last executing test programs:

1.293970052s ago: executing program 0 (id=254):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x0)

1.292303214s ago: executing program 0 (id=255):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

1.119126451s ago: executing program 1 (id=256):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0)

884.864938ms ago: executing program 1 (id=259):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x20000006, 0x4)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

805.259748ms ago: executing program 1 (id=261):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x5f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x55}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000d811}, 0x4000080)
recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4073, 0xe7c}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x75}, 0x40000020)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)
socket$kcm(0x2, 0xa, 0x2)
socket(0x200000000000011, 0x2, 0x1)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xfffffffb}, 0x1f)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0xfffd, @multicast1}}, 0xfffb}, 0x90)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000240)=<r8=>0x0)
syz_open_procfs$namespace(r8, &(0x7f0000000280)='ns/uts\x00')
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

569.587407ms ago: executing program 2 (id=266):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8)

510.611892ms ago: executing program 2 (id=267):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

474.256993ms ago: executing program 2 (id=268):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="050000000000fdffffff0600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000a00e8"], 0xac}, 0x1, 0x0, 0x0, 0x4800}, 0xc810)

412.721951ms ago: executing program 1 (id=269):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0)

409.480435ms ago: executing program 0 (id=270):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0)

355.640549ms ago: executing program 2 (id=271):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xfffffda7, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x50}}, 0x20000000)

355.209082ms ago: executing program 1 (id=272):
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2)

220.710638ms ago: executing program 2 (id=273):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xa00}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

220.423084ms ago: executing program 0 (id=274):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

130.110463ms ago: executing program 0 (id=275):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2)
write$cgroup_type(r1, &(0x7f0000000100), 0x9)

129.755529ms ago: executing program 2 (id=276):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x14}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x13}}}, 0x24}}, 0x20044810)

49.428821ms ago: executing program 0 (id=277):
unshare(0x2c020680)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = epoll_create1(0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xa000001c})

