81acb873ab52ede912d4ebe98116536096e40db7270dd471b7ce49899c05c5ce2e235d512181bae9b3ab5b1d8b18c8d27abcade89ed632806e6ef2ccb79a07b42f02d87c5fe5cc9937196acbdef9442431955400b0d45809b1520dd1b2cc090eb2c4ff8915b7196deb97257c0a6fc422704cdacb63214cc808610f7f07d7bee039fc80a8e65fb27502d2a0b3ee0b588875c9fa5badb2b0300e313f6c2d3c4a1cdb502982b3244e4e07c1bd5981eea25910d6a032451ef191df9246000e0820f1ec54ab9d398865b21e0de15c0153b2ef8d4c1f4d7968843f60c2638dc5bdfd68a2dfaecb883a7f72b655cac84ea7ce6e97eccdecd5036d", @ANYRESHEX=r2], 0x104}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl(r0, 0x9, &(0x7f0000000180)="c1ed35db8763061b2a1189ac08f73f782d400f425f7ddfc97139336d2c599c45c64800e16c361889c5eed027314233a5eabae133bbb2c5ca45e246a06073cbe72cba3c011e439a84a656af994faa682154d54a6dd7d9503c6093bc086dd0e552304b3f0b8d82420b49ddc363a4288cd0706c15074f322123fe946ac0722bf3e46766") (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl(r2, 0x8b32, &(0x7f0000000040)) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYBLOB="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", @ANYRESHEX=r2], 0x104}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async)

1.730324563s ago: executing program 2 (id=318):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r0, 0x0, 0x2, 0x0)
r1 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r1, 0x11, 0x20, 0x0, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@loopback, @in=@local, 0x4e24, 0x1, 0x2, 0x0, 0xa}, {0x2, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x4, 0x1}, {0x40000000020, 0x40000000, 0xfffffffffffffffd, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x3, 0x0, 0x4d, 0x800000}}, 0xe8)
sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0)
r4 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
mkdirat$cgroup(r4, &(0x7f0000000340)='syz0\x00', 0x1ff)

1.730019405s ago: executing program 2 (id=319):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000001120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c000180"], 0x6c}}, 0x20048084)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3c5e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @private=0xa010100, {[@rr={0x7, 0x3, 0x6a}, @generic={0x44, 0x2}]}}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x0, @loopback, @multicast1}}}}}}, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x12, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@call={0x85, 0x0, 0x0, 0x67}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xbef}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x81, &(0x7f0000000300)=""/129, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x3, 0x2, 0x4, 0x3}], 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='fsi_master_gpio_poll_response_busy\x00', r3, 0x0, 0xef}, 0x18)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1.59991294s ago: executing program 2 (id=320):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10)
bind$tipc(r2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x20, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x32}, 0x28)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

1.540305026s ago: executing program 2 (id=321):
socket(0xb, 0x2, 0x0)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
r3 = socket$inet6(0xa, 0x805, 0x0)
r4 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001180), r4)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000014c0)=@newqdisc={0x24, 0x24, 0xc07, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x9, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008810)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f00000002c0))
r6 = socket(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f0000000080), 0x0, 0x80, 0x0, 0x0)
accept$unix(r6, &(0x7f0000001340), &(0x7f00000013c0)=0x6e)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r7], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x48000)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r9 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r8, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0)
r10 = socket(0x1d, 0x2, 0x6)
ppoll(&(0x7f0000000380)=[{r10, 0x100}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r8, 0x5411, 0x0)
connect$qrtr(r9, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
socket(0x2, 0x80805, 0x0)

1.38942141s ago: executing program 0 (id=324):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0xaaa, 0x609, 0x3})
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0xc000)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010080000000fedbdf250f002d001800078008000200070000000c0003e3316b000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0)

1.330164761s ago: executing program 0 (id=325):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev, @in=@multicast2}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x10008, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @empty, @val={@val={0x88a8, 0x2}, {0x8100, 0x6, 0x1, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @remote, @local, @link_local, @mcast2}}}}, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

1.240453381s ago: executing program 0 (id=326):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) (async)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
accept4(r1, 0x0, &(0x7f0000000040), 0x80000)
sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_fadd={0x58, 0x118, 0x8, {{}, 0x0, 0x0, 0x5c, 0x8, 0x1, 0x0, 0x0, 0x20}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x101}], 0x70, 0x20000000}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x38}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

1.188202484s ago: executing program 0 (id=327):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002880), r3)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0x200040c0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.186342294s ago: executing program 0 (id=328):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x48) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8}, 0x94) (async)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x8, 0xb}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={<r1=>0x0, 0x9}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}}}, &(0x7f0000000340)=0x84) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32)
recvmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000007c0)=""/49, 0x31}, {&(0x7f0000000800)=""/245, 0xf5}], 0x2}, 0x9}], 0x1, 0x10000, 0x0) (rerun: 32)

999.816802ms ago: executing program 1 (id=329):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
syz_80211_inject_frame(0x0, 0x0, 0x32)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x50044)
unshare(0x20000400)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000400)=0x110494)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x21, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x5d9c}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844)

