last executing test programs:

1.85833936s ago: executing program 0 (id=102):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000040c0)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)="816154c6e71d9c750363f342744911ca", 0x10}], 0x1, 0x0, 0x0, 0x40088d5}], 0x1, 0x40)
recvmmsg(r1, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x31, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000003c0)=""/186, 0xba}], 0x2}, 0x8}], 0x2, 0x10000, 0x0)

1.845786192s ago: executing program 0 (id=103):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x170, 0xd0, 0x8, 0x170, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [], 'pim6reg0\x00', 'veth0\x00'}, 0x0, 0x108, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}}, @common=@frag={{0x30}, {[], 0x0, 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@limit={{0x48}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)

1.778616152s ago: executing program 0 (id=104):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x44, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_ZONE={0x6}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044080}, 0x4044090)

1.778427062s ago: executing program 0 (id=105):
r0 = socket$caif_stream(0x25, 0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_to_bond\x00', 0x10)
connect$caif(r0, &(0x7f0000000640)=@dgm={0x25, 0x6, 0x4}, 0x18)

1.777664604s ago: executing program 0 (id=106):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af}, 0x38)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)

661.689067ms ago: executing program 0 (id=114):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x54, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0xfff2}, {0x6, 0x8}, {0xffe0, 0xb}}}, 0x24}}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001440)={0xd4, 0x0, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x400}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x224df4f2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0xd4}}, 0x40001)

612.987565ms ago: executing program 1 (id=115):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @private1}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x44}}, 0x0)

562.00905ms ago: executing program 1 (id=117):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

454.858678ms ago: executing program 1 (id=119):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a08000640000000", @ANYRES64=r0], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

292.208967ms ago: executing program 1 (id=121):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000002080001400000000070000000180a01040000000000000000010000000900020073797a30090000000900010073797a3000000000"], 0xf8}}, 0x0)

292.005857ms ago: executing program 1 (id=122):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

222.56483ms ago: executing program 1 (id=123):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@float={0x7, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {0xc, 0x4}, {0x2, 0x2}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x30]}}, &(0x7f00000001c0)=""/189, 0x79, 0xbd, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000a80)=""/133, 0x41100, 0x65, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0xe, 0x3}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x4}, 0x18)
unshare(0x2a020400)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r6}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x30, 0x0, 0x1, 0x0, 0x25dfdbfc, {{}, {0x0, 0x6}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc4000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4048000)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)

222.364879ms ago: executing program 2 (id=124):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x40, r1, 0x615, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0xc040)

122.952138ms ago: executing program 2 (id=125):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4e}, 0x28)

122.689459ms ago: executing program 2 (id=126):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8f", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x90}, 0xc8c5)

63.014342ms ago: executing program 2 (id=127):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xd0}}, 0x0)

62.837128ms ago: executing program 2 (id=128):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r1, 0x8b22, &(0x7f0000000040))

