last executing test programs:

1.0413667s ago: executing program 1 (id=719):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xffff}]}}}]}, 0x44}}, 0x0)

954.200604ms ago: executing program 1 (id=720):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)

954.096323ms ago: executing program 1 (id=721):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)

953.879234ms ago: executing program 1 (id=722):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x98, 0xb, 0x148, 0x0, 0x148, 0x128, 0x240, 0x240, 0x128, 0x215, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @local, 0x0, 0xff000000, 'macvtap0\x00', 'veth0_to_bond\x00'}, 0x2e8, 0x70, 0x98, 0x0, {0xff0f000000000000}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0xc16}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

903.293998ms ago: executing program 1 (id=724):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18)
socket$igmp(0x2, 0x3, 0x2)
socket$kcm(0x29, 0x5, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x65, 0x0, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sm3)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8)
recvmmsg(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)}, 0x4}], 0x1, 0x40010000, 0x0)
bind$rds(r3, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x80000001, @private1, 0x1}, 0x1c)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0)

744.157283ms ago: executing program 0 (id=730):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)

654.789899ms ago: executing program 0 (id=731):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6)
close(r3)

593.364736ms ago: executing program 0 (id=732):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

592.915454ms ago: executing program 0 (id=733):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6866f59e001406fffc010000000000000000000000000001ff05"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x59, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7af}, 0x48)

394.905521ms ago: executing program 0 (id=736):
socket(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000001c0)=0x3)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, 0x0}, 0xff03}], 0x2, 0x8000)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894)

343.250744ms ago: executing program 0 (id=738):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x400c4)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r6, r10}, 0xc)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r10}, 0xc)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0xc004}, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf2508000100000000000500540041"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2}}}}}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}}, 0x40c0800)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r14, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

343.103195ms ago: executing program 2 (id=739):
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000140)="482b11195f5b3ae9", 0x0, 0x0, 0x0, 0xe}, 0x38)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="21000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

283.211489ms ago: executing program 2 (id=740):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28)

174.095919ms ago: executing program 2 (id=741):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xa85, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x30, 0x1a, 0x20000000, 0x0, 0x3}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x6c}}, 0x0)

104.57613ms ago: executing program 2 (id=742):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)

54.99222ms ago: executing program 2 (id=743):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r1, 0x1, {0x0, 0x0, 0x2}, 0x1}, 0x18)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x402, {0x0, 0xf0, 0x4}, 0xfe}, 0x18)

31.53171ms ago: executing program 1 (id=744):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
unshare(0x2a020400)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
readv(r1, 0x0, 0x0)

