last executing test programs:

1.452022765s ago: executing program 1 (id=142):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x82, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r2], 0x38}}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x4010084)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800110000000000000000000000ca6c9500000000000000ffdb360734076d08000d0ba8897489c522ba66c5439753d3e0c9b47bef3c2879fc55ce1649fcc6cff6b7eddc1ae3947efadabc0399ee4099902841e1c394783c541a69c0b2af1dcd8598b5c388992876d8e7858aed8e2f5308e47d9b93e38f092f022e25a098b85645ea1b65d5b5e38355cb7d53cb83ed9d6bc2756c81b8692e12b1b572660c0d83d23e57f5ffa19bad8b1feca88786116725e92d6d6e399a37a38899d361337c02c04a0dbda849dc41b918a60e7830677446"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r3, 0x7, 0x10, 0x8})
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x81, {{0xa, 0x4e20, 0x6, @loopback, 0xf}}}, 0x88)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113f00a4122d898510000002004000850000002a00000095000000020000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000007c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)

1.389863967s ago: executing program 1 (id=144):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000015000400000000000000000067636d5f6261736528637472286165732d6165736e69292c67686173682d67656e657269632900"], 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0)

1.29723546s ago: executing program 1 (id=147):
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)

970.909282ms ago: executing program 1 (id=157):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x40000)

902.283243ms ago: executing program 1 (id=158):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, 'L\x00ZtC\x00', "3eda254a1c07cb407b4000", "29469d6b", "5350b7add205a3ec"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000c00)=@ccm_128={{0x303}, "e12dc20a892d7dde", "a52cbf2aa84c7c9e38b06f060000001c", "296258a3", "ebee76f27293fe23"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
sendmsg$rds(r0, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000200)=""/188, 0xbc}, {0x0}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000380)=""/209, 0xd1}], 0x4, &(0x7f0000000700)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0xb7}, &(0x7f0000000600), &(0x7f0000000640)=0x10001, 0x0, 0x6, 0x80, 0x6, 0x50, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x2}, @cswp={0x58, 0x114, 0x7, {{0x7ff, 0x1c1651ed}, &(0x7f0000000500)=0x9, &(0x7f0000000540)=0x8, 0xfffffffffffffffc, 0xbb, 0x3ff, 0xa, 0x4, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x7}}], 0xe0, 0x4004}, 0x20004000)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r2, 0xac9d4000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x10010, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
socket(0x10, 0x803, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_80211_inject_frame(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10)
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000b90000000010000000000000001a00000000007de00dff994df6a0761661bcea3dcc"], 0x50)

820.85243ms ago: executing program 2 (id=162):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)

750.165876ms ago: executing program 2 (id=164):
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl(r0, 0x8b33, &(0x7f0000000040))

649.515933ms ago: executing program 2 (id=167):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102e9ff000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf"], 0xfc}}, 0x0)

582.310481ms ago: executing program 2 (id=168):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)

581.962298ms ago: executing program 2 (id=169):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000001340), 0xede8, r0}, 0x38)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
close(0xffffffffffffffff)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

518.478885ms ago: executing program 0 (id=171):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0)

432.107459ms ago: executing program 0 (id=172):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x8, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4800)

371.761655ms ago: executing program 0 (id=173):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x2}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

243.812011ms ago: executing program 2 (id=174):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003340)=[@assoc={0x18, 0x117, 0x4, 0x1ff}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x48010}, 0x24044001)

230.056502ms ago: executing program 0 (id=175):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x202, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

32.741207ms ago: executing program 0 (id=176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x4, 0x2, 0x1, 0x0, 0x1}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

5.449253ms ago: executing program 1 (id=177):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
listen(r1, 0x1)

