last executing test programs:

2.563078915s ago: executing program 2 (id=460):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
r3 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x306}, {&(0x7f0000002b40)="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", 0x2af}], 0x2}, 0x8400)
sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000640)="455b1c1ed5900423c15445e625bc121395a1ca64b3dd6f8aeb723872f617d717a26bf00271b580f6822a2c6896c756f9884b052d314f2a0e782a11c793063457ccd878782b6599e2c51e40ed5142e32cf8b07a76201b7644ac62f011223e925d8565cde47b522a9b86be7847318bfeaf58de2c6a1aebf00c39a22ec6de373ec332917b7586bf8298180eb89831e03feae224ca839e8ca7041056cb9ed42abcd994", 0xa1}, {&(0x7f0000000800)="7e24225d7d1bf3f2c2e3350446b32bcc9a579c864b87c0b26e9513f1a964562cd0fb40e07a028a9e4a8509c6183dc2c51a7f307806ce093fad8f167b3f1656081a0f4b15e021952a5e40d65779b924ed3fd175df8673c7544e9e3b11bc621acae054258215e76d7f16569f3436c00fcc7c6c154f87afc22e0ad2a3737a8f6e1cdf815f357d0b10e57e633006dd00e8cc5c66ddb415a93124d45ef1e687b1e29d9fb742d4f8b91f69854f7ba2eaec1b2782a4807fba2fc86bb82f320faa5da21794d4e6b2795f823dd429c33bb5a117ec441e28", 0xd3}, {&(0x7f0000003ac0)="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", 0x43c}], 0x3}, 0x0)
recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)

2.494077548s ago: executing program 2 (id=461):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$tipc(0x1e, 0x5, 0x0)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x9, 0x3, 0xfffffffc, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x9, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x3, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x4, 0x8, 0xdc1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$packet(r3, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000000c0)=@generic={0x1, 0x1, 0x5})
socket$nl_route(0x10, 0x3, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x4)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000000000007000000", @ANYRES32, @ANYBLOB="090001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x6, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x47, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x6, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x1, 0x0, 0xfffffff8, 0x6, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x1020, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0x10000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000200000008002500000000000c0099"], 0x28}}, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0xb6, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback, {0x0, 0x2a3, 0x7f, 0xffffffffffffffff, 0x0, 0x33}, {0x7}, {}, 0x70bd2a, 0x0, 0xa, 0x2, 0x0, 0x2f}, [@replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x70bd2b, 0x0, [0x4]}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x200}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc020000000000000000000000000000ffffffff00000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000c00000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000001600000000000000dd0200000000000000000000000000000000030100000000c4000505ac14143b000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000fcffffff0300ff00000000000010000000000000fc020000000000000000000000000000000004d32b00000000000000ac1414aa000000000000000000000000000000000100000000000000ffffffff00000000ff020000000000000000000000000001000000003c00000002000000ff02000000000000000000000000000100000000030000000000000003000000286a8b27"], 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008800)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={0x0}, 0x18)

1.626739053s ago: executing program 2 (id=476):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x4000)
close(0xffffffffffffffff)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

1.572786284s ago: executing program 2 (id=477):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc020000000000100000000000000001000000000000000000000000000000013c040000000000000a000a000a01010100000000000000000000000020010000000000000000000000000000ac14142d000000000000000000000000fc0200000000000000000000000000003c0400000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.486827379s ago: executing program 2 (id=479):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b40500000000000061104e0000000000630148000000000095000900000000007240338a9e17f57a6c89d7da9a2074ce3af2aab5eb3272ef9d76564731d742f09687c9235c4d6963c44ac167a10766ff0f11eb01ef14e21906fd3328caa2807dd2aa3be584abbc9292cb952c9508f3c0cfaba7806fedc6ed9ab2622056ff987567a483c3b8dda78995d3875cded06ed673086e06e9a8142f1fbb940820ccb6fc6097e07b90b659517ac40ecfb0c387b78493a12f95493ec5c88b18"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1800}, 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)

1.48337438s ago: executing program 2 (id=481):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000980)={0x12c, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x81}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xd8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x4}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff) (async)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a00110000060a0b04000000000000000002000000d4100480240001800b000100736f636b6574000014000280080002400000000308000140000000029c1001800a0001006d617463680000008c1002800a00010073746174650000000b000100726563656e7400005b000300240de55c7e19ba2d0bda197b61b75aabe0fd70b0ca4560ab2d0e8be38a624695253dfa6cae8799305bda20cf62b6ed9bc1ca5801aed8faacc5e04170c1c59b912dca41565911a6497e1e2de3ede03d056202fa53366947000800024000000000080002400000000004100300237a7f1371d167825283c76bea4a6935cf874876782d54ffb7c7c0551f89e8346def38843bf25a9c896ee3dd20184bd8e2103b725c8c120a90e9dc253aa1faf928de44aaafa7871de19b3bfc9beae44b2cf63b027f358363d769fbabd235e851182c2f2a2a8832891d5594fd6ab0006e49e3dc77e7aeefcc7f00b3ee600e935ffc91e359aebf3266ae56ed3f0284ed1fb960a2e4d77d006ed6d084e4aa3fae17452253ddd30ba894d0e97f27c8827fc72eb89c8677fb79edd412e0999e7c1d1c3437bba1876cf039620c2620506e884a3209d69bafd2095d9121f42dadc3562032f96d6b130e320d26dd5882a3d3e948202d89cb9f70a78922993a430730fabe6dae9b45dc4a9b8e7dcd9ea35c46afdaa8ea2928eec7985cffaa0d51bae69a8de7cc3638fa4f85431f7e5c78d8d77949f134719b2df72bc5b1fedf1cf2d03af0dd7cbcfd624f5c8309d2e0800f3d5f420a9c7ef09a747efbfcdd20a7d1d9672a0a319e56cbf15679d7f1533beb654b02e85d4fb1873ab3c2d023b5795afbfb60f01c40b919484f988ab1593196f63bf0a13f5ea20ca122709ff045733dfe0341b9a6c14d7e09af703848ed7d6ed5b622deafeb219b4e8039a85c976f851053b67d9fa15b70341eaaaf1467cbd5ddf5557d83930e291655c8a902263f67dac5c7c2ec7da95d5042df89e84501130a416fdb5f0547858e6fea67d2be55f3549e2fa8cc5b985682fb0acfb7bf783e74de81589d097566acac527c188f68fb5ef488d555af096a5f885ef891d8d7931140ab33304b5466de3d658025e15f732c0de391cb801c3a9d7817a19d4689451b67e7a12a394eee8b3fcd88f6b050bbc4fd83bc8ab0f0c101f6d17ec3490af13a0e37b153a716831ff10e40974773c5d499b8f221e28ba3e1d73d30b401d692a6d4dd702c8e9c462c53df8266d794d391f063cfe5e90e4994be040cdaece15d21492f37f4a84182026d86da33f3c0b35727ce4f0ed916aacdd89d8e3c590220867e9d9a5a16880960019daa6203c8da683df1e661dc41ce5b7d031e974129c354f97f2865d055265dbf18b00ecdef41c12186912e3dd8532e2340d3e7f986d8721ccde74552d294d070d01cb0515ef45c9012b9143f91e156e60f5ea338dfd683a82792acf05edc73bc1a7fecbe859aea3272a4a19c5e6299eb6342d9a885335d742e111b971f8de2269b"], 0x1128}}, 0x20000000) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000)
r10 = socket(0x8, 0x0, 0x8000)
ioctl$sock_netrom_SIOCADDRT(r10, 0x6180, 0x0) (async)
ioctl$sock_netrom_SIOCADDRT(r10, 0x6180, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0)