439.330243ms ago: executing program 2 (id=330):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x50800}, 0x0)
unshare(0x20000400)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000940)={0x1f, @none}, 0x8)
connect$bt_sco(r1, &(0x7f0000000000), 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x9, &(0x7f0000000100)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000980)=""/4096, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x8, 0xdd, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000340)=[0xffffffffffffffff, r3, r5], &(0x7f0000000440)=[{0x4, 0x5, 0x7, 0x2}, {0x4, 0x3, 0x4, 0x4}, {0x5, 0x4}, {0x1, 0x4, 0x5, 0x9}, {0x5, 0x4, 0xb, 0xb}, {0x1, 0x4, 0x4, 0x6}, {0x0, 0x2, 0x0, 0x2}, {0x5, 0x1, 0x10, 0x9}, {0x2, 0x5, 0xc}, {0x1, 0x1, 0x10}], 0x10, 0x6}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0904000000000000000002000003200004800c000180080001006c6f67000900636f756e746572000900010073797a30000000000900020073797a320000000014cb56bf8bb7ea32752270a70000010000992698284f3fe13239"], 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
close(r0)

299.661256ms ago: executing program 0 (id=331):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
ppoll(&(0x7f0000000000)=[{r0, 0x8020}], 0x1, &(0x7f0000000080)={r2, r3+60000000}, &(0x7f00000000c0)={[0xe]}, 0x8) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r4=>0x0}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0)

170.233421ms ago: executing program 1 (id=332):
unshare(0x22020600) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r0 = socket$inet6(0xa, 0x3, 0x8001) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x14, 0x4, 0x4, 0x448, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, &(0x7f00000000c0)=""/193}, 0x20) (async)
r3 = accept4(r1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4}, 0x50) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0xfffffffffffffdd5, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4)
bind$can_raw(r9, &(0x7f00000001c0), 0x10) (async)
setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f0000000100)=0x9b3f, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

169.959079ms ago: executing program 1 (id=333):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x48}]}, &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)=@buf={0x93, &(0x7f0000000380)="8dd23c2ca02b21d63789998ce92ecb59dd5b867b47755aa5024ad10e6339856ef1a602f2ddea17320c064f2e8db39d153af31794c6126328485cb778c811518a199110f355e80450ea824ffa2b8ad8d4a8c230df5de0c43945d00a315e796659970a769a015e3a93baaa773142197bd20fde7e21d82e824481d14bb4c8c0351eb04e265adbfa2c25b729f680bd3b7554eff81a"})
r0 = socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c0000000000000000000000010500000008000000000000000000"], 0x0, 0x4e, 0x0, 0x1}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c0000000000000000000000010500000008000000000000000000"], 0x0, 0x4e, 0x0, 0x1}, 0x28)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r5, 0x84, 0x1, 0x0, &(0x7f0000001000)) (async)
getsockopt$bt_hci(r5, 0x84, 0x1, 0x0, &(0x7f0000001000))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010f00010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x20088085)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
accept(r8, &(0x7f0000000d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000dc0)=0x80) (async)
accept(r8, &(0x7f0000000d40)=@pppol2tpin6={0x18, 0x1, {0x0, <r10=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000dc0)=0x80)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000e00)={r7})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r6, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40005)
sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x31, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x9, 0x13, @l2={'ib', 0x3a, 'team0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x200c48a4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r12, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

110.336839ms ago: executing program 1 (id=334):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4)
write(r11, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
recvmmsg(r11, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/17, 0x11}, 0x7}], 0x1, 0x100, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000100003052bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4142000000000000240012800c0001006d6163766c616e0014000280100005800a0004000180c200000e00004e491753c638d39d2395b7e2f506483d9d34321d5085d0343fb41c0f69aaf2ba4aad428e768216c01aaed0ca809ec97852c4514716b16a5316933ac321af4209a23ec270ef749e3d7a0efc7c8d7d1f0c9c7f9afd437976cf72b704b6834cd2c51388061a27bc740519df"], 0x44}}, 0x0)
r13 = openat$cgroup_type(r9, &(0x7f00000020c0), 0x2, 0x0)
sendfile(r10, r13, 0x0, 0x27e)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000162fddde1e0a03020000000000000000020000000900020073797a32afc6c0e5adaff2b226502c51f17a30000000001400038008000240000000000800014000000000140000001100010000000000000000000000000a5d04bb9244520a6bac78bb843d0e86bb7021a8c1595b2023057c8d4cf401fe973dcddeeb652f4296a5f97eb75a7dc9d1f2e4d163d015a6b05495344894f64e108a00"/188], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c000380080002400000000008000140000000001800038014000100000000000000000000000000000000001400000011000100"], 0x80}}, 0x4000000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

529.713µs ago: executing program 1 (id=335):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x6, 'hugetlb'}]}, 0x9)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000040)=0x10001, 0x4)
r4 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r4, &(0x7f00000019c0)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000044}, 0x4000000)