0s ago: executing program 2 (id=745):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52637' (ED25519) to the list of known hosts.
syzkaller login: [   40.635392][ T5754] cgroup: Unknown subsys name 'net'
[   40.760555][ T5754] cgroup: Unknown subsys name 'cpuset'
[   40.764709][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.043817][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   48.627044][ T5836] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.670385][ T5845] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.446240][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   50.450549][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   50.453297][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   50.456518][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   50.459539][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   50.506160][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   50.509611][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   50.512514][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   50.515640][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   50.519004][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   50.522023][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   50.535639][ T5211] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   50.538989][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   50.548181][ T5211] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   50.551760][ T5211] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   50.691192][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   50.793915][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   50.845704][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.848605][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.850846][ T5858] bridge_slave_0: entered allmulticast mode
[   50.853457][ T5858] bridge_slave_0: entered promiscuous mode
[   50.876203][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.887206][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.890304][ T5858] bridge_slave_1: entered allmulticast mode
[   50.892897][ T5858] bridge_slave_1: entered promiscuous mode
[   50.930695][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.933608][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.936119][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.938915][ T5862] bridge_slave_0: entered allmulticast mode
[   50.941826][ T5862] bridge_slave_0: entered promiscuous mode
[   50.944734][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   50.951437][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.962171][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.964759][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.967276][ T5862] bridge_slave_1: entered allmulticast mode
[   50.971057][ T5862] bridge_slave_1: entered promiscuous mode
[   51.011290][ T5858] team0: Port device team_slave_0 added
[   51.014980][ T5858] team0: Port device team_slave_1 added
[   51.044110][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.063109][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.066552][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.068835][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.076536][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.090411][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.092811][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.095404][ T5861] bridge_slave_0: entered allmulticast mode
[   51.098857][ T5861] bridge_slave_0: entered promiscuous mode
[   51.110879][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.113024][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.120831][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.127645][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.130757][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.133000][ T5861] bridge_slave_1: entered allmulticast mode
[   51.135557][ T5861] bridge_slave_1: entered promiscuous mode
[   51.146938][ T5862] team0: Port device team_slave_0 added
[   51.159073][ T5862] team0: Port device team_slave_1 added
[   51.185192][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.198953][ T5858] hsr_slave_0: entered promiscuous mode
[   51.201221][ T5858] hsr_slave_1: entered promiscuous mode
[   51.213211][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.216740][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.219566][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.228897][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.254183][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.256375][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.264441][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.289625][ T5861] team0: Port device team_slave_0 added
[   51.297662][ T5861] team0: Port device team_slave_1 added
[   51.333662][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.336099][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.344718][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.361120][ T5862] hsr_slave_0: entered promiscuous mode
[   51.363321][ T5862] hsr_slave_1: entered promiscuous mode
[   51.365356][ T5862] debugfs: 'hsr0' already exists in 'hsr'
[   51.367179][ T5862] Cannot create hsr debugfs directory
[   51.370164][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.372301][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.380380][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.449424][ T5861] hsr_slave_0: entered promiscuous mode
[   51.451765][ T5861] hsr_slave_1: entered promiscuous mode
[   51.453829][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   51.455722][ T5861] Cannot create hsr debugfs directory