1.267284808s ago: executing program 0 (id=486):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)=ANY=[@ANYBLOB="2c0000003c0007010500000000400000017c00000400fc800c0001800600060086dd0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0xc010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x10, 0x7, 0x4, 0x0, 0x0, 0x3, 0x10010}}, 0x1c}}, 0x4850) (async)
r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@netrom, @bcast, @bcast, @netrom, @netrom, @netrom, @remote, @bcast]}, &(0x7f0000000100)=0x48, 0x80000)
accept$netrom(r3, &(0x7f00000003c0)={{0x3, @null}, [@default, @bcast, @remote, @default, @remote, @rose, @null, @null]}, &(0x7f0000000140)=0x48)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000405000000fd289a3c00000000000000000000000000000000000200000000000064000000594dc1097c15f0b1e4289e49f37402c1504dc790fd8703e6d4a02a073d3a3c7748a893c3a6fafa49d98da4c348509c89e4253859e13ba7365960f32b60291c99e355f36ebff25d0e9873ea6fae3b080f0cee3be4422556", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000fdffffff000000000000000028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x800)

1.185977724s ago: executing program 0 (id=488):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b40500000000000061104e0000000000630148000000000095000900000000007240338a9e17f57a6c89d7da9a2074ce3af2aab5eb3272ef9d76564731d742f09687c9235c4d6963c44ac167a10766ff0f11eb01ef14e21906fd3328caa2807dd2aa3be584abbc9292cb952c9508f3c0cfaba7806fedc6ed9ab2622056ff987567a483c3b8dda78995d3875cded06ed673086e06e9a8142f1fbb940820ccb6fc6097e07b90b659517ac40ecfb0c387b78493a12f95493ec5c88b18"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000}, 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)

1.135996381s ago: executing program 0 (id=489):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/223, 0xe1}, {0x0, 0x49}], 0x2}, 0x80000001}], 0x1, 0x832b, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000200000000009793f530244bb5a2dc6c2c408136da8bf20e6276a9bb76832b182af2f34acc2bb48eb8ae8464ed5180b431de0280ec9343a49b83706af5e3f9e6441763a6e5f6c0b119d93e18e94e781c6b832eeb612efc92d91200e30dcda3c1345c437b31e29ba7342caf51e0d06dc5352803bd69aa533f1d77b7adb4746b375191b41e731343f9ccbad9c91ce521c25593161015"], 0x0, 0x1a, 0x0, 0x1, 0x5}, 0x28)
listen(r2, 0x3)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c1}, {&(0x7f0000000600)}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000011000500002000000003000007000000", @ANYRES32=r7, @ANYBLOB="000401004219000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}}}}}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xea, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xea, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}, "16ba1c33be9e3dd3131be124c53e53318de1d162ab4fbabe06a1e9f68c1783e3d351cbb0bf403bd6834b6fdc7eda0ee6797bfe8ae0ebf63b261eb393477f9774ff8a67fe4ee77684611cb9c39ea69a988e7238549b785ac1fbc2ceafd33b693f436ca0badb6d2a7ab27686aa6d35873bf773115f39feedf5814bd61b03685822564f3a6a540acc1600d9f85df98e910d3e141b34c2b8451a4e347d8f35be138666044d448dd6037badf771f6d0167fc826b5914e00b0ebf6065066494321d927dedd6c9535fe41ec19498b71671fed94e71c2e880c19052418f6465fe413"}}}}}}}}, 0x124)

635.341437ms ago: executing program 1 (id=496):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0xf000}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="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"], 0x184}}, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
recvfrom(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
splice(r13, 0x0, r15, 0x0, 0xf3a, 0x0)
write(r11, &(0x7f0000000240)="94", 0x1)
close(r14)
tee(r10, r15, 0x8f5, 0x0)
write(r12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000ff7f00000000000095800000000000002cb750689555b462743cada81ac76fcb5178e1f055fa3a33a733151f9ce39084899d443a6a232e84f8bbb15f45fbf3a86b97a6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r16 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r16, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x0, 0x2}, 0x2}], 0x20)

395.884357ms ago: executing program 1 (id=497):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x306}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6caa85320f9d5beea2370b8c0533c19422c9097a7164651ad9d8f9cca4ea7815e53fd9c42eab1cb76b451cd3b18cf31c16d01731efd1506b844f52d2f173c825a7f8814ada5f6361a48f20250df6b98965d0c85f3df3b72b2ac49f3ed52e6fa30d7d3d54d95e8bd13ec2ed4883feb3b778d624ff0c1a3ec900671acd0ff00edc7b96d1cad51fba25565c67ce0e62302dbff8f68c0de8330c44704b2f019a7afc753538ed61f3744f286735af18a8f5e7ae3fd66e4562565b31a9e5d947a06ea69ee5f0ea97d2e832e1bbc9e74498a2f99473ef8822ad0254013fefff6c4c35d84072307633de00985a6477ff6480e75171a50", 0x2af}], 0x2}, 0x8400)
sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000640)="455b1c1ed5900423c15445e625bc121395a1ca64b3dd6f8aeb723872f617d717a26bf00271b580f6822a2c6896c756f9884b052d314f2a0e782a11c793063457ccd878782b6599e2c51e40ed5142e32cf8b07a76201b7644ac62f011223e925d8565cde47b522a9b86be7847318bfeaf58de2c6a1aebf00c39a22ec6de373ec332917b7586bf8298180eb89831e03feae224ca839e8ca7041056cb9ed42abcd994", 0xa1}, {&(0x7f0000000800)="7e24225d7d1bf3f2c2e3350446b32bcc9a579c864b87c0b26e9513f1a964562cd0fb40e07a028a9e4a8509c6183dc2c51a7f307806ce093fad8f167b3f1656081a0f4b15e021952a5e40d65779b924ed3fd175df8673c7544e9e3b11bc621acae054258215e76d7f16569f3436c00fcc7c6c154f87afc22e0ad2a3737a8f6e1cdf815f357d0b10e57e633006dd00e8cc5c66ddb415a93124d45ef1e687b1e29d9fb742d4f8b91f69854f7ba2eaec1b2782a4807fba2fc86bb82f320faa5da21794d4e6b2795f823dd429c33bb5a117ec441e28", 0xd3}, {&(0x7f0000003ac0)="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", 0x43c}], 0x3}, 0x0)
recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)

395.440474ms ago: executing program 1 (id=498):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