0s ago: executing program 1 (id=278):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0x1c000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31444' (ED25519) to the list of known hosts.
syzkaller login: [   56.367689][ T5819] cgroup: Unknown subsys name 'net'
[   56.516417][ T5819] cgroup: Unknown subsys name 'cpuset'
[   56.523418][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.876271][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.939034][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.942432][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.945334][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.951651][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.956942][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.992747][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.996637][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.000659][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.005947][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.009924][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.033714][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.037585][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.041779][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.048261][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.051674][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.357671][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   62.438386][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   62.495500][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   62.503185][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.506180][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.508687][ T5834] bridge_slave_0: entered allmulticast mode
[   62.512010][ T5834] bridge_slave_0: entered promiscuous mode
[   62.531840][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.534751][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.537388][ T5834] bridge_slave_1: entered allmulticast mode
[   62.540238][ T5834] bridge_slave_1: entered promiscuous mode
[   62.594132][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.615012][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.654064][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.656980][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.659457][ T5841] bridge_slave_0: entered allmulticast mode
[   62.662358][ T5841] bridge_slave_0: entered promiscuous mode
[   62.667454][ T5834] team0: Port device team_slave_0 added
[   62.680331][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.683450][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.686697][ T5838] bridge_slave_0: entered allmulticast mode
[   62.690697][ T5838] bridge_slave_0: entered promiscuous mode
[   62.695267][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.698416][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.701569][ T5841] bridge_slave_1: entered allmulticast mode
[   62.706235][ T5841] bridge_slave_1: entered promiscuous mode
[   62.710500][ T5834] team0: Port device team_slave_1 added
[   62.720058][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.724914][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.728076][ T5838] bridge_slave_1: entered allmulticast mode
[   62.732662][ T5838] bridge_slave_1: entered promiscuous mode
[   62.799371][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.805750][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.808578][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.819081][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.826512][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.832099][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.836640][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.839446][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.850082][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.885003][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.901947][ T5841] team0: Port device team_slave_0 added
[   62.906888][ T5841] team0: Port device team_slave_1 added
[   62.935043][ T5838] team0: Port device team_slave_0 added
[   62.939701][ T5838] team0: Port device team_slave_1 added
[   62.987745][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.990595][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.001282][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.013391][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.015903][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.024759][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.031560][ T5834] hsr_slave_0: entered promiscuous mode
[   63.036048][ T5834] hsr_slave_1: entered promiscuous mode
[   63.039224][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.041842][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.051462][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.063451][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.066154][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.074728][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.138253][ T5838] hsr_slave_0: entered promiscuous mode
[   63.140712][ T5838] hsr_slave_1: entered promiscuous mode
[   63.143295][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.145781][ T5838] Cannot create hsr debugfs directory
[   63.182752][ T5841] hsr_slave_0: entered promiscuous mode
[   63.185497][ T5841] hsr_slave_1: entered promiscuous mode
[   63.187545][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.189889][ T5841] Cannot create hsr debugfs directory
[   63.455997][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.467147][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.481092][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.488321][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.536085][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.546915][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.554337][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.576171][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.628224][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.633166][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.638691][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.648782][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.711166][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.743825][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   63.759455][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.762365][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.774096][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.776520][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.784254][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.809576][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.824846][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   63.847100][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.850236][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.868058][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.871018][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.881097][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   63.917412][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.920526][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.946241][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.949136][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.987130][   T55] Bluetooth: hci0: command tx timeout
[   64.063327][   T55] Bluetooth: hci1: command tx timeout
[   64.075810][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.144249][   T55] Bluetooth: hci2: command tx timeout
[   64.155645][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.163823][ T5834] veth0_vlan: entered promiscuous mode