0s ago: executing program 1 (id=336):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020605000000040000000000070000001400078008001140000000000800124000000c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000"], 0x60}}, 0x20004000) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0}) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0800260080090000080003a64db657d6e6515a9f0007ffcb93"], 0x2c}, 0x1, 0x0, 0x0, 0x48845}, 0x4040000) (async)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x20000044) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r6 = socket$inet6(0xa, 0x1, 0x100) (async, rerun: 64)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getstats={0x1c, 0x5e, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4}, [""]}, 0x1c}}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000640)={'syzkaller0\x00', {0x2, 0x4e22, @private=0xa010101}}) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r6, @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async, rerun: 64)
unshare(0x22020400) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff})
ioctl$TUNDETACHFILTER(r12, 0x8903, 0x1000000000000) (async)
sendmsg$NL80211_CMD_JOIN_OCB(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9080014}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49991' (ED25519) to the list of known hosts.
syzkaller login: [   40.761402][ T5769] cgroup: Unknown subsys name 'net'
[   40.906116][ T5769] cgroup: Unknown subsys name 'cpuset'
[   40.910881][ T5769] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.219576][ T5769] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.311532][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.314539][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.317583][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.320360][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.323148][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.345472][ T5221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.348097][ T5221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.350708][ T5221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.353818][ T5221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.356485][ T5221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.393298][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.397883][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.400414][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.403386][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.406103][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.491686][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   45.573576][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.575885][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.578304][ T5829] bridge_slave_0: entered allmulticast mode
[   45.580978][ T5829] bridge_slave_0: entered promiscuous mode
[   45.586486][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.588819][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.591170][ T5829] bridge_slave_1: entered allmulticast mode
[   45.594400][ T5829] bridge_slave_1: entered promiscuous mode
[   45.654031][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   45.668064][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.672622][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.694185][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   45.712551][ T5829] team0: Port device team_slave_0 added
[   45.723059][ T5829] team0: Port device team_slave_1 added
[   45.754520][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.756850][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.759239][ T5833] bridge_slave_0: entered allmulticast mode
[   45.761878][ T5833] bridge_slave_0: entered promiscuous mode
[   45.766166][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.768426][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.770680][ T5833] bridge_slave_1: entered allmulticast mode
[   45.773634][ T5833] bridge_slave_1: entered promiscuous mode
[   45.797849][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.800072][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.808332][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.833840][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.836021][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.844012][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.849247][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.855185][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.858282][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.860652][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.863657][ T5836] bridge_slave_0: entered allmulticast mode
[   45.866492][ T5836] bridge_slave_0: entered promiscuous mode
[   45.873439][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.875750][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.878050][ T5836] bridge_slave_1: entered allmulticast mode
[   45.880731][ T5836] bridge_slave_1: entered promiscuous mode
[   45.926710][ T5833] team0: Port device team_slave_0 added
[   45.929921][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.936393][ T5829] hsr_slave_0: entered promiscuous mode
[   45.938688][ T5829] hsr_slave_1: entered promiscuous mode
[   45.942849][ T5833] team0: Port device team_slave_1 added
[   45.946385][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.983267][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.985518][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.994678][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.999686][ T5836] team0: Port device team_slave_0 added
[   46.005902][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.008156][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.016332][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.020834][ T5836] team0: Port device team_slave_1 added
[   46.063526][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.065712][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.074502][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.090818][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.093448][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.101496][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.108480][ T5833] hsr_slave_0: entered promiscuous mode
[   46.110727][ T5833] hsr_slave_1: entered promiscuous mode
[   46.113069][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.115600][ T5833] Cannot create hsr debugfs directory
[   46.159225][ T5836] hsr_slave_0: entered promiscuous mode
[   46.161514][ T5836] hsr_slave_1: entered promiscuous mode
[   46.163891][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.166321][ T5836] Cannot create hsr debugfs directory