305.671843ms ago: executing program 1 (id=499):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x4, 0x0, 0x200000000000000}, 0x0, 0x6e6bbb}}, 0xb8}}, 0x2c000010) (async)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400200100000000000000000000000000010600cc3c2d1b00000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="940000000001050500000000000000000a000005440002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000008000000010c000280050001000000000006000340000200003c0001800c00028005000100000000002c00018014000300ff0280000000000000000000000000011400040020010000000000000000000000000001b29b8f16921f7bc710717396b67c2787770883c7123554442d88dda380b0eec920f902b762116f1937c30025e6bb31c8fba99d3cdd512bc03bb8da88c2e1c0a30007c04bc7229cc090577c69d814744566f65cec5bbb3c2bc257c48cfc553cbcc50e45ef27e48b33869300a3f0fa4ba024514978c96799887a04c62b5e1828eedbdad575ca46cb6b987881edbd82494a71eadf4a884f39e78c0724b0ec71c393639b7fada8dbe8b489daa5f54c782bc8ea5790f8f82f69aa4dfc0fd4cec795959b5b44568cf6c098b85499a7120c087667a5ff22c540b45c021ec499c4386522489ac33651bee2393a6e6cf2917d06dfabf408e045dad9342b48b75e453cf2d68837489fdac38ef840ce52e0bfd4aba489f6c533bfca19097baefa42f5dd"], 0x94}}, 0x0)
sendmsg$kcm(r1, &(0x7f00000089c0)={0x0, 0x0, 0x0}, 0x4000005)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000800"/56], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000000000000000"], 0xb8}}, 0x0)

305.138762ms ago: executing program 1 (id=500):
r0 = socket(0x10, 0x6, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000006c0)='kvm_ack_irq\x00', r6, 0x0, 0x9}, 0x18)
r7 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f00000002c0)={0xa, 0xe24, 0x0, @rand_addr, 0x8000}, 0x1c)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff)
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf010000000000000010070000000500280080000000050023003d00000300002600030000006c30dc90b680c3af05bb3a2d06365568fb26ca32871b4be85a84abb14967acdc337530a4bb86dafffe48675efd88b349b2cf8e5317ba224d7c2a74c31c5d44f270e11218880edeb7a37a82371c74448b649556715f0d5997252b3d9ea3278cd60a945f08f4c6276242981cb307a57260541a8368c7c44bbe72b3d2a571672de5f7d980c78fac732780b3b5626f250d"], 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x10)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ppoll(&(0x7f0000000000)=[{r2, 0x8503}], 0x1, 0x0, 0x0, 0x0)
close(r1)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@gettfilter={0x4c, 0x2e, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x6, 0xf}, {0xb, 0x7}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}]}, 0x4c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r10, @ANYBLOB], 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0x3}, {0x8, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14)
socket$netlink(0x10, 0x3, 0x0)
r12 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r12, 0x0, 0x0, 0x20004001, &(0x7f0000000600)={0xa, 0x4c21, 0x0, @local, 0xc}, 0x1c)
sendto$inet6(r12, 0x0, 0x0, 0xc001, 0x0, 0x0)
setsockopt$inet6_mtu(r12, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)

206.422343ms ago: executing program 0 (id=501):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140144e70f00010044bd7000fedbdf2520000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b0000000000011907864010101ac14142100004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1372369caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r2}, 0x8)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x9, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x8, 0x1a0b1}}, 0xf8}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000540)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r8, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r9, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000540)={'ipvlan0\x00', 0x2})
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
pwrite64(r7, &(0x7f0000000240)="34cae745095fe9930bf8e82827ab20595169f5afccca76983062d6d293c70b18acbf5a82def30384d198986e94c0a30a12538cbe4baced8b9db662954854da4db6c85e7bc3e962306e75b6cf89439464709bc9ab778045f55323eb3f51cd4f3cd920b160e667ba4ade7ac24a8634ea2c3156531be7833a4ec7373aed2ffcdc28831cd1f03702c32b031c89f89c55e3ab2f848c98cff0de7d661be1e07f8736d882fe075a23f81ea8d7", 0xa9, 0x693)
setsockopt$inet6_mreq(r10, 0x29, 0x6, 0x0, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', 0x7})

84.704502ms ago: executing program 1 (id=502):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0)

3.329895ms ago: executing program 0 (id=503):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b40500000000000061104e0000000000630148000000000095000900000000007240338a9e17f57a6c89d7da9a2074ce3af2aab5eb3272ef9d76564731d742f09687c9235c4d6963c44ac167a10766ff0f11eb01ef14e21906fd3328caa2807dd2aa3be584abbc9292cb952c9508f3c0cfaba7806fedc6ed9ab2622056ff987567a483c3b8dda78995d3875cded06ed673086e06e9a8142f1fbb940820ccb6fc6097e07b90b659517ac40ecfb0c387b78493a12f95493ec5c88b18"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000}, 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)