0s ago: executing program 0 (id=178):
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x80, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:1500' (ED25519) to the list of known hosts.
syzkaller login: [   48.518783][ T5772] cgroup: Unknown subsys name 'net'
[   48.688034][ T5772] cgroup: Unknown subsys name 'cpuset'
[   48.692756][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.496840][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.800127][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.804510][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.807884][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.811607][ T5883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.815919][ T5883] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.819557][ T5883] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.823094][ T5883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.868269][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.872236][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.875670][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.879694][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.884440][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.887717][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.894287][ T5882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.897236][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.242565][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   60.276231][ T5876] chnl_net:caif_netlink_parms(): no params data found
[   60.390276][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   60.411748][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.414859][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.417341][ T5879] bridge_slave_0: entered allmulticast mode
[   60.420860][ T5879] bridge_slave_0: entered promiscuous mode
[   60.440031][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.442711][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.446199][ T5876] bridge_slave_0: entered allmulticast mode
[   60.449753][ T5876] bridge_slave_0: entered promiscuous mode
[   60.453562][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.457244][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.460006][ T5879] bridge_slave_1: entered allmulticast mode
[   60.463568][ T5879] bridge_slave_1: entered promiscuous mode
[   60.486524][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.489539][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.492466][ T5876] bridge_slave_1: entered allmulticast mode
[   60.497797][ T5876] bridge_slave_1: entered promiscuous mode
[   60.510673][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.540011][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.583862][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.589546][ T5879] team0: Port device team_slave_0 added
[   60.607259][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.625984][ T5879] team0: Port device team_slave_1 added
[   60.628619][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.630887][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.633132][ T5873] bridge_slave_0: entered allmulticast mode
[   60.636122][ T5873] bridge_slave_0: entered promiscuous mode
[   60.663530][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.666404][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.668628][ T5873] bridge_slave_1: entered allmulticast mode
[   60.671274][ T5873] bridge_slave_1: entered promiscuous mode
[   60.715850][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.720631][ T5876] team0: Port device team_slave_0 added
[   60.723874][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.727402][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.737959][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.744922][ T5876] team0: Port device team_slave_1 added
[   60.747551][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.750030][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.760089][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.766875][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.807949][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.810406][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.820076][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.826172][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.829027][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.839224][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.857852][ T5873] team0: Port device team_slave_0 added
[   60.865262][ T5873] team0: Port device team_slave_1 added
[   60.929665][ T5876] hsr_slave_0: entered promiscuous mode
[   60.932018][ T5876] hsr_slave_1: entered promiscuous mode
[   60.950962][ T5879] hsr_slave_0: entered promiscuous mode
[   60.954776][ T5879] hsr_slave_1: entered promiscuous mode
[   60.957754][ T5879] debugfs: 'hsr0' already exists in 'hsr'
[   60.960098][ T5879] Cannot create hsr debugfs directory
[   60.963179][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.966686][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.979148][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.999127][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.002238][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.013437][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.129658][ T5873] hsr_slave_0: entered promiscuous mode
[   61.132107][ T5873] hsr_slave_1: entered promiscuous mode
[   61.134591][ T5873] debugfs: 'hsr0' already exists in 'hsr'
[   61.136761][ T5873] Cannot create hsr debugfs directory
[   61.335653][ T5876] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.341851][ T5876] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.356842][ T5876] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.379680][ T5876] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.430910][ T5879] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.437003][ T5879] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.443694][ T5879] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.451247][ T5879] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.510474][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.518132][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.531333][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.542855][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.629546][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.665538][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.671118][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[   61.682022][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.684798][ T3649] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.711806][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.714914][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.732512][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   61.751665][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.754140][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.764351][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.766856][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.777080][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.836866][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   61.867222][  T345] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.870331][  T345] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.890213][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.892974][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.896434][ T5882] Bluetooth: hci2: command tx timeout