[   51.542059][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   51.547819][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   51.563645][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   51.580599][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   51.628581][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   51.636618][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.639040][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.642065][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.644652][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.651084][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   51.662420][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   51.681094][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   51.692543][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.697050][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.717398][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   51.723058][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   51.737466][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   51.746484][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   51.788693][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.813800][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   51.824442][  T652] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.827340][  T652] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.837858][  T652] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.840749][  T652] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.861953][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.896306][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.904202][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   51.915519][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.917906][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.930649][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.932862][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.942410][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   51.952762][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.955016][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.967017][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.969368][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.991671][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.018439][ T5861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   52.021977][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.062096][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.097336][ T5858] veth0_vlan: entered promiscuous mode
[   52.112101][ T5858] veth1_vlan: entered promiscuous mode
[   52.124892][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.132897][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.144738][ T5858] veth0_macvtap: entered promiscuous mode
[   52.151031][ T5858] veth1_macvtap: entered promiscuous mode
[   52.165102][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.172236][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.185035][ T5894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.191420][ T5652] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.197086][ T5652] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.204643][ T5862] veth0_vlan: entered promiscuous mode
[   52.209455][ T5652] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.215824][ T5861] veth0_vlan: entered promiscuous mode
[   52.233544][ T5862] veth1_vlan: entered promiscuous mode
[   52.240222][ T5861] veth1_vlan: entered promiscuous mode
[   52.278676][ T5861] veth0_macvtap: entered promiscuous mode
[   52.290874][ T5861] veth1_macvtap: entered promiscuous mode
[   52.296703][  T652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.304367][ T5862] veth0_macvtap: entered promiscuous mode
[   52.312628][  T652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.313980][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.321607][ T5862] veth1_macvtap: entered promiscuous mode
[   52.333744][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.349501][  T648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.350226][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.352019][  T648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.357403][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.374794][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.382978][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   52.394315][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.397107][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.426423][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.443581][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.447021][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.467660][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.480456][ T5211] Bluetooth: hci0: command tx timeout
[   52.487114][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.531963][  T648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.534444][  T648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.547936][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.550940][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.559025][ T5211] Bluetooth: hci2: command tx timeout
[   52.560998][ T5211] Bluetooth: hci1: command tx timeout
[   52.567233][  T652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.570660][  T652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.602824][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.605393][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.724624][ T5940] tipc: Started in network mode
[   52.726382][ T5940] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   52.734546][ T5940] tipc: Enabled bearer <eth:team0>, priority 0
[   52.743453][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'.
[   52.746792][ T5944] Zero length message leads to an empty skb
[   53.043218][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.45'.
[   53.425653][ T6013] syz.0.62 uses obsolete (PF_INET,SOCK_PACKET)