[   64.180096][ T5834] veth1_vlan: entered promiscuous mode
[   64.231067][ T5841] veth0_vlan: entered promiscuous mode
[   64.238462][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.257321][ T5841] veth1_vlan: entered promiscuous mode
[   64.270343][ T5834] veth0_macvtap: entered promiscuous mode
[   64.285442][ T5834] veth1_macvtap: entered promiscuous mode
[   64.321214][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.326147][ T5838] veth0_vlan: entered promiscuous mode
[   64.333342][ T5841] veth0_macvtap: entered promiscuous mode
[   64.344392][ T5838] veth1_vlan: entered promiscuous mode
[   64.357025][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.361458][ T5841] veth1_macvtap: entered promiscuous mode
[   64.385203][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.391601][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.397071][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.403775][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.415323][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.441647][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.458378][ T5698] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.478574][ T5838] veth0_macvtap: entered promiscuous mode
[   64.482513][ T5863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.486513][ T5863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.489927][ T5863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.507738][ T5838] veth1_macvtap: entered promiscuous mode
[   64.543107][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.545658][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.561150][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.576585][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.600963][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.619786][ T5863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.631671][ T5863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.634790][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.637531][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.640889][ T5863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.646979][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.649628][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.724296][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.733872][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.765210][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.768315][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.787544][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.826579][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.830969][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.177442][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15'.
[   65.181341][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15'.
[   65.271865][ T5936] Zero length message leads to an empty skb
[   65.696843][ T5966] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.886637][ T5979] syz.2.41 uses obsolete (PF_INET,SOCK_PACKET)
[   66.060754][   T55] Bluetooth: hci0: command tx timeout
[   66.142927][   T55] Bluetooth: hci1: command tx timeout
[   66.213891][   T55] Bluetooth: hci2: command tx timeout
[   66.459223][ T6022] netlink: 104 bytes leftover after parsing attributes in process `syz.0.56'.
[   66.869370][ T6039] netlink: 'syz.0.64': attribute type 6 has an invalid length.
[   66.874517][ T6039] netlink: 'syz.0.64': attribute type 6 has an invalid length.
[   68.133089][   T55] Bluetooth: hci0: command tx timeout
[   68.212499][   T55] Bluetooth: hci1: command tx timeout
[   68.295918][   T55] Bluetooth: hci2: command tx timeout
[   68.337423][ T6113] bridge0: entered allmulticast mode
[   68.345624][ T6113] pim6reg: entered allmulticast mode
[   68.386780][ T6115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.86'.
[   68.435059][ T6121] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.591570][ T6130] veth0: entered promiscuous mode
[   68.596877][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'.
[   68.637321][ T6134] netlink: 76 bytes leftover after parsing attributes in process `syz.1.95'.
[   68.640663][ T6134] nbd: illegal input index 65508
[   68.674818][ T6136] veth1_macvtap: left promiscuous mode
[   68.676964][ T6136] macsec0: entered promiscuous mode
[   68.685324][ T6136] veth1_macvtap: entered promiscuous mode
[   68.688080][ T6136] macsec0: left promiscuous mode
[   68.859825][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'.
[   69.160459][ T6166] Bluetooth: MGMT ver 1.23
[   69.209245][ T6170] IPv6: Can't replace route, no match found
[   69.217718][ T6171] warning: `syz.1.109' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.288037][ T6175] tipc: Started in network mode
[   69.289802][ T6175] tipc: Node identity 52bff55236b5, cluster identity 4711
[   69.294160][ T6175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.297301][ T6175] syzkaller0: entered promiscuous mode
[   69.299137][ T6175] syzkaller0: entered allmulticast mode
[   69.314012][ T6175] tipc: Resetting bearer <eth:syzkaller0>
[   69.317753][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'.
[   69.326062][ T6174] tipc: Resetting bearer <eth:syzkaller0>
[   69.334832][ T6174] tipc: Disabling bearer <eth:syzkaller0>
[   69.595247][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'.
[   69.599585][ T6191] veth2: entered promiscuous mode
[   69.601812][ T6191] veth2: entered allmulticast mode
[   69.609279][ T6194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.119'.
[   69.718151][ T6199] netlink: 'syz.2.121': attribute type 2 has an invalid length.
[   70.016358][ T6213] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.030442][ T6218] bond_slave_0: entered promiscuous mode
[   70.033133][ T6218] bond_slave_1: entered promiscuous mode
[   70.044538][ T6218] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   70.049756][ T6218] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   70.119238][ T6213] bridge_slave_0: left allmulticast mode
[   70.121746][ T6213] bridge_slave_0: left promiscuous mode
[   70.128976][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.146191][ T6213] bridge_slave_1: left allmulticast mode
[   70.148807][ T6213] bridge_slave_1: left promiscuous mode
[   70.169854][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.191622][ T6213] bond0: (slave bond_slave_0): Releasing backup interface
[   70.203269][ T6213] bond_slave_0: left promiscuous mode
[   70.212780][   T55] Bluetooth: hci0: command tx timeout
[   70.234250][ T6213] bond0: (slave bond_slave_1): Releasing backup interface
[   70.249445][ T6213] bond_slave_1: left promiscuous mode
[   70.266113][ T6213] team0: Port device team_slave_0 removed
[   70.280780][ T6213] team0: Port device team_slave_1 removed
[   70.292731][   T55] Bluetooth: hci1: command tx timeout
[   70.293519][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.303059][ T6213] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.316231][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.319655][ T6213] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.373096][   T55] Bluetooth: hci2: command tx timeout
[   70.379085][ T6213] bond1: (slave macvlan2): Removing an active aggregator
[   70.381781][ T6233] __nla_validate_parse: 1 callbacks suppressed
[   70.381794][ T6233] netlink: 14 bytes leftover after parsing attributes in process `syz.0.135'.
[   70.387901][ T6213] bond1: (slave macvlan2): Releasing backup interface
[   70.418759][ T6213] syz.2.128 (6213) used greatest stack depth: 19832 bytes left
[   70.618667][ T6243] tipc: Started in network mode
[   70.621202][ T6243] tipc: Node identity 46b3efc6cc02, cluster identity 4711
[   70.635577][ T6243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.669501][ T6243] syzkaller0: entered promiscuous mode