0s ago: executing program 2 (id=129):
unshare(0x20000400)
r0 = socket(0x15, 0x5, 0x0)
bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x3}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52676' (ED25519) to the list of known hosts.
syzkaller login: [   47.632584][ T5760] cgroup: Unknown subsys name 'net'
[   47.735936][ T5760] cgroup: Unknown subsys name 'cpuset'
[   47.740447][ T5760] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.219843][ T5760] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.252814][ T5835] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.532922][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.536165][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.544522][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.548828][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.551597][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.618235][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.621000][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.623873][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.628589][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.631291][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.655984][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.658723][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.661345][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.664506][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.667639][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.873085][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   58.955705][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   58.974329][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.976669][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.979344][ T5854] bridge_slave_0: entered allmulticast mode
[   58.983241][ T5854] bridge_slave_0: entered promiscuous mode
[   58.988945][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   59.017102][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.020165][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.022663][ T5854] bridge_slave_1: entered allmulticast mode
[   59.026612][ T5854] bridge_slave_1: entered promiscuous mode
[   59.089280][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.105463][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.151048][ T5854] team0: Port device team_slave_0 added
[   59.177384][ T5854] team0: Port device team_slave_1 added
[   59.188421][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.192191][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.195222][ T5857] bridge_slave_0: entered allmulticast mode
[   59.197870][ T5857] bridge_slave_0: entered promiscuous mode
[   59.217600][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.220429][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.223305][ T5860] bridge_slave_0: entered allmulticast mode
[   59.227622][ T5860] bridge_slave_0: entered promiscuous mode
[   59.231759][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.235602][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.238363][ T5860] bridge_slave_1: entered allmulticast mode
[   59.241969][ T5860] bridge_slave_1: entered promiscuous mode
[   59.246556][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.248925][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.251165][ T5857] bridge_slave_1: entered allmulticast mode
[   59.254148][ T5857] bridge_slave_1: entered promiscuous mode
[   59.264404][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.266609][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.274908][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.311490][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.314887][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.317353][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.326167][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.331893][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.337427][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.341655][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.408420][ T5854] hsr_slave_0: entered promiscuous mode
[   59.410727][ T5854] hsr_slave_1: entered promiscuous mode
[   59.414252][ T5857] team0: Port device team_slave_0 added
[   59.417717][ T5860] team0: Port device team_slave_0 added
[   59.420989][ T5857] team0: Port device team_slave_1 added
[   59.426063][ T5860] team0: Port device team_slave_1 added
[   59.489117][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.492042][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.500704][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.505076][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.507323][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.516613][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.536106][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.538306][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.547036][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.552054][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.555450][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.565812][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.649254][ T5857] hsr_slave_0: entered promiscuous mode
[   59.651501][ T5857] hsr_slave_1: entered promiscuous mode
[   59.654482][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.657289][ T5857] Cannot create hsr debugfs directory
[   59.682395][ T5860] hsr_slave_0: entered promiscuous mode
[   59.686615][ T5860] hsr_slave_1: entered promiscuous mode
[   59.689338][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.692298][ T5860] Cannot create hsr debugfs directory
[   59.801293][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.827158][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.857684][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.861802][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.970377][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.980331][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.997044][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.005198][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.017574][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.051220][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   60.054545][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.061073][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.067362][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.074456][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.079773][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.082390][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.102087][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.104476][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.141183][ T5854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   60.145093][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.187818][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.221178][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.226249][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   60.231781][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.234159][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.252409][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   60.257902][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.260154][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.271129][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.273590][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.280802][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.294810][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.297517][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.315310][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.334602][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.352142][ T5854] veth0_vlan: entered promiscuous mode
[   60.377417][ T5854] veth1_vlan: entered promiscuous mode
[   60.404970][ T5854] veth0_macvtap: entered promiscuous mode
[   60.424138][ T5854] veth1_macvtap: entered promiscuous mode
[   60.441524][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.449216][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.464744][ T5866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.477840][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.481783][ T5866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.487115][ T5866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.504532][ T5866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.529688][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.534392][ T4613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.541590][ T4613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.560959][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.564845][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.579541][ T5857] veth0_vlan: entered promiscuous mode
[   60.587603][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.595439][ T5860] veth0_vlan: entered promiscuous mode
[   60.598721][ T5857] veth1_vlan: entered promiscuous mode
[   60.612747][ T5860] veth1_vlan: entered promiscuous mode
[   60.632586][ T5857] veth0_macvtap: entered promiscuous mode
[   60.644130][ T5855] Bluetooth: hci0: command tx timeout
[   60.649709][ T5857] veth1_macvtap: entered promiscuous mode
[   60.665834][ T5860] veth0_macvtap: entered promiscuous mode
[   60.670026][ T5860] veth1_macvtap: entered promiscuous mode
[   60.673330][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.687865][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.701770][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.709857][ T5880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.713806][ T5855] Bluetooth: hci2: command tx timeout
[   60.715733][ T5855] Bluetooth: hci1: command tx timeout
[   60.719414][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.721814][ T5880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.725330][ T5880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.735817][ T5880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.738612][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.756169][ T5880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.772078][ T5880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.780675][ T5880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.832106][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.835895][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.842579][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'.
[   60.852881][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.857297][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.887800][ T4613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.903676][ T4613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.912289][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.920599][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.983946][ T5928] netlink: 'syz.2.12': attribute type 1 has an invalid length.
[   60.986480][ T5928] netlink: 'syz.2.12': attribute type 2 has an invalid length.
[   61.056672][ T5935] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.268776][ T5957] netlink: 96 bytes leftover after parsing attributes in process `syz.1.30'.
[   61.295181][ T5959] netlink: 76 bytes leftover after parsing attributes in process `syz.2.31'.
[   61.580014][ T5987] syz_tun: entered promiscuous mode
[   61.581865][ T5987] macsec1: entered allmulticast mode
[   61.586153][ T5987] syz_tun: entered allmulticast mode
[   61.605994][ T5987] syz_tun: left allmulticast mode
[   61.607836][ T5987] syz_tun: left promiscuous mode
[   61.990979][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.64'.
[   62.061598][ T6036] netlink: 'syz.1.68': attribute type 8 has an invalid length.
[   62.485527][ T6055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.75'.
[   62.488444][ T6055] netlink: 260 bytes leftover after parsing attributes in process `syz.2.75'.
[   62.610238][ T6059] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   62.705591][ T6065] lo speed is unknown, defaulting to 1000
[   62.707640][ T6065] lo speed is unknown, defaulting to 1000
[   62.710457][ T6065] lo speed is unknown, defaulting to 1000
[   62.715935][ T6065] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   62.722109][ T6065] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   62.723694][ T5220] Bluetooth: hci0: command tx timeout
[   62.738807][ T6065] lo speed is unknown, defaulting to 1000
[   62.742073][ T6065] lo speed is unknown, defaulting to 1000
[   62.745529][ T6065] lo speed is unknown, defaulting to 1000
[   62.757857][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'.
[   62.761343][ T6065] wg1: entered promiscuous mode
[   62.763094][ T6065] wg1: entered allmulticast mode
[   62.794024][ T5220] Bluetooth: hci1: command tx timeout
[   62.796149][ T5855] Bluetooth: hci2: command tx timeout
[   62.807150][ T6067] netlink: 248 bytes leftover after parsing attributes in process `syz.2.81'.
[   63.031446][ T6082] Bluetooth: MGMT ver 1.23
[   63.143170][ T6092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.90'.
[   63.308151][ T6107] xt_TCPMSS: Only works on TCP SYN packets
[   63.640921][ T5880] syzkaller0: tun_net_xmit 76
[   63.642766][ T5880] syzkaller0: tun_net_xmit 48
[   63.647509][ T6139] syzkaller0: create flow: hash 2151825576 index 1
[   63.665124][    T9] syzkaller0: tun_net_xmit 76