[   53.560294][ T6021] trusted_key: syz.1.66 sent an empty control message without MSG_MORE.
[   53.728836][   T47] tipc: Node number set to 11578026
[   53.753824][ T6045] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   53.839732][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'.
[   54.039939][ T6069] netlink: 200 bytes leftover after parsing attributes in process `syz.1.81'.
[   54.043068][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'.
[   54.237375][ T6084] warning: `syz.1.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   54.273034][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'.
[   54.392139][ T6095] netlink: 'syz.0.92': attribute type 9 has an invalid length.
[   54.396018][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'.
[   54.415058][ T6095] hsr0: entered promiscuous mode
[   54.420786][ T6095] macvlan3: entered promiscuous mode
[   54.426648][ T6095] macvlan3: entered allmulticast mode
[   54.431821][ T6095] hsr0: entered allmulticast mode
[   54.436030][ T6095] hsr_slave_0: entered allmulticast mode
[   54.443139][ T6095] hsr_slave_1: entered allmulticast mode
[   54.452439][   T24] IPVS: starting estimator thread 0...
[   54.562132][ T5859] Bluetooth: hci0: command tx timeout
[   54.564715][ T6098] IPVS: using max 79 ests per chain, 189600 per kthread
[   54.634503][ T6109] netlink: 'syz.2.97': attribute type 1 has an invalid length.
[   54.648401][ T5859] Bluetooth: hci1: command tx timeout
[   54.650229][ T5859] Bluetooth: hci2: command tx timeout
[   55.014334][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.068421][ T6143] netlink: 'syz.0.115': attribute type 1 has an invalid length.
[   55.104217][ T6149] netlink: 224 bytes leftover after parsing attributes in process `syz.2.117'.
[   55.117226][ T6149] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   55.120851][ T6143] bond1: entered promiscuous mode
[   55.123058][ T6143] bond1: entered allmulticast mode
[   55.125036][ T6143] 8021q: adding VLAN 0 to HW filter on device bond1
[   55.141372][ T6143] ip6gretap1: entered promiscuous mode
[   55.143697][ T6143] ip6gretap1: entered allmulticast mode
[   55.145957][ T6143] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   55.229032][ T5652] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   55.236177][ T6156] netlink: 172 bytes leftover after parsing attributes in process `syz.0.120'.
[   55.335833][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'.
[   55.342988][ T5652] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   55.571989][ T6187] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   56.291990][ T6226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   56.648161][ T5211] Bluetooth: hci0: command tx timeout
[   56.731065][ T5859] Bluetooth: hci1: command tx timeout
[   56.733371][ T5211] Bluetooth: hci2: command tx timeout
[   56.862417][ T6257] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   56.871712][ T6256] netlink: 'syz.1.164': attribute type 16 has an invalid length.
[   56.875014][ T6256] netlink: 'syz.1.164': attribute type 17 has an invalid length.
[   56.915250][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.919330][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.987026][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.993839][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.063554][ T5652] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.066552][ T5652] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.071270][ T5652] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.074179][ T5652] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.455329][ T6289] netlink: 'syz.2.179': attribute type 1 has an invalid length.
[   57.861789][ T6322] __nla_validate_parse: 11 callbacks suppressed
[   57.861798][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.194'.
[   57.959726][ T6330] Bluetooth: MGMT ver 1.23
[   57.963090][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.198'.
[   58.147031][ T6348] netlink: 'syz.0.205': attribute type 10 has an invalid length.
[   58.152897][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.156905][ T6348] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   58.168441][ T6348] netlink: 'syz.0.205': attribute type 10 has an invalid length.
[   58.172035][ T6348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.205'.
[   58.177093][ T6348] batadv0: entered promiscuous mode
[   58.180408][ T6348] batadv0: entered allmulticast mode
[   58.183609][ T6348] bond0: (slave batadv0): Releasing backup interface
[   58.189185][ T6348] bridge0: port 3(batadv0) entered blocking state
[   58.191495][ T6348] bridge0: port 3(batadv0) entered disabled state
[   58.506771][ T5652] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   58.510503][ T5652] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   58.566784][ T6369] netlink: 164548 bytes leftover after parsing attributes in process `syz.0.214'.
[   58.728513][ T5211] Bluetooth: hci0: command tx timeout
[   58.798123][ T5859] Bluetooth: hci1: command tx timeout
[   58.800057][ T5211] Bluetooth: hci2: command tx timeout
[   58.842374][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'.
[   58.850335][ T6387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.221'.
[   58.859533][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'.
[   58.867387][ T6387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.221'.
[   58.878642][ T6387] netlink: 5 bytes leftover after parsing attributes in process `syz.0.221'.
[   59.005720][ T6397] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   59.013371][ T6397] bridge_slave_0: left allmulticast mode
[   59.015313][ T6397] bridge_slave_0: left promiscuous mode
[   59.017184][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.022711][ T6397] bridge_slave_1: left allmulticast mode
[   59.029855][ T6397] bridge_slave_1: left promiscuous mode