[   70.676437][ T6243] syzkaller0: entered allmulticast mode
[   70.757153][ T6243] tipc: Resetting bearer <eth:syzkaller0>
[   70.763507][ T6240] tipc: Resetting bearer <eth:syzkaller0>
[   70.786477][ T6240] tipc: Disabling bearer <eth:syzkaller0>
[   71.084150][ T6278] Driver unsupported XDP return value 0 on prog  (id 27) dev N/A, expect packet loss!
[   71.176661][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.179509][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.209084][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'.
[   71.359482][ T6298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'.
[   71.561348][ T6311] netlink: 'syz.1.171': attribute type 1 has an invalid length.
[   71.739334][ T6330] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   71.812824][ T6336] bridge_slave_0: entered promiscuous mode
[   71.889393][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'.
[   72.055251][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'.
[   72.251822][ T6381] netlink: 'syz.1.203': attribute type 6 has an invalid length.
[   72.406992][ T6392] netlink: 'syz.2.208': attribute type 8 has an invalid length.
[   72.891978][ T6418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.220'.
[   72.944119][ T6422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'.
[   73.077543][ T6432] IPv6: NLM_F_REPLACE set, but no existing node found!
[   73.246753][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'.
[   74.721429][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'.
[   74.959157][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'.
[   75.006578][ T6501] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   75.028869][ T6501] macvlan2: entered promiscuous mode
[   75.031369][ T6501] macvlan2: entered allmulticast mode
[   75.035775][ T6501] bond1: entered promiscuous mode
[   75.038115][ T6501] bridge1: entered promiscuous mode
[   75.041224][ T6501] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   75.046517][ T6501] bond1: left promiscuous mode
[   75.048918][ T6501] bridge1: left promiscuous mode
[   75.641729][ T6537] netlink: 124 bytes leftover after parsing attributes in process `syz.2.268'.
[   75.755118][ T6545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.271'.
[   75.757157][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'.
[   76.018954][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'.
Connection to localhost closed by remote host.
[   76.800390][ T5862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.888264][ T5862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.955261][ T5862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.019013][ T5862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.139047][ T5862] bridge_slave_1: left allmulticast mode
[   77.141072][ T5862] bridge_slave_1: left promiscuous mode
[   77.146603][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.155264][ T5862] bridge_slave_0: left allmulticast mode
[   77.157729][ T5862] bridge_slave_0: left promiscuous mode
[   77.160472][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.306783][ T5862] bridge0 (unregistering): left allmulticast mode
[   77.400321][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.405015][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.409403][ T5862] bond0 (unregistering): Released all slaves
[   77.471115][ T5862] tipc: Left network mode
[   77.629346][ T5862] hsr_slave_0: left promiscuous mode
[   77.632919][ T5862] hsr_slave_1: left promiscuous mode
[   77.635791][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.639304][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.643991][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.647264][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.659117][ T5862] veth1_macvtap: left promiscuous mode
[   77.661226][ T5862] veth0_macvtap: left promiscuous mode
[   77.664135][ T5862] veth1_vlan: left promiscuous mode
[   77.666175][ T5862] veth0_vlan: left promiscuous mode
[   77.731195][ T5862] pim6reg (unregistering): left allmulticast mode
[   77.965305][ T5862] team0 (unregistering): Port device team_slave_1 removed
[   77.995771][ T5862] team0 (unregistering): Port device team_slave_0 removed
[   78.536939][ T5862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.604602][ T5862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.661210][ T5862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.709992][ T5862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.825480][ T5862] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.901973][ T5862] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.953005][ T5862] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.002826][ T5862] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.088770][ T5862] bridge_slave_1: left allmulticast mode
[   79.091209][ T5862] bridge_slave_1: left promiscuous mode
[   79.097984][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.104775][ T5862] bridge_slave_0: left allmulticast mode
[   79.107212][ T5862] bridge_slave_0: left promiscuous mode
[   79.110412][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.475018][ T5862] bond0 (unregistering): Released all slaves
[   79.539408][ T5862] bond1 (unregistering): Released all slaves
[   79.722084][ T5862] bond1 (unregistering): (slave bridge1): Releasing backup interface
[   79.814739][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.819707][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.825346][ T5862] bond0 (unregistering): Released all slaves
[   79.835975][ T5862] bond1 (unregistering): Released all slaves
[   79.920973][ T5862] tipc: Left network mode
[   80.229365][ T5862] hsr_slave_0: left promiscuous mode
[   80.231986][ T5862] hsr_slave_1: left promiscuous mode
[   80.237301][ T5862] hsr_slave_0: left promiscuous mode
[   80.240598][ T5862] hsr_slave_1: left promiscuous mode
[   80.244211][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.247584][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.251741][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.258385][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.279038][ T5862] veth1_macvtap: left promiscuous mode
[   80.281611][ T5862] veth0_macvtap: left promiscuous mode
[   80.285000][ T5862] veth1_vlan: left promiscuous mode
[   80.287423][ T5862] veth0_vlan: left promiscuous mode
[   80.291355][ T5862] veth1_macvtap: left promiscuous mode
[   80.294425][ T5862] veth0_macvtap: left promiscuous mode
[   80.296936][ T5862] veth1_vlan: left promiscuous mode
[   80.299302][ T5862] veth0_vlan: left promiscuous mode
[   81.247723][ T5862] team0 (unregistering): Port device team_slave_1 removed
[   81.271052][ T5862] team0 (unregistering): Port device team_slave_0 removed
[   86.532946][  T791] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
16:46:34  Registers:
info registers vcpu 0

CPU#0
RAX=0d5a816c391bb400 RBX=ffffffff81976a18 RCX=0d5a816c391bb400 RDX=0000000000000001
RSI=ffffffff8d999894 RDI=ffffffff8be28d00 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d24f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffecb916738 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000ff000000 0000000000000000 XMM01=00000000ff000000 0000000000000000
XMM02=ff00000000000000 0000000000000000 XMM03=ff000000ff000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=149a3fa8772c1200 RBX=ffffffff81976a18 RCX=149a3fa8772c1200 RDX=0000000000000001
RSI=ffffffff8d999894 RDI=ffffffff8be28d00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f6f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b6d24f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005645234e9161 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