[   61.906289][ T5879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.971492][ T5882] Bluetooth: hci0: command tx timeout
[   61.975178][ T5882] Bluetooth: hci1: command tx timeout
[   62.027114][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.081056][ T5876] veth0_vlan: entered promiscuous mode
[   62.090470][ T5876] veth1_vlan: entered promiscuous mode
[   62.111113][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.123165][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.148531][ T5876] veth0_macvtap: entered promiscuous mode
[   62.158663][ T5876] veth1_macvtap: entered promiscuous mode
[   62.190492][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.212966][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.218540][ T5873] veth0_vlan: entered promiscuous mode
[   62.223132][ T5879] veth0_vlan: entered promiscuous mode
[   62.232069][ T5923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.239146][ T5923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.249362][ T5923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.252691][ T5923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.262027][ T5879] veth1_vlan: entered promiscuous mode
[   62.282767][ T5873] veth1_vlan: entered promiscuous mode
[   62.340170][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.343125][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.346753][ T5879] veth0_macvtap: entered promiscuous mode
[   62.368846][ T5879] veth1_macvtap: entered promiscuous mode
[   62.391785][ T5873] veth0_macvtap: entered promiscuous mode
[   62.392988][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.403098][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.409127][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.416294][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.430852][ T5873] veth1_macvtap: entered promiscuous mode
[   62.440505][ T5885] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.446554][ T5885] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.450081][ T5885] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.460955][ T5885] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.472607][ T5876] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.492576][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.515868][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.538878][ T5923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.551367][ T5923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.586726][ T5923] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.615087][ T5923] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.623347][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.642550][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.660385][ T5943] warning: `syz.2.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.737047][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.743545][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.773492][ T3649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.784911][ T3649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.844233][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.851628][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.026888][ T5956] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET)
[   63.310655][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'.
[   63.315958][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'.
[   63.614496][ T5989] Illegal XDP return value 4294967274 on prog  (id 8) dev N/A, expect packet loss!
[   63.965301][ T5881] Bluetooth: hci2: command tx timeout
[   64.045676][ T5881] Bluetooth: hci1: command tx timeout
[   64.049627][ T5882] Bluetooth: hci0: command tx timeout
[   64.079251][ T6022] netlink: 'syz.2.58': attribute type 8 has an invalid length.
[   64.227607][ T5937] IPVS: starting estimator thread 0...
[   64.316538][ T6032] IPVS: using max 42 ests per chain, 100800 per kthread
[   64.502986][ T6044] netlink: 'syz.1.66': attribute type 2 has an invalid length.
[   65.088996][ T5885] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.221575][ T6085] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.272829][ T6092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.89'.
[   65.279064][ T6092] team0: No ports can be present during mode change
[   65.286331][ T6092] vlan0: entered promiscuous mode
[   65.293274][ T6092] team0: Port device vlan0 added
[   65.310036][ T6092] tipc: Started in network mode
[   65.311917][ T6092] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   65.322072][ T6092] tipc: Enabled bearer <eth:team0>, priority 0
[   65.327673][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.364844][ T6098] netlink: 'syz.2.87': attribute type 74 has an invalid length.
[   66.044231][ T5881] Bluetooth: hci2: command tx timeout
[   66.134039][ T5881] Bluetooth: hci1: command tx timeout
[   66.136208][ T5882] Bluetooth: hci0: command tx timeout
[   66.404870][ T6123] netlink: 'syz.0.99': attribute type 1 has an invalid length.
[   66.408078][ T6123] netlink: 144 bytes leftover after parsing attributes in process `syz.0.99'.
[   66.411601][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.99'.
[   66.444447][   T51] tipc: Node number set to 11578026
[   66.731024][ T6136] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   67.092341][ T6152] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[   67.614034][   T33] audit: type=1800 audit(1757623324.331:2): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.117" name="memory.events" dev="tmpfs" ino=205 res=0 errno=0
[   67.639470][   T33] audit: type=1804 audit(1757623324.341:3): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.117" name="/newroot/37/memory.events" dev="tmpfs" ino=205 res=1 errno=0
[   68.124287][ T5882] Bluetooth: hci2: command tx timeout