[   59.034893][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.042728][ T6397] bond0: (slave bond_slave_0): Releasing backup interface
[   59.046695][ T6397] bond0: (slave bond_slave_1): Releasing backup interface
[   59.062101][ T6397] team0: Port device team_slave_0 removed
[   59.070542][ T6397] team0: Port device team_slave_1 removed
[   59.072589][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.079158][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.085197][ T6397] netlink: 'syz.1.224': attribute type 10 has an invalid length.
[   59.089781][ T6397] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   59.092713][ T6397] bond0: (slave wlan1): Opening slave failed
[   59.133833][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'.
[   59.138422][ T6402] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.153657][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.401638][ T6413] tipc: Started in network mode
[   59.404532][ T6413] tipc: Node identity d6bb5c74d236, cluster identity 4711
[   59.409153][ T6413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.412181][ T6413] syzkaller0: entered promiscuous mode
[   59.414020][ T6413] syzkaller0: entered allmulticast mode
[   59.425665][ T6413] tipc: Resetting bearer <eth:syzkaller0>
[   59.432395][ T6412] tipc: Resetting bearer <eth:syzkaller0>
[   59.439442][ T6412] tipc: Disabling bearer <eth:syzkaller0>
[   59.841913][    T9] cfg80211: failed to load regulatory.db
[   59.883419][ T6426] syzkaller1: entered promiscuous mode
[   59.885343][ T6426] syzkaller1: entered allmulticast mode
[   60.083912][ T6430] netlink: 'syz.1.237': attribute type 1 has an invalid length.
[   60.380255][ T6447] netlink: 'syz.0.245': attribute type 4 has an invalid length.
[   60.388960][ T6447] netlink: 'syz.0.245': attribute type 4 has an invalid length.
[   60.512491][ T5864] IPVS: starting estimator thread 0...
[   60.600544][ T6461] IPVS: using max 80 ests per chain, 192000 per kthread
[   60.768930][   T13] bond1: (slave ip6gretap1): link status up again after 0 ms
[   60.771458][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   60.878698][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   60.998186][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   61.108128][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   61.148112][ T6508] netlink: 'syz.1.268': attribute type 4 has an invalid length.
[   61.153051][ T6508] netlink: 'syz.1.268': attribute type 4 has an invalid length.
[   61.218782][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   61.236657][   T24] IPVS: starting estimator thread 0...
[   61.338092][ T6514] IPVS: using max 80 ests per chain, 192000 per kthread
[   61.348124][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   61.380847][ T6522] netlink: 'syz.1.274': attribute type 18 has an invalid length.
[   61.452297][ T5652] IPVS: stop unused estimator thread 0...
[   61.460596][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   61.568554][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   61.698499][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   61.867487][ T6587] Illegal XDP return value 4294967274 on prog  (id 60) dev N/A, expect packet loss!
[   62.255794][ T6630] netlink: 'syz.0.327': attribute type 1 has an invalid length.
[   62.805559][ T6655] netlink: 'syz.1.339': attribute type 1 has an invalid length.
[   62.994983][ T6669] __nla_validate_parse: 12 callbacks suppressed
[   62.994994][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'.
[   63.001539][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'.
[   63.257052][ T6688] netlink: 'syz.2.352': attribute type 1 has an invalid length.
[   63.295123][ T6688] bond1: entered promiscuous mode
[   63.301347][ T6688] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.447319][ T6718] Bluetooth: MGMT ver 1.23
[   63.454905][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'.
[   64.023291][ T6813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.381'.
[   64.113660][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.383'.
[   64.237492][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'.
[   64.326618][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'.
[   64.335899][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'.
[   64.367360][ T6864] netlink: 'syz.1.403': attribute type 1 has an invalid length.
[   64.381548][ T6864] bond1: entered promiscuous mode
[   64.383548][ T6864] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.390809][ T6864] netlink: 3 bytes leftover after parsing attributes in process `syz.1.403'.
[   64.396683][ T6864] batadv1: entered promiscuous mode
[   64.398521][ T6864] batadv1: entered allmulticast mode
[   64.400938][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv1
[   64.404004][ T6864] bond1: (slave batadv1): making interface the new active one
[   64.407138][ T6864] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   64.523817][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'.
[   64.531498][ T6860] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   64.534974][ T6860] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   65.818281][ T5652] net_ratelimit: 35 callbacks suppressed
[   65.818292][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   65.928241][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   66.050788][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   66.158666][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   66.268538][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   66.379083][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   66.500913][ T6984] macsec1: entered promiscuous mode
[   66.509862][ T6984] macsec1: entered allmulticast mode
[   66.543557][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   66.617246][ T6997] netlink: ct family unspecified
[   66.619028][ T6997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.660421][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   66.751034][ T7014] syzkaller0: entered promiscuous mode