0s ago: executing program 0 (id=504):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x306}, {&(0x7f0000002b40)="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", 0x2af}], 0x2}, 0x8400)
sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000640)="455b1c1ed5900423c15445e625bc121395a1ca64b3dd6f8aeb723872f617d717a26bf00271b580f6822a2c6896c756f9884b052d314f2a0e782a11c793063457ccd878782b6599e2c51e40ed5142e32cf8b07a76201b7644ac62f011223e925d8565cde47b522a9b86be7847318bfeaf58de2c6a1aebf00c39a22ec6de373ec332917b7586bf8298180eb89831e03feae224ca839e8ca7041056cb9ed42abcd994", 0xa1}, {&(0x7f0000000800)="7e24225d7d1bf3f2c2e3350446b32bcc9a579c864b87c0b26e9513f1a964562cd0fb40e07a028a9e4a8509c6183dc2c51a7f307806ce093fad8f167b3f1656081a0f4b15e021952a5e40d65779b924ed3fd175df8673c7544e9e3b11bc621acae054258215e76d7f16569f3436c00fcc7c6c154f87afc22e0ad2a3737a8f6e1cdf815f357d0b10e57e633006dd00e8cc5c66ddb415a93124d45ef1e687b1e29d9fb742d4f8b91f69854f7ba2eaec1b2782a4807fba2fc86bb82f320faa5da21794d4e6b2795f823dd429c33bb5a117ec441e28", 0xd3}, {&(0x7f0000003ac0)="2a53cd0770cb56176efb16f6bf334dfef1f5138261dd4641915d3f662d3e6212d68f8d4858c19d4cbbf02e016a68afaf64659aff236eaa40ce011e346911d56e41edb29a99f36bc3f3079676185bb9ed6e4d64515fa6e044d944f125c1361526d3fec0c10665e67591c7c8decc2fea5b5d7bfd31a001598bf9e38f888e20277e4dd0b162bc875a663cb089875eab632120f0c0fe060af1b786c841d40016ee27ca43c8b074c156f4035ed224b1d27955ab4165a7a5a489a1c415aadfd8b9bc807cb827560958776e4c9e809428d14f99b3370d9e092e43087b85838e48a9f27a29e96217afdf21ed539d0861bb72e99cfe6e1f3f0ed26bf7451d40f524e2fcd31da1e66facc779f8f9c9feb51666c11e33ed855e83e5511599061325ae57642d3edcd7374de47cd2e9956d9532cc138dcfaf24f0b12c3fc26f186d49f55d2b93e469ac4d2aef0801dc544ca6f41b806a81339717f1c6c46703d3829801b6a53ff73565a11424c16074524ac02e01e4a43c4f3ed6170e7ff5c0a7a7ea74f78e2a31b5f4b7558e402b01d969034fe36fc5b95e8d137d8668ae8cbfc671f4dec2b9c15527800ed2875ecdd550f1962e20c1cb3ebd581e91a1d75439dbde359750dc85b21f65907200ef7e782a5410fc8e1a72623fd839a6f82eb020973ab492569f145621f9ba31b0e889fb3fb257b36222ac3893bfbac673f5d4061667e4f946135f3a23c057fa178a1ffbc8911bde08bb7229a411b4cbe809ff63e10870a9e5a15ff97f3b7726c7f3d3090ecfc6e59d2297a51141381fc2d52de860ce5d90382326aaf013e05548c07ca6c508143d7c1d2075ea08ac37f8c5c6ee3ced89dc11abbd4e3a07e248de32621ac942cb4eb597340ab7c67f5a6652bdb4b977fe9114bb33ca989797b55b3ae5eea8125323a6f390ccb51826ffce0e2c200dd2152452b1b36cf92707e94a5cb62236dfccaecc300725a68627ee1660a3bffa1228ab55f3bf8c00c4bd0406339e1d17a80d1ff3ae5883e3bf66e9fdfad30e01b974387adbeb23c5fc60940d35de39a8f5e517b47790d5552804abe836b0cbcf3fc846db2d6574e9088110bb7754a72ac83a5d4ef254c5e1c965e19cdb9fc9daa14ad75e84749980ad6a2b3934a77ff80adac04299d86c988969bb2e437856985678b95fc70cfabcc0205a0d167235491c41472c369145e9fee64b4d8ddebd9ceaea11119abf06e496d02630f28fc5a352544afb449943adbeed345d77397640789a307bf4730c4204abfb2c4fe82b49eb43111ee36a58bb49c4d678cb5353389e6f7eb68b5d3c19df072e01ab6379c602ee958fd4e44a83ebedcb504e2f39bb379571edc4666dc6bbabe84f8bb3ed7f29130d4f9242fe6217d23dfac7da46078ca09c4a24634d3b384ea715fed43d11509de3fd343a78364382c9439af4a5ab9dd3a7d175ccb75663fa8c0ab50c00bc666ee907a76b23cd079a22e70fb130855f608a3ad4a4742a713b66d01a54ca1eeb9dd8f2d1e6b472ba54625aea553fb9ac", 0x43c}], 0x3}, 0x0)
recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32482' (ED25519) to the list of known hosts.
syzkaller login: [   48.871860][ T5776] cgroup: Unknown subsys name 'net'
[   48.956102][ T5776] cgroup: Unknown subsys name 'cpuset'
[   48.961933][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.814755][ T5776] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.052153][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.056513][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.059514][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.062944][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.066114][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.098970][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.102765][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.110967][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.114273][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.117035][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.138004][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.141770][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.146539][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.150059][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.153748][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.376363][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   56.409247][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   56.526035][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.528377][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.531821][ T5844] bridge_slave_0: entered allmulticast mode
[   56.534914][ T5844] bridge_slave_0: entered promiscuous mode
[   56.539076][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.542021][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.544324][ T5844] bridge_slave_1: entered allmulticast mode
[   56.547345][ T5844] bridge_slave_1: entered promiscuous mode
[   56.607702][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.628542][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   56.641944][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.645725][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.648632][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.652794][ T5849] bridge_slave_0: entered allmulticast mode
[   56.656661][ T5849] bridge_slave_0: entered promiscuous mode
[   56.691279][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.693534][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.695823][ T5849] bridge_slave_1: entered allmulticast mode
[   56.698859][ T5849] bridge_slave_1: entered promiscuous mode
[   56.718678][ T5844] team0: Port device team_slave_0 added
[   56.724461][ T5844] team0: Port device team_slave_1 added
[   56.787284][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.794252][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.798789][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.802292][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.813339][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.838972][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.841849][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.852378][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.882844][ T5849] team0: Port device team_slave_0 added
[   56.929359][ T5849] team0: Port device team_slave_1 added
[   56.932142][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.935079][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.937937][ T5851] bridge_slave_0: entered allmulticast mode
[   56.942550][ T5851] bridge_slave_0: entered promiscuous mode
[   56.947135][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.949937][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.953511][ T5851] bridge_slave_1: entered allmulticast mode
[   56.957309][ T5851] bridge_slave_1: entered promiscuous mode
[   56.980012][ T5844] hsr_slave_0: entered promiscuous mode
[   56.983186][ T5844] hsr_slave_1: entered promiscuous mode
[   57.035705][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.037940][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.047158][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.072715][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.074947][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.083798][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.089960][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.097593][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.148941][ T5851] team0: Port device team_slave_0 added
[   57.157263][ T5851] team0: Port device team_slave_1 added
[   57.220419][ T5849] hsr_slave_0: entered promiscuous mode
[   57.222820][ T5849] hsr_slave_1: entered promiscuous mode
[   57.225103][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   57.227315][ T5849] Cannot create hsr debugfs directory
[   57.229804][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.232831][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.242684][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.253357][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.256032][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.264335][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.324889][ T5851] hsr_slave_0: entered promiscuous mode
[   57.327153][ T5851] hsr_slave_1: entered promiscuous mode