[   46.254066][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.272996][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.291133][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.298216][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.345018][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.347390][ T5829] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.350034][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.352410][ T5829] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.361189][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.368279][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.372879][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.377959][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.419693][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.424580][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.429505][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.431797][ T5836] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.434282][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.436543][ T5836] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.441250][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.448188][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.478717][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.481037][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.483476][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.485743][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.507090][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.509986][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.515459][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.518012][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.523365][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.526219][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.542050][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.566897][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.571508][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   46.586993][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.589899][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.592190][ T4442] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.605792][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.608173][ T4442] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.628035][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   46.644079][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   46.654056][  T721] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.656348][  T721] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.660354][  T721] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.662662][  T721] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.667698][  T721] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.669959][  T721] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.673778][  T721] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.676029][  T721] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.700437][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.706078][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.753006][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.794083][ T5829] veth0_vlan: entered promiscuous mode
[   46.799403][ T5829] veth1_vlan: entered promiscuous mode
[   46.825250][ T5829] veth0_macvtap: entered promiscuous mode
[   46.831497][ T5829] veth1_macvtap: entered promiscuous mode
[   46.846828][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.854913][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.861367][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.870148][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.880216][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.884437][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.887193][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.889873][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.954734][ T5836] veth0_vlan: entered promiscuous mode
[   46.957763][ T5833] veth0_vlan: entered promiscuous mode
[   46.958171][   T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.964684][ T5833] veth1_vlan: entered promiscuous mode
[   46.967643][   T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.969509][ T5836] veth1_vlan: entered promiscuous mode
[   46.992885][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.996287][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.999399][ T5833] veth0_macvtap: entered promiscuous mode
[   47.010132][ T5833] veth1_macvtap: entered promiscuous mode
[   47.016992][ T5836] veth0_macvtap: entered promiscuous mode
[   47.024285][ T5836] veth1_macvtap: entered promiscuous mode
[   47.030819][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.040209][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.041051][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.045375][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.050037][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.053886][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.056673][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.072725][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.085544][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.107566][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.110407][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.118909][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.121646][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.167730][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.177901][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.205247][   T33] audit: type=1804 audit(1753272161.854:2): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4" name="/newroot/1/cgroup.controllers" dev="tmpfs" ino=23 res=1 errno=0
[   47.205723][ T5896] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4'.
[   47.219165][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.225872][   T33] audit: type=1800 audit(1753272161.854:3): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4" name="cgroup.controllers" dev="tmpfs" ino=23 res=0 errno=0
[   47.225895][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.233129][   T33] audit: type=1800 audit(1753272161.854:4): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4" name="cgroup.controllers" dev="tmpfs" ino=23 res=0 errno=0
[   47.265232][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.267737][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.298258][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.300743][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.326561][ T5898] gretap0: entered promiscuous mode
[   47.328401][ T5898] vlan2: entered promiscuous mode
[   47.350687][ T5900] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   47.384307][ T5832] Bluetooth: hci0: command tx timeout
[   47.386179][ T5221] Bluetooth: hci1: command tx timeout
[   47.416964][ T5905] tc_dump_action: action bad kind
[   47.463365][ T5221] Bluetooth: hci2: command tx timeout
[   47.498151][ T5916] tipc: Started in network mode
[   47.500657][ T5916] tipc: Node identity 169b6fc17c2b, cluster identity 4711
[   47.504405][ T5916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.515961][ T5905] syzkaller0: entered promiscuous mode
[   47.517751][ T5905] syzkaller0: entered allmulticast mode
[   47.531731][ T5904] tipc: Resetting bearer <eth:syzkaller0>
[   47.541379][ T5904] tipc: Disabling bearer <eth:syzkaller0>
[   47.551360][ T5909] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   47.557054][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.559816][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.620219][ T5929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.675814][ T5936] nftables ruleset with unbound set
[   47.676370][ T5935] netlink: 165 bytes leftover after parsing attributes in process `syz.2.14'.
[   47.716471][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[   47.720793][ T5942] netlink: 47 bytes leftover after parsing attributes in process `syz.0.16'.
[   47.776270][ T5948] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.878921][ T5956] netlink: 'syz.2.18': attribute type 1 has an invalid length.
[   47.970341][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24'.