[   66.752870][ T7014] syzkaller0: entered allmulticast mode
[   66.832549][ T7026] syz_tun: entered allmulticast mode
[   66.842992][ T7026] syz_tun: left allmulticast mode
[   66.941472][ T7041] ieee802154 phy0 wpan0: encryption failed: -22
[   67.492341][ T7122] validate_nla: 1 callbacks suppressed
[   67.492350][ T7122] netlink: 'syz.1.520': attribute type 3 has an invalid length.
[   67.507251][ T7125] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   67.603753][ T7142] vlan0: entered promiscuous mode
[   68.117813][ T7192] __nla_validate_parse: 19 callbacks suppressed
[   68.117844][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'.
[   68.131619][ T7192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.548'.
[   68.330850][ T7202] netlink: 'syz.2.553': attribute type 9 has an invalid length.
[   68.452582][ T5652] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   69.465942][ T7238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.567'.
[   69.758321][ T7271] netlink: 72 bytes leftover after parsing attributes in process `syz.2.582'.
[   70.019679][ T7297] IPVS: Scheduler module ip_vs_sip not found
[   70.056784][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.595'.
[   70.122487][ T7306] ip6gre2: entered allmulticast mode
[   70.537656][ T7325] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.540513][ T7325] syzkaller0: entered promiscuous mode
[   70.542606][ T7325] syzkaller0: entered allmulticast mode
[   70.552700][ T7325] tipc: Resetting bearer <eth:syzkaller0>
[   70.556320][ T7329] tc_dump_action: action bad kind
[   70.561195][ T7324] tipc: Resetting bearer <eth:syzkaller0>
[   70.570509][ T7324] tipc: Disabling bearer <eth:syzkaller0>
[   70.694919][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'.
[   70.751951][ T7345] syz.2.615 (7345) used greatest stack depth: 18776 bytes left
[   70.929503][   T13] net_ratelimit: 38 callbacks suppressed
[   70.929514][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   70.953195][ T7369] netlink: 'syz.0.627': attribute type 26 has an invalid length.
[   71.040703][ T1358] ieee802154 phy0 wpan0: encryption failed: -22
[   71.048308][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   71.158510][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   71.298190][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   71.316551][ T7391] netlink: 'syz.0.637': attribute type 1 has an invalid length.
[   71.330978][ T7391] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.408218][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   71.448260][ T7402] sctp: [Deprecated]: syz.0.642 (pid 7402) Use of int in max_burst socket option deprecated.
[   71.448260][ T7402] Use struct sctp_assoc_value instead
[   71.518364][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   71.628387][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   71.738266][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   71.848111][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   71.886016][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'.
[   71.959115][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   72.013629][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'.
[   72.364141][ T7448] netlink: 'syz.0.663': attribute type 21 has an invalid length.
[   72.367411][ T7448] netlink: 128 bytes leftover after parsing attributes in process `syz.0.663'.
[   72.372487][ T7448] netlink: 3 bytes leftover after parsing attributes in process `syz.0.663'.
[   72.672742][ T7468] tipc: Started in network mode
[   72.674444][ T7468] tipc: Node identity 82e3c80af4dc, cluster identity 4711
[   72.676832][ T7468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.681132][ T7468] syzkaller0: entered promiscuous mode
[   72.683847][ T7468] syzkaller0: entered allmulticast mode
[   72.694920][ T7468] tipc: Resetting bearer <eth:syzkaller0>
[   72.702288][ T7467] tipc: Resetting bearer <eth:syzkaller0>
[   72.710264][ T7467] tipc: Disabling bearer <eth:syzkaller0>
[   72.791867][ T7482] netlink: 'syz.0.680': attribute type 1 has an invalid length.
[   72.803571][ T7482] bond3: entered promiscuous mode
[   72.805471][ T7482] 8021q: adding VLAN 0 to HW filter on device bond3
[   72.824234][ T7482] 8021q: adding VLAN 0 to HW filter on device bond3
[   72.826615][ T7482] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[   72.830690][ T7482] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   72.836397][ T7482] bond3: (slave wireguard0): making interface the new active one
[   72.839081][ T7482] wireguard0: entered promiscuous mode
[   72.841618][ T7482] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[   72.850726][ T7482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   72.853215][ T7482] IPv6: NLM_F_CREATE should be set when creating new route
[   72.855568][ T7482] IPv6: NLM_F_CREATE should be set when creating new route
[   72.858714][ T7482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   72.864428][ T7482] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address
[   72.871489][ T7482] bond3: (slave wireguard1): Enslaving as a backup interface with an up link
[   73.120329][ T7510] __nla_validate_parse: 5 callbacks suppressed
[   73.120341][ T7510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'.
[   73.131700][ T7510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'.
[   73.142087][ T7510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'.
[   73.144981][ T7510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'.
[   73.153255][ T7510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'.
[   73.156161][ T7510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'.
[   73.161070][ T7510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'.
[   73.165413][ T7510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'.
[   73.172133][ T7510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'.