[   57.329311][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   57.331442][ T5851] Cannot create hsr debugfs directory
[   57.415156][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.431115][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.436681][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.463572][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.605914][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.613918][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.622103][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.629031][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.720279][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.727650][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.737532][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.748751][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.757281][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.771766][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   57.787562][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.790148][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.826354][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.828880][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.857903][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.892785][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   57.906213][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.915920][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.923463][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.926014][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.953858][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   57.958674][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.961467][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.992540][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.995058][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.012893][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.015792][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.056789][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.091355][ T5846] Bluetooth: hci0: command tx timeout
[   58.144724][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.171791][ T5846] Bluetooth: hci2: command tx timeout
[   58.174275][ T5846] Bluetooth: hci1: command tx timeout
[   58.216096][ T5844] veth0_vlan: entered promiscuous mode
[   58.227093][ T5844] veth1_vlan: entered promiscuous mode
[   58.268220][ T5844] veth0_macvtap: entered promiscuous mode
[   58.276117][ T5844] veth1_macvtap: entered promiscuous mode
[   58.289833][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.311662][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.329303][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.350508][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.356219][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.360032][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.377906][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.386315][ T5849] veth0_vlan: entered promiscuous mode
[   58.407169][ T5849] veth1_vlan: entered promiscuous mode
[   58.426506][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.459211][ T5849] veth0_macvtap: entered promiscuous mode
[   58.475301][ T5849] veth1_macvtap: entered promiscuous mode
[   58.496620][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.504594][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.521038][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.547031][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.563550][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.567121][ T5851] veth0_vlan: entered promiscuous mode
[   58.571544][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.597140][ T5851] veth1_vlan: entered promiscuous mode
[   58.602468][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.605690][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.626966][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.640293][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.649021][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.694521][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.697106][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.713418][ T5851] veth0_macvtap: entered promiscuous mode
[   58.746012][ T5851] veth1_macvtap: entered promiscuous mode
[   58.750732][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.753216][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.775867][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.782063][ T5907] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.790048][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.805276][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.844628][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.847698][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.858942][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.955808][ T5916] netlink: 'syz.2.3': attribute type 13 has an invalid length.
[   58.956206][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.966068][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.090489][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.093525][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.094479][ T5911] Set syz1 is full, maxelem 6117 reached
[   59.147429][ T5921] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.153416][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.159641][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.263632][ T5924] syz.1.4 uses obsolete (PF_INET,SOCK_PACKET)
[   59.276470][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.279197][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.296342][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.300120][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.306421][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.309316][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.323844][ T5922] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4'.
[   59.354376][ T5928] IPVS: Error connecting to the multicast addr
[   59.422619][ T5905] IPVS: starting estimator thread 0...
[   59.496328][ T5936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6'.
[   59.511433][ T5933] IPVS: using max 63 ests per chain, 151200 per kthread
[   59.558987][ T5937] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6'.
[   59.570223][ T5937] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6'.
[   59.577530][ T5937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.795960][ T5941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8'.
[   60.061415][ T5958] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13'.
[   60.144981][ T5963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13'.
[   60.166606][ T5963] netlink: 'syz.1.13': attribute type 10 has an invalid length.
[   60.176521][   T55] Bluetooth: hci0: command tx timeout
[   60.200320][ T5932] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   60.252576][   T55] Bluetooth: hci1: command tx timeout
[   60.255385][   T55] Bluetooth: hci2: command tx timeout
[   60.336582][ T5977] Zero length message leads to an empty skb
[   60.535691][ T5994] netlink: 64 bytes leftover after parsing attributes in process `syz.0.19'.
[   60.549817][ T5994] netlink: 'syz.0.19': attribute type 32 has an invalid length.
[   60.552696][ T5994] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19'.
[   60.949720][ T6013] netlink: 'syz.1.21': attribute type 3 has an invalid length.
[   60.966311][ T6013] ieee802154 phy0 wpan0: encryption failed: -90
[   61.314646][ T6024] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.398484][  T974] IPVS: starting estimator thread 0...
[   61.500747][ T6029] IPVS: using max 44 ests per chain, 105600 per kthread
[   62.260690][ T5846] Bluetooth: hci0: command 0x040f tx timeout
[   62.340849][   T55] Bluetooth: hci1: command tx timeout
[   62.342904][ T5846] Bluetooth: hci2: command tx timeout
[   63.421134][ T6146] netlink: 'syz.2.35': attribute type 29 has an invalid length.
[   63.424845][ T6146] netlink: 'syz.2.35': attribute type 29 has an invalid length.
[   63.428272][ T6149] netlink: 'syz.2.35': attribute type 29 has an invalid length.
[   63.833256][ T6185] __nla_validate_parse: 17 callbacks suppressed
[   63.833267][ T6185] netlink: 172 bytes leftover after parsing attributes in process `syz.0.45'.
[   63.833270][ T6190] netlink: 172 bytes leftover after parsing attributes in process `syz.0.45'.
[   63.947426][ T6192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.46'.