[   63.668896][ T6138] syzkaller0: delete flow: hash 2151825576 index 1
[   64.021359][ T6151] nbd: must specify an index to disconnect
[   64.793935][ T5220] Bluetooth: hci0: command tx timeout
[   64.873576][ T5220] Bluetooth: hci1: command tx timeout
[   64.875369][ T5220] Bluetooth: hci2: command tx timeout
[   64.983793][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'.
[   65.062229][ T6189] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[   65.331796][ T6201] warning: `syz.2.128' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.453352][   T10] cfg80211: failed to load regulatory.db
[   65.839089][ T5866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.884646][ T5866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.930875][ T5866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.972850][ T5866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.051923][ T5866] bridge_slave_1: left allmulticast mode
[   66.055463][ T5866] bridge_slave_1: left promiscuous mode
[   66.058083][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.064966][ T5866] bridge_slave_0: left allmulticast mode
[   66.066790][ T5866] bridge_slave_0: left promiscuous mode
[   66.068655][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.239499][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.244391][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.247825][ T5866] bond0 (unregistering): Released all slaves
[   66.475329][ T5866] hsr_slave_0: left promiscuous mode
[   66.480209][ T5866] hsr_slave_1: left promiscuous mode
[   66.482267][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.485113][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.488046][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.490460][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.502807][ T5866] veth1_macvtap: left promiscuous mode
[   66.506064][ T5866] veth0_macvtap: left promiscuous mode
[   66.508111][ T5866] veth1_vlan: left promiscuous mode
[   66.509858][ T5866] veth0_vlan: left promiscuous mode
[   66.698154][ T5866] team0 (unregistering): Port device team_slave_1 removed
[   66.714059][ T5866] team0 (unregistering): Port device team_slave_0 removed
[   66.885344][   T10] lo speed is unknown, defaulting to 1000
[   66.887675][   T10] infiniband syz1: ib_query_port failed (-19)
[   67.171418][ T5866] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.233113][ T5866] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.276998][ T5866] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.315732][ T5866] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.425071][ T5866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.475367][ T5866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.521952][ T5866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.593137][ T5866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.664656][ T5866] bridge_slave_1: left allmulticast mode
[   67.666830][ T5866] bridge_slave_1: left promiscuous mode
[   67.668817][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.672362][ T5866] bridge_slave_0: left allmulticast mode
[   67.676687][ T5866] bridge_slave_0: left promiscuous mode
[   67.678671][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.682889][ T5866] bridge_slave_1: left allmulticast mode
[   67.685165][ T5866] bridge_slave_1: left promiscuous mode
[   67.687110][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.690974][ T5866] bridge_slave_0: left allmulticast mode
[   67.692854][ T5866] bridge_slave_0: left promiscuous mode
[   67.695182][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.923017][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.927271][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.930803][ T5866] bond0 (unregistering): Released all slaves
[   68.099405][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.103633][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.107300][ T5866] bond0 (unregistering): Released all slaves
[   68.462135][ T5866] hsr_slave_0: left promiscuous mode
[   68.464562][ T5866] hsr_slave_1: left promiscuous mode
[   68.466660][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.469148][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.472115][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.476028][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.481100][ T5866] hsr_slave_0: left promiscuous mode
[   68.483303][ T5866] hsr_slave_1: left promiscuous mode
[   68.485635][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.488136][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.490840][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.493309][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.505803][ T5866] veth1_macvtap: left promiscuous mode
[   68.507726][ T5866] veth0_macvtap: left promiscuous mode
[   68.509643][ T5866] veth1_vlan: left promiscuous mode
[   68.511730][ T5866] veth0_vlan: left promiscuous mode
[   68.514733][ T5866] veth1_macvtap: left promiscuous mode
[   68.516581][ T5866] veth0_macvtap: left promiscuous mode
[   68.518463][ T5866] veth1_vlan: left promiscuous mode
[   68.520246][ T5866] veth0_vlan: left promiscuous mode
[   68.752077][ T5866] team0 (unregistering): Port device team_slave_1 removed
[   68.771194][ T5866] team0 (unregistering): Port device team_slave_0 removed
[   69.082239][ T5866] team0 (unregistering): Port device team_slave_1 removed
[   69.097957][ T5866] team0 (unregistering): Port device team_slave_0 removed
[   71.038211][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.040428][ T1361] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
16:26:35  Registers:
info registers vcpu 0

CPU#0
RAX=2618ad86ddcb2300 RBX=ffffffff81976a18 RCX=2618ad86ddcb2300 RDX=0000000000000001
RSI=ffffffff8d99ef91 RDI=ffffffff8be28d80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa235f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b7044f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a2bed4e068 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff 00000000ffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000010 00000000326e1260
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000021 00000000326e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=5c35a07133451c00 RBX=ffffffff81976a18 RCX=5c35a07133451c00 RDX=0000000000000001
RSI=ffffffff8d99ef91 RDI=ffffffff8be28d80 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa235f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d3000
RIP=ffffffff8b7044f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc6967a118 CR3=0000000110f34000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=ffffffffffffffff ff00000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