[   48.202799][ T5969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.26'.
[   48.258412][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'.
[   48.268540][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'.
[   48.280720][ T5973] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET)
[   48.283307][ T5973] syzkaller1: entered promiscuous mode
[   48.285217][ T5973] syzkaller1: entered allmulticast mode
[   48.865330][ T5975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.868382][ T5975] syzkaller0: entered promiscuous mode
[   48.870194][ T5975] syzkaller0: entered allmulticast mode
[   48.917578][ T5975] tipc: Resetting bearer <eth:syzkaller0>
[   49.015950][ T5974] tipc: Resetting bearer <eth:syzkaller0>
[   49.022694][ T5974] tipc: Disabling bearer <eth:syzkaller0>
[   49.075792][ T5989] tipc: Can't bind to reserved service type 0
[   49.100601][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.31'.
[   49.128829][ T5998] netlink: 72 bytes leftover after parsing attributes in process `syz.1.33'.
[   49.176252][ T6005] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[   49.184488][ T6005] Zero length message leads to an empty skb
[   49.462921][ T5832] Bluetooth: hci0: command tx timeout
[   49.464783][ T5221] Bluetooth: hci1: command tx timeout
[   49.509546][ T6044] ip6tnl0: entered promiscuous mode
[   49.530248][ T6043] ip6tnl0: left promiscuous mode
[   49.542354][ T5221] Bluetooth: hci2: command tx timeout
[   50.224836][ T6096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   50.232781][ T6096] Driver unsupported XDP return value 0 on prog  (id 27) dev N/A, expect packet loss!
[   50.416813][ T6117] syzkaller0: entered promiscuous mode
[   50.418765][ T6117] syzkaller0: entered allmulticast mode
[   50.428060][ T6117] tipc: Started in network mode
[   50.430836][ T6117] tipc: Node identity b62564121eee, cluster identity 4711
[   50.433416][ T6117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.445141][ T6117] ip6t_srh: unknown srh match flags  5294
[   50.450107][ T6115] tipc: Resetting bearer <eth:syzkaller0>
[   50.465425][ T6115] tipc: Disabling bearer <eth:syzkaller0>
[   50.479192][ T6122] netlink: 'syz.1.75': attribute type 13 has an invalid length.
[   50.756942][ T6145] netlink: 'syz.1.83': attribute type 29 has an invalid length.
[   50.764520][ T6145] netlink: 'syz.1.83': attribute type 29 has an invalid length.
[   50.808473][ T6150] ipvlan2: entered promiscuous mode
[   50.813251][ T6150] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   51.206903][ T6175] syzkaller1: entered promiscuous mode
[   51.208813][ T6175] syzkaller1: entered allmulticast mode
[   51.243786][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.246878][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.258025][ T6177] netlink: 'syz.0.92': attribute type 3 has an invalid length.
[   51.319900][ T6175] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.327625][ T6175] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.367505][ T6175] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.370540][ T6175] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.380173][ T6175] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.383523][ T6175] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.409857][ T6177] netlink: 'syz.0.92': attribute type 1 has an invalid length.
[   51.412989][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.542702][ T5832] Bluetooth: hci0: command tx timeout
[   51.544637][ T5221] Bluetooth: hci1: command tx timeout
[   51.585973][ T6186] sctp: [Deprecated]: syz.0.95 (pid 6186) Use of int in max_burst socket option deprecated.
[   51.585973][ T6186] Use struct sctp_assoc_value instead
[   51.597595][ T6186] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   51.600295][ T6186] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   51.602826][ T6187] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   51.622614][ T5221] Bluetooth: hci2: command tx timeout
[   51.724342][ T6190] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR
[   52.068362][ T6266] xt_connbytes: Forcing CT accounting to be enabled
[   52.073687][ T6266] Cannot find set identified by id 0 to match
[   52.300937][ T6298] __nla_validate_parse: 26 callbacks suppressed
[   52.300947][ T6298] netlink: 5 bytes leftover after parsing attributes in process `syz.2.126'.
[   52.314563][ T6298] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   52.345825][ T6302] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   52.349957][ T6302] nbd: must specify a size in bytes for the device
[   52.353897][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'.
[   52.358446][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'.
[   52.387886][ T6305] sctp: [Deprecated]: syz.0.129 (pid 6305) Use of int in max_burst socket option.
[   52.387886][ T6305] Use struct sctp_assoc_value instead
[   52.843859][ T6309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.847758][ T6309] syzkaller0: entered promiscuous mode
[   52.849694][ T6309] syzkaller0: entered allmulticast mode
[   52.875400][ T6309] macvtap1: entered promiscuous mode
[   52.877277][ T6309] batadv0: entered promiscuous mode
[   52.881862][ T6309] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   52.887931][ T6309] batadv0: left promiscuous mode
[   52.946578][ T6308] tipc: Resetting bearer <eth:syzkaller0>
[   52.958922][ T6308] tipc: Disabling bearer <eth:syzkaller0>
[   53.334344][ T6328] IPv6: sit1: Disabled Multicast RS
[   53.439021][ T6336] netlink: 'syz.2.143': attribute type 1 has an invalid length.
[   53.538566][ T6350] netlink: 164548 bytes leftover after parsing attributes in process `syz.1.147'.
[   53.622596][ T5832] Bluetooth: hci1: command tx timeout
[   53.624520][ T5832] Bluetooth: hci0: command tx timeout
[   53.676041][ T6352] netlink: 168 bytes leftover after parsing attributes in process `syz.1.148'.
[   53.702228][ T5832] Bluetooth: hci2: command tx timeout
[   53.954547][ T6358] tipc: Started in network mode
[   53.956315][ T6358] tipc: Node identity ac14140f, cluster identity 4711
[   53.958905][ T6358] tipc: New replicast peer: 255.255.255.255
[   53.961397][ T6358] tipc: Enabled bearer <udp:syz2>, priority 10
[   53.964699][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'.
[   53.969294][ T6358] tipc: Disabling bearer <udp:syz2>
[   54.034184][ T6362] tun0: tun_chr_ioctl cmd 1074025675
[   54.036728][ T6362] tun0: persist enabled
[   54.038671][ T6362] tun0: tun_chr_ioctl cmd 1074025675
[   54.040796][ T6362] tun0: persist disabled
[   54.405166][ T6378] netlink: 56 bytes leftover after parsing attributes in process `syz.2.158'.
[   54.429969][ T5299] IPVS: starting estimator thread 0...
[   54.522369][ T6381] IPVS: using max 78 ests per chain, 187200 per kthread
[   54.549111][ T6392] sctp: [Deprecated]: syz.1.164 (pid 6392) Use of struct sctp_assoc_value in delayed_ack socket option.
[   54.549111][ T6392] Use struct sctp_sack_info instead
[   54.556950][ T6392] x_tables: ip_tables: osf match: only valid for protocol 6
[   54.734409][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'.
[   54.743331][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'.
[   54.746038][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'.
[   54.774772][ T6417] delete_channel: no stack
[   54.846244][ T6428] netlink: 'syz.2.175': attribute type 13 has an invalid length.
[   54.846266][ T6432] netlink: 'syz.2.175': attribute type 13 has an invalid length.