[   64.005708][ T6194] netlink: 104 bytes leftover after parsing attributes in process `syz.0.47'.
[   64.012149][ T6195] netlink: 104 bytes leftover after parsing attributes in process `syz.0.47'.
[   64.045421][ T6197] syzkaller0: entered promiscuous mode
[   64.047318][ T6197] syzkaller0: entered allmulticast mode
[   64.050359][   T13] syzkaller0: tun_net_xmit 70
[   64.052967][ T6197] syzkaller0: tun_chr_ioctl cmd 1074025677
[   64.055662][ T6197] syzkaller0: Linktype set failed because interface is up
[   64.059160][ T6197] netlink: 'syz.0.48': attribute type 22 has an invalid length.
[   64.137575][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'.
[   64.141139][ T6199] netlink: 'syz.0.49': attribute type 14 has an invalid length.
[   64.153388][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.153408][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'.
[   64.153425][ T6199] netlink: 'syz.0.49': attribute type 14 has an invalid length.
[   64.156958][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.166878][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.170366][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   64.314950][  T974] IPVS: starting estimator thread 0...
[   64.340765][ T5846] Bluetooth: hci0: command 0x040f tx timeout
[   64.410694][   T55] Bluetooth: hci1: command tx timeout
[   64.412591][ T5846] Bluetooth: hci2: command tx timeout
[   64.414401][ T6207] IPVS: using max 63 ests per chain, 151200 per kthread
[   64.478834][ T6212] tipc: Started in network mode
[   64.480491][ T6212] tipc: Node identity a605d6cf2857, cluster identity 4711
[   64.483607][ T6212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.486095][ T6212] syzkaller0: entered promiscuous mode
[   64.487805][ T6212] syzkaller0: entered allmulticast mode
[   64.500164][ T6212] tipc: Resetting bearer <eth:syzkaller0>
[   64.504956][ T6212] netlink: 184 bytes leftover after parsing attributes in process `syz.2.53'.
[   64.510486][ T6211] tipc: Resetting bearer <eth:syzkaller0>
[   64.518342][ T6211] tipc: Disabling bearer <eth:syzkaller0>
[   64.783088][ T6221] Set syz1 is full, maxelem 6117 reached
[   64.820478][ T6232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.873279][ T6235] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   64.935359][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'.
[   65.134974][ T6249] xt_l2tp: missing protocol rule (udp|l2tpip)
[   65.139310][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'.
[   65.267015][ T6256] syzkaller1: entered promiscuous mode
[   65.268807][ T6256] syzkaller1: entered allmulticast mode
[   65.336783][ T6263] Bluetooth: MGMT ver 1.23
[   66.493667][ T5846] Bluetooth: hci2: command tx timeout
[   66.516725][ T6345] sch_tbf: burst 127 is lower than device ipvlan1 mtu (1514) !
[   66.652802][ T6355] batadv1: entered promiscuous mode
[   66.654902][ T6355] batadv1: entered allmulticast mode
[   66.760127][ T6373] unsupported nlmsg_type 40
[   67.176375][ T6417] warning: `syz.0.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.263140][ T6428] netlink: 'syz.2.117': attribute type 6 has an invalid length.
[   67.277295][ T6428] tc_dump_action: action bad kind
[   67.454249][   T53] wlan0: Trigger new scan to find an IBSS to join
[   67.490192][ T6449] netlink: 'syz.1.123': attribute type 29 has an invalid length.
[   67.497686][ T6449] netlink: 'syz.1.123': attribute type 29 has an invalid length.
[   67.672629][ T6467] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   67.722595][ T6472] macvtap1: entered promiscuous mode
[   67.724628][ T6472] syz_tun: entered promiscuous mode
[   67.726742][ T6472] macvtap1: entered allmulticast mode
[   67.728791][ T6472] syz_tun: entered allmulticast mode
[   67.810323][ T6480] netlink: 'syz.1.132': attribute type 13 has an invalid length.
[   67.904173][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.906734][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.004470][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.021282][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.225510][ T5872] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.231205][ T5872] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.236525][ T5872] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.239928][ T5872] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.248497][ T6489] netlink: 'syz.1.134': attribute type 62 has an invalid length.
[   68.465361][ T6512] netlink: 'syz.1.140': attribute type 13 has an invalid length.
[   68.483278][ T6516] veth0: entered promiscuous mode
[   68.488986][ T6513] veth0: left promiscuous mode
[   68.583894][ T6526] netlink: 'syz.0.144': attribute type 29 has an invalid length.
[   68.680166][ T6535] Bluetooth: MGMT ver 1.23
[   68.818583][ T6550] !: renamed from dummy0
[   69.277614][ T6584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   69.325740][ T6602] __nla_validate_parse: 26 callbacks suppressed
[   69.325755][ T6602] netlink: 80 bytes leftover after parsing attributes in process `syz.1.160'.
[   69.333088][ T6603] netlink: 80 bytes leftover after parsing attributes in process `syz.1.160'.
[   69.337585][ T6602] netlink: 64 bytes leftover after parsing attributes in process `syz.1.160'.
[   69.496947][ T6612] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   69.527391][ T6614] netlink: 'syz.1.165': attribute type 13 has an invalid length.
[   69.711417][ T6624] netlink: 'syz.0.167': attribute type 22 has an invalid length.
[   69.862665][ T6634] netlink: 88 bytes leftover after parsing attributes in process `syz.0.171'.
[   69.869088][ T6635] netlink: 'syz.1.172': attribute type 13 has an invalid length.
[   69.923529][ T6634] wireguard0: entered promiscuous mode
[   69.924166][ T6639] netlink: 124 bytes leftover after parsing attributes in process `syz.1.173'.
[   69.926301][ T6634] wireguard0: entered allmulticast mode
[   69.936617][ T6639] veth2: entered allmulticast mode
[   70.060130][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'.
[   70.135607][ T6646] netlink: 240 bytes leftover after parsing attributes in process `syz.2.176'.
[   70.154627][ T6651] tipc: Started in network mode
[   70.156357][ T6651] tipc: Node identity 66a5b58345ad, cluster identity 4711
[   70.160342][ T6651] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.177874][ T6651] syz_tun: entered promiscuous mode
[   70.181948][ T6651] syz_tun: entered allmulticast mode
[   70.195592][ T6650] tipc: Disabling bearer <eth:syzkaller0>
[   70.490786][   T28] wlan0: Trigger new scan to find an IBSS to join
[   70.937070][ T6676] netlink: 277 bytes leftover after parsing attributes in process `syz.0.183'.
[   70.944443][ T6676] tipc: Started in network mode
[   70.946217][ T6676] tipc: Node identity 4, cluster identity 4711
[   70.948169][ T6676] tipc: Node number set to 4
[   70.954637][ T6676] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.959099][ T6676] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.969783][ T6676] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   70.977689][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.120914][ T6681] netlink: 'syz.0.185': attribute type 13 has an invalid length.
[   71.237854][ T6680] Set syz1 is full, maxelem 6117 reached
[   71.331652][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.343245][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.524119][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.527553][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.552160][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.555714][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.559176][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.563198][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.566679][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.570005][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.712604][ T6694] netlink: 104 bytes leftover after parsing attributes in process `syz.0.190'.
[   71.757779][ T6697] IPVS: set_ctl: invalid protocol: 58 172.30.1.1:20001
[   71.779094][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'.
[   71.926612][ T6708] netlink: 'syz.1.194': attribute type 29 has an invalid length.
[   71.935160][ T6708] netlink: 'syz.1.194': attribute type 29 has an invalid length.
[   73.450974][   T36] wlan0: Trigger new scan to find an IBSS to join
[   73.561611][ T6783] !: renamed from dummy0
[   73.764350][ T6802] syz_tun: Device is already in use.
[   74.087069][ T6837] netlink: 'syz.1.236': attribute type 1 has an invalid length.