[   68.214488][ T5882] Bluetooth: hci0: command tx timeout
[   68.216491][ T5882] Bluetooth: hci1: command tx timeout
[   68.790254][ T6192] netlink: 92 bytes leftover after parsing attributes in process `syz.2.129'.
[   68.882715][ T6203] Bluetooth: MGMT ver 1.23
[   68.946850][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'.
[   68.962605][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'.
[   69.195322][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'.
[   69.340840][ T6235] netlink: 'syz.2.149': attribute type 3 has an invalid length.
[   69.355686][ T6235] netlink: 'syz.2.149': attribute type 3 has an invalid length.
[   69.940383][ T6251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.044825][ T6290] wg1 speed is unknown, defaulting to 1000
[   70.047522][ T6290] wg1 speed is unknown, defaulting to 1000
[   70.065581][ T6290] wg1 speed is unknown, defaulting to 1000
[   70.072646][ T6290] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   70.101048][ T6290] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   70.141283][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'.
[   70.149052][ T6290] wg1 speed is unknown, defaulting to 1000
[   70.153660][ T6290] wg1 speed is unknown, defaulting to 1000
[   70.160815][ T6290] wg1 speed is unknown, defaulting to 1000
[   70.179547][ T6295] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   70.183244][ T6295] team0: Device ipvlan2 is already an upper device of the team interface
[   70.359655][ T6303] tipc: Started in network mode
[   70.361887][ T6303] tipc: Node identity 960a93d49678, cluster identity 4711
[   70.366927][ T6303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.377526][ T6303] syzkaller0: entered promiscuous mode
[   70.380286][ T6303] syzkaller0: entered allmulticast mode
[   70.394620][ T6303] tipc: Resetting bearer <eth:syzkaller0>
[   70.399597][ T6300] tipc: Resetting bearer <eth:syzkaller0>
[   70.408507][ T6300] tipc: Disabling bearer <eth:syzkaller0>
Connection to localhost closed by remote host.
[   71.183480][ T5885] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.249952][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.252700][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.252879][ T5885] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.305687][ T5885] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.441526][ T5885] bridge_slave_1: left allmulticast mode
[   71.444014][ T5885] bridge_slave_1: left promiscuous mode
[   71.446805][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.452600][ T5885] bridge_slave_0: left allmulticast mode
[   71.456196][ T5885] bridge_slave_0: left promiscuous mode
[   71.458220][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.645723][ T5885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.651527][ T5885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.658506][ T5885] bond0 (unregistering): Released all slaves
[   71.899464][ T5885] hsr_slave_0: left promiscuous mode
[   71.902291][ T5885] hsr_slave_1: left promiscuous mode
[   71.906051][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.909101][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.912611][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.915823][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.930957][ T5885] veth1_macvtap: left promiscuous mode
[   71.933481][ T5885] veth0_macvtap: left promiscuous mode
[   71.936064][ T5885] veth1_vlan: left promiscuous mode
[   71.937985][ T5885] veth0_vlan: left promiscuous mode
[   72.199955][ T5885] team0 (unregistering): Port device team_slave_1 removed
[   72.219578][ T5885] team0 (unregistering): Port device team_slave_0 removed
[   72.446567][ T5937] wg1 speed is unknown, defaulting to 1000
[   72.449232][ T5937] infiniband syz0: ib_query_port failed (-19)
[   72.756536][ T5885] IPVS: stop unused estimator thread 0...
[   72.839114][ T5885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.927587][ T5885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.988651][ T5885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.056517][ T5885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.171618][ T5885] bridge_slave_1: left allmulticast mode
[   73.173715][ T5885] bridge_slave_1: left promiscuous mode
[   73.176701][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.181665][ T5885] bridge_slave_0: left allmulticast mode
[   73.184335][ T5885] bridge_slave_0: left promiscuous mode
[   73.188012][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.442277][ T5885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.448553][ T5885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.453316][ T5885] bond0 (unregistering): Released all slaves
[   73.506222][ T5885] tipc: Disabling bearer <eth:team0>
[   73.508837][ T5885] tipc: Left network mode
[   73.688673][ T5885] hsr_slave_0: left promiscuous mode
[   73.691689][ T5885] hsr_slave_1: left promiscuous mode
[   73.696093][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.699275][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.702949][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.706076][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.716839][ T5885] veth1_macvtap: left promiscuous mode
[   73.719138][ T5885] veth0_macvtap: left promiscuous mode
[   73.721407][ T5885] veth1_vlan: left promiscuous mode
[   73.853707][ T5885] team0 (unregistering): Port device vlan0 removed
[   74.003391][ T5885] team0 (unregistering): Port device team_slave_1 removed
[   74.032642][ T5885] team0 (unregistering): Port device team_slave_0 removed
[   81.487515][    T9] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
20:42:17  Registers:
info registers vcpu 0

CPU#0
RAX=96319cf87f412300 RBX=ffffffff819683f8 RCX=96319cf87f412300 RDX=0000000000000001
RSI=ffffffff8d9afc08 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa2f030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7253f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8640000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff326507d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=00000000000000ff 0000ff0000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=45d53504dd6d4400 RBX=ffffffff819683f8 RCX=45d53504dd6d4400 RDX=0000000000000001
RSI=ffffffff8d9afc08 RDI=ffffffff8be33880 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa2f030 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b7253f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3401eff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000ff000000 0000000000000000 XMM01=00000000ff000000 0000000000000000
XMM02=ff00000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