[   54.848806][ T6428] netlink: 'syz.2.175': attribute type 17 has an invalid length.
[   54.855109][ T6432] netlink: 'syz.2.175': attribute type 17 has an invalid length.
[   54.882809][ T6428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   54.890130][ T6432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   54.936482][ T6427] syzkaller0: entered promiscuous mode
[   54.938640][ T6427] syzkaller0: entered allmulticast mode
[   54.974359][ T6440] Bluetooth: MGMT ver 1.23
[   55.012381][ T6444] netlink: zone id is out of range
[   55.551089][ T6444] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.626180][ T6444] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.711437][ T6444] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.719852][  T721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.730451][  T721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.784197][ T5832] Bluetooth: hci2: command 0x0405 tx timeout
[   55.789316][ T6444] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.797782][ T6476] bond0: entered promiscuous mode
[   55.799947][ T6476] bond_slave_0: entered promiscuous mode
[   55.805959][ T6476] bond_slave_1: entered promiscuous mode
[   55.810995][ T6464] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   55.815677][ T6476] macvlan1: entered promiscuous mode
[   55.821728][ T6476] hsr1: entered promiscuous mode
[   55.877148][ T6444] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.896035][ T6444] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.903498][ T6444] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.910443][ T6444] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.033220][ T6503] pim6reg: entered allmulticast mode
[   56.035781][ T6503] pim6reg: left allmulticast mode
[   56.035955][ T6505] netlink: 'syz.2.194': attribute type 1 has an invalid length.
[   56.040872][ T6506] netlink: 'syz.2.194': attribute type 1 has an invalid length.
[   56.043724][ T6505] netlink: 'syz.2.194': attribute type 4 has an invalid length.
[   56.046286][ T6506] netlink: 'syz.2.194': attribute type 4 has an invalid length.
[   56.213509][ T6525] syzkaller1: entered promiscuous mode
[   56.215441][ T6525] syzkaller1: entered allmulticast mode
[   56.248009][ T6530] xt_addrtype: ipv6 does not support BROADCAST matching
[   56.251299][ T6529] delete_channel: no stack
[   56.438803][ T6545] ieee802154 phy0 wpan0: encryption failed: -22
[   56.442999][ T6545] openvswitch: netlink: Flow actions attr not present in new flow.
[   56.537736][ T6466] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0
[   56.603721][ T6555] Cannot find add_set index 0 as target
[   56.811554][ T6584] veth0: entered promiscuous mode
[   56.847893][ T6584] veth0 (unregistering): left promiscuous mode
[   57.089205][ T6609] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.091783][ T6609] syzkaller0: entered promiscuous mode
[   57.095617][ T6609] syzkaller0: entered allmulticast mode
[   57.110455][ T6609] tipc: Resetting bearer <eth:syzkaller0>
[   57.116042][ T6608] tipc: Resetting bearer <eth:syzkaller0>
[   57.122549][ T6608] tipc: Disabling bearer <eth:syzkaller0>
[   57.690391][ T5857] nci: nci_rsp_packet: unknown rsp opcode 0x204
[   58.527797][ T6706] syzkaller1: entered promiscuous mode
[   58.529771][ T6706] syzkaller1: entered allmulticast mode
[   58.809962][ T6740] (unnamed net_device) (uninitialized): option use_carrier: invalid value (6)
[   58.830126][ T6744] __nla_validate_parse: 20 callbacks suppressed
[   58.830137][ T6744] netlink: 120 bytes leftover after parsing attributes in process `syz.1.244'.
[   58.967212][ T6763] netlink: 'syz.1.248': attribute type 1 has an invalid length.
[   58.969799][ T6763] netlink: 'syz.1.248': attribute type 4 has an invalid length.
[   58.973825][ T6763] netlink: 188 bytes leftover after parsing attributes in process `syz.1.248'.
[   58.977662][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'.
[   58.980533][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'.
[   59.008205][ T6769] netlink: 124 bytes leftover after parsing attributes in process `syz.1.249'.
[   59.037505][ T6773] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   59.101285][ T6784] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   59.191043][ T6795] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   59.196646][ T6795] bridge_slave_0: left allmulticast mode
[   59.198624][ T6795] bridge_slave_0: left promiscuous mode
[   59.200602][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.206063][ T6795] bridge_slave_1: left allmulticast mode
[   59.207906][ T6795] bridge_slave_1: left promiscuous mode
[   59.209876][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.216839][ T6795] bond0: (slave bond_slave_0): Releasing backup interface
[   59.221207][ T6795] bond0: (slave bond_slave_1): Releasing backup interface
[   59.226257][ T6795] team0: Port device team_slave_0 removed
[   59.229200][ T6795] team0: Port device team_slave_1 removed
[   59.231587][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.235697][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.244685][ T6795] netlink: 'syz.1.253': attribute type 10 has an invalid length.
[   59.247220][ T6795] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   59.252068][ T6795] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.282403][ T6803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.309770][ T6806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.336191][ T6806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'.
[   59.339197][ T6806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'.
[   59.396639][ T6815] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   59.493721][ T6834] netlink: 280 bytes leftover after parsing attributes in process `syz.1.258'.
[   59.499339][ T6834] openvswitch: netlink: Flow key attr not present in new flow.
[   59.784461][ T6869] tipc: Cannot configure node identity twice
[   59.897616][ T6863] bridge0: port 1(ipvlan2) entered blocking state
[   59.899731][ T6863] bridge0: port 1(ipvlan2) entered disabled state
[   59.904884][ T6863] ipvlan2: entered allmulticast mode
[   59.906630][ T6863] bridge0: entered allmulticast mode
[   59.909334][ T6863] ipvlan2: left allmulticast mode
[   59.910957][ T6863] bridge0: left allmulticast mode
[   59.976183][ T6876] netlink: 252 bytes leftover after parsing attributes in process `syz.2.271'.
[   60.056099][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'.
[   60.057465][ T6885] bridge0: port 3(erspan0) entered blocking state
[   60.061296][ T6885] bridge0: port 3(erspan0) entered disabled state
[   60.064693][ T6885] erspan0: entered allmulticast mode
[   60.067493][ T6885] erspan0: entered promiscuous mode
[   60.070739][ T6885] erspan0: left allmulticast mode
[   60.072936][ T6885] erspan0: left promiscuous mode
[   60.075029][ T6885] bridge0: port 3(erspan0) entered disabled state
[   60.222947][ T6916] netlink: 'syz.2.282': attribute type 9 has an invalid length.
[   60.280195][ T6921] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.269954][ T6968] trusted_key: syz.0.296 sent an empty control message without MSG_MORE.
[   61.327064][ T6980] Cannot find set identified by id 0 to match
[   61.416811][ T7004] netlink: 'syz.0.300': attribute type 1 has an invalid length.
[   61.931356][ T7036] netlink: 'syz.1.309': attribute type 13 has an invalid length.
[   61.935212][ T7036] netlink: 'syz.1.309': attribute type 17 has an invalid length.
[   61.964421][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.967379][ T7036] 8021q: adding VLAN 0 to HW filter on device team0