[   74.158398][   T57] block nbd0: Receive control failed (result -11)
[   74.393668][ T6866] __nla_validate_parse: 11 callbacks suppressed
[   74.393679][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'.
[   74.634520][ T6904] netlink: 104 bytes leftover after parsing attributes in process `syz.0.246'.
[   74.734329][ T6907] netlink: 120 bytes leftover after parsing attributes in process `syz.2.248'.
[   74.836770][ T6924] IPVS: persistence engine module ip_vs_pe_@ not found
[   75.119087][ T6956] netlink: 'syz.2.258': attribute type 29 has an invalid length.
[   75.123499][ T6956] netlink: 'syz.2.258': attribute type 29 has an invalid length.
[   75.126340][ T6956] netlink: 500 bytes leftover after parsing attributes in process `syz.2.258'.
[   75.158229][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[   75.162639][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[   75.165345][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[   75.213299][ T6965] netlink: 'syz.2.262': attribute type 12 has an invalid length.
[   75.290010][ T6966] netlink: 184 bytes leftover after parsing attributes in process `syz.2.262'.
[   75.498397][ T6983] netlink: 104 bytes leftover after parsing attributes in process `syz.2.267'.
[   75.547646][ T6986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.269'.
[   75.618603][ T6990] netlink: 'syz.1.270': attribute type 29 has an invalid length.
[   75.621833][ T6990] netlink: 'syz.1.270': attribute type 29 has an invalid length.
[   75.939448][ T7023] netlink: 'syz.2.282': attribute type 1 has an invalid length.
[   76.137326][ T7048] netlink: 'syz.0.291': attribute type 13 has an invalid length.
[   76.165209][ T7051] bridge2: entered allmulticast mode
[   76.170868][ T5846] Bluetooth: hci1: command tx timeout
[   76.360953][ T7075] netlink: 'syz.0.299': attribute type 13 has an invalid length.
[   76.459805][ T7079] syzkaller1: entered promiscuous mode
[   76.464047][ T7079] syzkaller1: entered allmulticast mode
[   76.471661][ T7079] netlink: 'syz.0.301': attribute type 30 has an invalid length.
[   76.711051][ T7086] 8021q: VLANs not supported on ipvlan0
[   76.953233][ T7100] netlink: 'syz.1.306': attribute type 13 has an invalid length.
[   77.576609][ T7150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.243968][ T7155] tc_dump_action: action bad kind
[   79.362915][ T7195] bridge_slave_0: left allmulticast mode
[   79.370482][ T7195] bridge_slave_0: left promiscuous mode
[   79.377931][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.383745][ T7195] bridge_slave_1: left allmulticast mode
[   79.385559][ T7195] bridge_slave_1: left promiscuous mode
[   79.387515][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.392783][ T7195] bond0: (slave bond_slave_0): Releasing backup interface
[   79.396362][ T7195] bond0: (slave bond_slave_1): Releasing backup interface
[   79.400113][ T7195] team0: Port device team_slave_0 removed
[   79.404787][ T7195] team0: Port device team_slave_1 removed
[   79.407174][ T7195] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.410245][ T7195] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.414954][ T7195] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   79.687038][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   80.306183][ T7241] validate_nla: 1 callbacks suppressed
[   80.306237][ T7241] netlink: 'syz.1.344': attribute type 22 has an invalid length.
[   80.317912][ T7241] __nla_validate_parse: 35 callbacks suppressed
[   80.317921][ T7241] netlink: 76 bytes leftover after parsing attributes in process `syz.1.344'.
[   80.415924][ T7220] netlink: 'syz.0.343': attribute type 1 has an invalid length.
[   80.419042][ T7220] netlink: 236 bytes leftover after parsing attributes in process `syz.0.343'.
[   80.491512][ T7250] netlink: 120 bytes leftover after parsing attributes in process `syz.2.346'.
[   80.513621][ T7257] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   80.516713][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'.
[   80.519667][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'.
[   80.533900][ T7255] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   80.537003][ T7255] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   80.569456][ T7262] netlink: 'syz.1.351': attribute type 13 has an invalid length.
[   80.581555][ T7255] netlink: 320 bytes leftover after parsing attributes in process `syz.0.348'.
[   80.661675][ T7266] syzkaller1: entered promiscuous mode
[   80.663324][ T7266] syzkaller1: entered allmulticast mode
[   80.794516][ T7273] netlink: 277 bytes leftover after parsing attributes in process `syz.0.355'.
[   80.886102][ T7280] netlink: 'syz.1.358': attribute type 13 has an invalid length.
[   81.212974][  T792] cfg80211: failed to load regulatory.db
[   81.396965][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.365'.
[   81.601357][ T7305] netlink: 'syz.2.366': attribute type 13 has an invalid length.
[   81.621623][ T7305] syz_tun: left allmulticast mode
[   81.623545][ T7305] syz_tun: left promiscuous mode
[   81.637898][ T7304] Set syz1 is full, maxelem 6117 reached
[   81.901031][ T7317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.370'.
[   82.136449][ T7338] netlink: 176 bytes leftover after parsing attributes in process `syz.2.375'.
[   82.287289][ T7344] netlink: 'syz.2.378': attribute type 1 has an invalid length.
[   83.389124][ T7399] netlink: 'syz.0.393': attribute type 9 has an invalid length.
[   83.393068][ T7399] netlink: 'syz.0.393': attribute type 7 has an invalid length.
[   83.396036][ T7399] netlink: 'syz.0.393': attribute type 8 has an invalid length.
[   83.563829][ T7410] openvswitch: netlink: Flow key attr not present in new flow.
[   83.953353][ T7431] "syz.1.404" (7431) uses obsolete ecb(arc4) skcipher
[   84.050293][   T12] nci: nci_rx_work: unknown MT 0x1
[   84.141859][ T7394] delete_channel: no stack
[   84.491102][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   84.951214][ T7468] netlink: 'syz.2.416': attribute type 13 has an invalid length.
[   85.156583][ T7480] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   85.589862][ T7502] netlink: 'syz.1.424': attribute type 13 has an invalid length.
[   85.654449][ T7504] __nla_validate_parse: 15 callbacks suppressed
[   85.654471][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.425'.
[   85.716739][ T7505] netlink: 96 bytes leftover after parsing attributes in process `syz.1.425'.
[   85.942202][ T7509] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   86.063788][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.428'.
[   86.179707][ T7522] netlink: 104 bytes leftover after parsing attributes in process `syz.0.431'.
[   86.248317][ T7530] netlink: 128 bytes leftover after parsing attributes in process `syz.0.434'.
[   86.250121][ T7524] netlink: 'syz.2.432': attribute type 32 has an invalid length.
[   86.254979][ T7530] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   86.260178][ T7524] netlink: 60 bytes leftover after parsing attributes in process `syz.2.432'.
[   86.306418][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'.
[   86.312867][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'.
[   86.366778][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'.
[   86.560001][ T7563] netlink: 'syz.1.442': attribute type 13 has an invalid length.
[   86.635144][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.445'.
[   86.693398][ T7574] syzkaller0: entered promiscuous mode
[   86.695627][ T7574] syzkaller0: entered allmulticast mode
[   86.698331][   T12] syzkaller0: tun_net_xmit 70
[   86.700437][ T7574] syzkaller0: tun_chr_ioctl cmd 1074025677
[   86.702946][ T7574] syzkaller0: Linktype set failed because interface is up
[   86.786012][ T7581] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   86.925439][ T7592] netlink: 'syz.1.453': attribute type 29 has an invalid length.
[   86.929485][ T7592] netlink: 'syz.1.453': attribute type 29 has an invalid length.
[   87.062417][ T7601] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   87.201915][ T7605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   87.206276][ T7604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   87.258925][ T7615] netlink: 'syz.2.460': attribute type 13 has an invalid length.
[   87.984704][ T7658] netlink: 'syz.1.473': attribute type 13 has an invalid length.
[   88.014062][ T7660] netlink: 'syz.1.474': attribute type 1 has an invalid length.
[   88.032796][ T7660] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.047085][ T7660] bond1: (slave geneve2): making interface the new active one