[   73.175134][ T7510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'.
[   73.198636][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.706451][ T7553] lo speed is unknown, defaulting to 1000
[   73.709822][ T7553] lo speed is unknown, defaulting to 1000
[   73.712993][ T7553] lo speed is unknown, defaulting to 1000
[   73.804586][  T792] lo speed is unknown, defaulting to 1000
[   73.806670][ T7553] infiniband syz0: set down
[   73.808457][ T7553] infiniband syz0: added lo
[   73.827701][ T7553] RDS/IB: syz0: added
[   73.829449][ T7553] smc: adding ib device syz0 with port count 1
[   73.831500][ T7553] smc:    ib device syz0 port 1 has pnetid 
[   73.834381][  T792] lo speed is unknown, defaulting to 1000
[   73.837637][ T7553] lo speed is unknown, defaulting to 1000
[   73.928632][ T7553] lo speed is unknown, defaulting to 1000
[   74.034331][ T7553] lo speed is unknown, defaulting to 1000
[   74.997083][ T7629] lo speed is unknown, defaulting to 1000
[   75.002662][ T7629] lo speed is unknown, defaulting to 1000
[   75.006900][ T7629] lo speed is unknown, defaulting to 1000
[   75.012008][ T7629] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.021859][ T7629] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   75.036646][ T7629] lo speed is unknown, defaulting to 1000
[   75.059488][ T7629] lo speed is unknown, defaulting to 1000
[   75.062159][ T7629] lo speed is unknown, defaulting to 1000
[   75.183713][ T7636] netlink: 'syz.2.741': attribute type 3 has an invalid length.
[   75.196610][ T7636] netlink: 'syz.2.741': attribute type 3 has an invalid length.
Connection to localhost closed by remote host.
[   75.978098][   T13] net_ratelimit: 37 callbacks suppressed
[   75.978111][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   76.089094][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   76.208103][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   76.318326][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   76.428202][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   76.538180][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   76.648242][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   76.758172][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   76.868183][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   76.978132][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   81.068416][ T5894] net_ratelimit: 36 callbacks suppressed
[   81.068428][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   81.178548][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   81.298467][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   81.408208][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   81.528660][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   81.638098][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   81.748188][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   81.858216][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   81.968497][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   82.088614][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   86.078262][ T5652] net_ratelimit: 35 callbacks suppressed
[   86.078278][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   86.188286][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   86.298235][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   86.418280][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   86.528420][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   86.638416][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   86.748740][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   86.858753][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   86.968199][   T13] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   87.078280][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   91.158174][   T12] net_ratelimit: 36 callbacks suppressed
[   91.158338][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   91.268871][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   91.379085][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   91.488629][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   91.598859][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   91.708184][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   91.819594][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   91.928317][ T5894] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   92.039618][ T5652] bond1: (slave ip6gretap1): failed to get link speed/duplex
[   92.148630][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex

VM DIAGNOSIS:
06:42:24  Registers:
info registers vcpu 0

CPU#0
RAX=e1f2c94a2065e800 RBX=ffffffff81969b18 RCX=e1f2c94a2065e800 RDX=0000000000000001
RSI=ffffffff8d9792eb RDI=ffffffff8be30a00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa07bf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bf742f6b98 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000010000000000
XMM02=0000000000000000 0000550078756166 XMM03=0000000000000000 ffff000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000041 000000000061642e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=79726f74616c7567 65722f657261776d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=00000000ffffffff RDX=0000000000000003
RSI=0000000000000000 RDI=ffff88801c6bd640 RBP=0000000000000000 RSP=ffffc900000f78f0
R8 =0000000000000000 R9 =ffffffff8b3d6e42 R10=dffffc0000000000 R11=ffffffff8b3d6d70
R12=ffffffffffffffff R13=0000000000000001 R14=ffff88801c6be180 R15=0000000000000000
RIP=ffffffff819d7986 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bf742ed9e0 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffff000000 0000000000000000 XMM05=0000000000000041 000000000061642e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=79726f74616c7567 65722f657261776d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