[   61.971548][ T7036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.038686][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.578409][ T7078] pim6reg1: entered promiscuous mode
[   62.580176][ T7078] pim6reg1: entered allmulticast mode
[   62.818130][ T7089] tipc: Cannot configure node identity twice
[   63.890440][ T7103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.027495][ T7121] __nla_validate_parse: 14 callbacks suppressed
[   64.027505][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'.
[   64.060634][ T7124] netlink: 'syz.1.334': attribute type 1 has an invalid length.
[   64.073259][ T7124] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.085023][ T7124] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.087578][ T7124] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   64.091693][ T7124] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   64.129367][ T7126] batadv_slave_1: entered promiscuous mode
[   64.133008][ T7126] bond1: (slave batadv_slave_1): Enslaving as an active interface with a down link
[   64.136945][ T7126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.334'.
[   64.140113][ T7126] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.222788][ T7131] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI
[   64.226429][ T7131] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f]
[   64.230014][ T7131] CPU: 1 UID: 0 PID: 7131 Comm: syz.1.336 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[   64.233826][ T7131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   64.236962][ T7131] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80
[   64.238830][ T7131] Code: 80 3c 2f 00 74 08 48 89 df e8 0c a3 05 f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 e1 a2 05 f7 4d 8b 2c 24 49 83 c5
[   64.244657][ T7131] RSP: 0018:ffffc9000255efc0 EFLAGS: 00010a06
[   64.246551][ T7131] RAX: 1bd5a9d5a0000003 RBX: ffff8881256eba38 RCX: ffff8880218fd640
[   64.249028][ T7131] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[   64.251482][ T7131] RBP: ffffc9000255f330 R08: ffff8881256eb45f R09: 1ffff11024add68b
[   64.253926][ T7131] R10: dffffc0000000000 R11: ffffed1024add68c R12: dead4ead00000018
[   64.256337][ T7131] R13: dffffc0000000000 R14: ffff8881256eb400 R15: 1ffff11024add747
[   64.258727][ T7131] FS:  00007fecc67636c0(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[   64.261431][ T7131] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   64.263436][ T7131] CR2: 000020000000e000 CR3: 0000000111394000 CR4: 00000000000006f0
[   64.265883][ T7131] Call Trace:
[   64.266932][ T7131]  <TASK>
[   64.267886][ T7131]  ? __pfx_smc_diag_dump_proto+0x10/0x10
[   64.269606][ T7131]  ? __lruvec_stat_mod_folio+0x79/0x2f0
[   64.271295][ T7131]  ? __lruvec_stat_mod_folio+0x79/0x2f0
[   64.273002][ T7131]  ? __phys_addr+0xd3/0x180
[   64.274424][ T7131]  ? __kasan_kmalloc_large+0x85/0xa0
[   64.276070][ T7131]  ? rcu_is_watching+0x15/0xb0
[   64.277576][ T7131]  ? rcu_is_watching+0x15/0xb0
[   64.279096][ T7131]  ? trace_kmalloc+0x1f/0xd0
[   64.280520][ T7131]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   64.282529][ T7131]  ? __build_skb_around+0x257/0x3e0
[   64.284143][ T7131]  smc_diag_dump+0x59/0xa0
[   64.285513][ T7131]  netlink_dump+0x6de/0xe60
[   64.286948][ T7131]  ? __pfx_netlink_dump+0x10/0x10
[   64.288542][ T7131]  ? netlink_lookup+0x30/0x200
[   64.290053][ T7131]  ? netlink_lookup+0x30/0x200
[   64.291511][ T7131]  ? netlink_lookup+0x30/0x200
[   64.293044][ T7131]  __netlink_dump_start+0x5cb/0x7e0
[   64.294673][ T7131]  smc_diag_handler_dump+0x178/0x210
[   64.296315][ T7131]  ? __pfx_smc_diag_handler_dump+0x10/0x10
[   64.298123][ T7131]  ? __pfx_smc_diag_dump+0x10/0x10
[   64.299709][ T7131]  ? sock_diag_lock_handler+0x19/0x290
[   64.301378][ T7131]  ? sock_diag_lock_handler+0x19/0x290
[   64.303084][ T7131]  sock_diag_rcv_msg+0x4cc/0x600
[   64.304628][ T7131]  netlink_rcv_skb+0x208/0x470
[   64.306138][ T7131]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[   64.307808][ T7131]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   64.309440][ T7131]  ? netlink_deliver_tap+0x2e/0x1b0
[   64.311042][ T7131]  ? netlink_deliver_tap+0x2e/0x1b0
[   64.312628][ T7131]  netlink_unicast+0x75c/0x8e0
[   64.314138][ T7131]  netlink_sendmsg+0x805/0xb30
[   64.315604][ T7131]  ? __pfx_netlink_sendmsg+0x10/0x10
[   64.317233][ T7131]  ? aa_sock_msg_perm+0x94/0x160
[   64.318774][ T7131]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   64.320411][ T7131]  ? __pfx_netlink_sendmsg+0x10/0x10
[   64.322049][ T7131]  __sock_sendmsg+0x21c/0x270
[   64.323524][ T7131]  ____sys_sendmsg+0x505/0x830
[   64.325032][ T7131]  ? __pfx_____sys_sendmsg+0x10/0x10
[   64.326653][ T7131]  ? import_iovec+0x74/0xa0
[   64.328070][ T7131]  ___sys_sendmsg+0x21f/0x2a0
[   64.329541][ T7131]  ? __pfx____sys_sendmsg+0x10/0x10
[   64.331146][ T7131]  ? __fget_files+0x2a/0x420
[   64.332569][ T7131]  ? __fget_files+0x3a0/0x420
[   64.334051][ T7131]  __x64_sys_sendmsg+0x19b/0x260
[   64.335571][ T7131]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   64.337289][ T7131]  ? rcu_is_watching+0x15/0xb0
[   64.338869][ T7131]  ? do_syscall_64+0xbe/0x3b0
[   64.340364][ T7131]  do_syscall_64+0xfa/0x3b0
[   64.341749][ T7131]  ? lockdep_hardirqs_on+0x9c/0x150
[   64.343324][ T7131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.345223][ T7131]  ? exc_page_fault+0x9f/0xf0
[   64.346690][ T7131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.348499][ T7131] RIP: 0033:0x7fecc598e9a9
[   64.349928][ T7131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.355735][ T7131] RSP: 002b:00007fecc6763038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   64.358266][ T7131] RAX: ffffffffffffffda RBX: 00007fecc5bb6080 RCX: 00007fecc598e9a9
[   64.360653][ T7131] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000008
[   64.363053][ T7131] RBP: 00007fecc5a10d69 R08: 0000000000000000 R09: 0000000000000000
[   64.365443][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   64.367891][ T7131] R13: 0000000000000000 R14: 00007fecc5bb6080 R15: 00007ffda286dee8
[   64.370304][ T7131]  </TASK>
[   64.371284][ T7131] Modules linked in:
[   64.373048][ T7131] ---[ end trace 0000000000000000 ]---
[   64.374732][ T7131] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80
[   64.376569][ T7131] Code: 80 3c 2f 00 74 08 48 89 df e8 0c a3 05 f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 e1 a2 05 f7 4d 8b 2c 24 49 83 c5
[   64.382979][ T7131] RSP: 0018:ffffc9000255efc0 EFLAGS: 00010a06
[   64.384810][ T7131] RAX: 1bd5a9d5a0000003 RBX: ffff8881256eba38 RCX: ffff8880218fd640
[   64.387222][ T7131] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[   64.389639][ T7131] RBP: ffffc9000255f330 R08: ffff8881256eb45f R09: 1ffff11024add68b
[   64.392167][ T7131] R10: dffffc0000000000 R11: ffffed1024add68c R12: dead4ead00000018
[   64.394602][ T7131] R13: dffffc0000000000 R14: ffff8881256eb400 R15: 1ffff11024add747
[   64.397020][ T7131] FS:  00007fecc67636c0(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[   64.399802][ T7131] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   64.401946][ T7131] CR2: 000020000000e000 CR3: 0000000111394000 CR4: 00000000000006f0
[   64.404632][ T7131] Kernel panic - not syncing: Fatal exception
[   64.407187][ T7131] Kernel Offset: disabled
[   64.408543][ T7131] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:02:59  Registers:
info registers vcpu 0