[   88.051902][ T7660] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   88.055034][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.058463][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.063737][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.066977][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.109539][ T7663] C: renamed from lo
[   88.116165][ T7663] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   88.125069][ T7663] netlink: 'syz.1.475': attribute type 1 has an invalid length.
[   88.152315][ T7663] bond2 (unregistering): Released all slaves
[   88.357835][ T7675] netlink: 'syz.1.480': attribute type 13 has an invalid length.
[   88.384080][ T5872] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.388507][ T5872] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.394243][ T5872] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.397366][ T5872] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.536469][ T7691] openvswitch: netlink: Missing key (keys=40, expected=100)
[   89.875679][ T7755] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[   89.880128][ T7755] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[   89.883829][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.0.504 Not tainted syzkaller #0 PREEMPT(full) 
[   89.887536][ T7755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.891270][ T7755] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[   89.893310][ T7755] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 f6 93 ff f7 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 bf 94 ff f7 4d 89 3e
[   89.900354][ T7755] RSP: 0018:ffffc90007e070e0 EFLAGS: 00010246
[   89.902663][ T7755] RAX: 0000000000000000 RBX: 1ffff11022bdb9b6 RCX: dffffc0000000000
[   89.905633][ T7755] RDX: ffffc90003b92000 RSI: 00000000000001bc RDI: 00000000000001bd
[   89.908588][ T7755] RBP: ffffc90007e07230 R08: dffffc0000000000 R09: 0000000000000002
[   89.911580][ T7755] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff110073189b6
[   89.914560][ T7755] R13: ffff888115edcdb0 R14: 0000000000000000 R15: ffff888115edcda8
[   89.917558][ T7755] FS:  00007efc1d1f66c0(0000) GS:ffff8880b863d000(0000) knlGS:0000000000000000
[   89.920891][ T7755] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   89.923370][ T7755] CR2: 000000110c393038 CR3: 000000004000a000 CR4: 00000000000006f0
[   89.926407][ T7755] Call Trace:
[   89.927741][ T7755]  <TASK>
[   89.928910][ T7755]  ? xfrm_alloc_spi+0x2a0/0xf30
[   89.930869][ T7755]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[   89.932941][ T7755]  ? xfrm_find_acq+0x87/0xa0
[   89.934728][ T7755]  xfrm_alloc_userspi+0x70b/0xc90
[   89.936651][ T7755]  ? apparmor_capable+0x137/0x1b0
[   89.938616][ T7755]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[   89.940707][ T7755]  ? __nla_parse+0x40/0x60
[   89.942456][ T7755]  xfrm_user_rcv_msg+0x7a3/0xab0
[   89.944345][ T7755]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   89.946385][ T7755]  ? __pfx___mutex_trylock_common+0x10/0x10
[   89.948618][ T7755]  ? rcu_is_watching+0x15/0xb0
[   89.950405][ T7755]  ? trace_contention_end+0x39/0x120
[   89.952372][ T7755]  ? __mutex_lock+0x335/0x1350
[   89.954190][ T7755]  netlink_rcv_skb+0x208/0x470
[   89.955991][ T7755]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   89.958003][ T7755]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   89.959993][ T7755]  ? netlink_deliver_tap+0x2e/0x1b0
[   89.961906][ T7755]  ? netlink_deliver_tap+0x2e/0x1b0
[   89.963848][ T7755]  xfrm_netlink_rcv+0x79/0x90
[   89.965630][ T7755]  netlink_unicast+0x82f/0x9e0
[   89.967427][ T7755]  ? __pfx_netlink_unicast+0x10/0x10
[   89.969380][ T7755]  ? netlink_sendmsg+0x642/0xb30
[   89.971276][ T7755]  ? skb_put+0x11b/0x210
[   89.972879][ T7755]  netlink_sendmsg+0x805/0xb30
[   89.974683][ T7755]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.976632][ T7755]  ? aa_sock_msg_perm+0xf1/0x1d0
[   89.978461][ T7755]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   89.980422][ T7755]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.982372][ T7755]  __sock_sendmsg+0x21c/0x270
[   89.984127][ T7755]  ____sys_sendmsg+0x505/0x830
[   89.985911][ T7755]  ? __pfx_____sys_sendmsg+0x10/0x10
[   89.987877][ T7755]  ? import_iovec+0x74/0xa0
[   89.989578][ T7755]  ___sys_sendmsg+0x21f/0x2a0
[   89.991378][ T7755]  ? __pfx____sys_sendmsg+0x10/0x10
[   89.993330][ T7755]  ? __fget_files+0x2a/0x420
[   89.995025][ T7755]  ? __fget_files+0x3a0/0x420
[   89.996768][ T7755]  __x64_sys_sendmsg+0x19b/0x260
[   89.998608][ T7755]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   90.000603][ T7755]  ? rcu_is_watching+0x15/0xb0
[   90.002393][ T7755]  ? do_syscall_64+0xbe/0x3b0
[   90.004129][ T7755]  do_syscall_64+0xfa/0x3b0
[   90.005821][ T7755]  ? lockdep_hardirqs_on+0x9c/0x150
[   90.007781][ T7755]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.009999][ T7755]  ? exc_page_fault+0x9f/0xf0
[   90.011758][ T7755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.013957][ T7755] RIP: 0033:0x7efc1ef8ec29
[   90.015664][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.022735][ T7755] RSP: 002b:00007efc1d1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.025802][ T7755] RAX: ffffffffffffffda RBX: 00007efc1f1d5fa0 RCX: 00007efc1ef8ec29
[   90.028707][ T7755] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000008
[   90.031605][ T7755] RBP: 00007efc1f011e41 R08: 0000000000000000 R09: 0000000000000000
[   90.034553][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.037604][ T7755] R13: 00007efc1f1d6038 R14: 00007efc1f1d5fa0 R15: 00007fff1922d738
[   90.040607][ T7755]  </TASK>
[   90.041804][ T7755] Modules linked in:
[   90.043519][ T7755] ---[ end trace 0000000000000000 ]---
[   90.045564][ T7755] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[   90.047655][ T7755] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 f6 93 ff f7 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 bf 94 ff f7 4d 89 3e
[   90.055060][ T7755] RSP: 0018:ffffc90007e070e0 EFLAGS: 00010246
[   90.057365][ T7755] RAX: 0000000000000000 RBX: 1ffff11022bdb9b6 RCX: dffffc0000000000
[   90.060351][ T7755] RDX: ffffc90003b92000 RSI: 00000000000001bc RDI: 00000000000001bd
[   90.063396][ T7755] RBP: ffffc90007e07230 R08: dffffc0000000000 R09: 0000000000000002
[   90.066342][ T7755] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff110073189b6
[   90.069264][ T7755] R13: ffff888115edcdb0 R14: 0000000000000000 R15: ffff888115edcda8
[   90.072332][ T7755] FS:  00007efc1d1f66c0(0000) GS:ffff8880b863d000(0000) knlGS:0000000000000000
[   90.075655][ T7755] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   90.078103][ T7755] CR2: 000000110c393038 CR3: 000000004000a000 CR4: 00000000000006f0
[   90.081214][ T7755] Kernel panic - not syncing: Fatal exception in interrupt
[   90.084597][ T7755] Kernel Offset: disabled
[   90.086227][ T7755] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:46:36  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000db3 RDI=0000000000000db4 RBP=00000000000003f8 RSP=ffffc90007e06910
R8 =ffff888021220237 R9 =1ffff11004244046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad7917 R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efc1d1f66c0 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c393038 CR3=000000004000a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007efc1f1a7498 00007efc1f1a7470 XMM03=00007efc1f1a74a8 00007efc1f1a74a0
XMM04=00007efc1fd0d100 00007efc1f1a7460 XMM05=00007efc1f1a7478 00007efc1f1a74c0
XMM06=00007efc1f1a74b8 00007efc1f1a74b0 XMM07=00007efc1f1a74a8 00007efc1f1a74a0
XMM08=0000000000000000 00007efc1f012f0f XMM09=0000000000000000 00007efc1f012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=ffffffff8be33ee0 RDI=ffffffff8be33ea0 RBP=ffffffff8172c195 RSP=ffffc90007d176b0
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90007d178b8 R11=ffffffff81ac3b00
R12=0000000000000002 R13=ffffffff8e13a0e0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8b731156 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555577516500 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32222ff8 CR3=000000011a18e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7a187a7498 00007f7a187a7470 XMM03=00007f7a187a74a8 00007f7a187a74a0
XMM04=00007f7a1930d100 00007f7a187a7460 XMM05=00007f7a187a7478 00007f7a187a74c0
XMM06=00007f7a187a74b8 00007f7a187a74b0 XMM07=00007f7a187a74a8 00007f7a187a74a0
XMM08=0000000000000000 00007f7a18612f0f XMM09=0000000000000000 00007f7a18612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