CPU#0
RAX=ffff888113e30000 RBX=ffff888113e30000 RCX=ed037e3c3a6a8500 RDX=0000000000000002
RSI=0000000000500dc0 RDI=ffff888113e30000 RBP=ffffc9000476f938 RSP=ffffc9000476f910
R8 =0000000000000000 R9 =0000000000000000 R10=ffff88802fb93000 R11=fffffbfff1f43adf
R12=0000000000000006 R13=ffff8881088e1cc0 R14=0000000000000002 R15=0000000000001008
RIP=ffffffff822aa331 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fecc67426c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fecc6741fc8 CR3=0000000111394000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f202e986478 00007f202e986450 XMM03=00007f202e986488 00007f202e986480
XMM04=00007f202f4ed100 00007f202e986440 XMM05=00007f202e986458 00007f202e9864a0
XMM06=00007f202e986498 00007f202e986490 XMM07=00007f202e986488 00007f202e986480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f202e811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000255e7f0
R8 =ffff888106db0237 R9 =1ffff11020db6046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18c5 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fecc67636c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000e000 CR3=0000000111394000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffff00ffff ff00000000000000 XMM01=ffffffff0000ff00 0000ff00ffffff00
XMM02=ffffff00ff00ff00 0000ffff0000ff00 XMM03=ffffffffff00ff00 ffffff00ff00ff00
XMM04=00007fecc66ed100 00007fecc5b86440 XMM05=00007fecc5b86458 00007fecc5b864a0
XMM06=00007fecc5b86498 00007fecc5b86490 XMM07=00007fecc5b86488 00007fecc5b86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fecc5a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
