last executing test programs:

1.388133579s ago: executing program 1 (id=663):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/212, 0xd4}], 0x1}, 0x3ff}], 0x4000300, 0x2, 0x0)

1.069097529s ago: executing program 2 (id=678):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000003a00290200000000000000000a0000004900"], 0x18}}, 0x0)

1.068801386s ago: executing program 2 (id=680):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@empty, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001b, @multicast1}, {0x0, 0x17c1, 0xfffffffffffffdc5}}}}}, 0x0)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x140)

868.533638ms ago: executing program 0 (id=683):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd}, @jmp={0x5, 0x0, 0x0, 0x8, 0x9, 0xfffffffffffffffc}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)

868.363828ms ago: executing program 0 (id=684):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x8)

868.1934ms ago: executing program 0 (id=685):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x60}}, 0x0)

786.955975ms ago: executing program 0 (id=686):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

497.422488ms ago: executing program 1 (id=687):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x30, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

108.676906ms ago: executing program 1 (id=688):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='ext4_remove_blocks\x00', r0, 0x0, 0x5}, 0x18)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r1, 0x0, 0x21, 0xfffffffffffffffe}, 0x30)

108.548339ms ago: executing program 1 (id=689):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffead, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

57.213494ms ago: executing program 2 (id=690):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50)

57.095365ms ago: executing program 0 (id=691):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x3}, 0x20, 0x0, 0xfffffffc, 0x80}})

56.969829ms ago: executing program 1 (id=692):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

56.885222ms ago: executing program 2 (id=693):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x5, 0x0, 0x0, 0x0, 0xf18fb234b68a349a, 0x2200}}, 0x1c}}, 0x50)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)

595.895µs ago: executing program 1 (id=694):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x14, &(0x7f00000002c0)="010000000980ffff", 0x8)

276.484µs ago: executing program 0 (id=695):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x4e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000000)=ANY=[], 0xb5)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x2000, 0x0, 0x0, 0x0, 0x28}, 0x94)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

145.509µs ago: executing program 2 (id=696):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000000)={0x0, 0x0})

0s ago: executing program 2 (id=697):
r0 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x5, {{0xa, 0x4e21, 0xffffff00, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:42501' (ED25519) to the list of known hosts.
syzkaller login: [   40.990267][ T5768] cgroup: Unknown subsys name 'net'
[   41.123539][ T5768] cgroup: Unknown subsys name 'cpuset'
[   41.127414][ T5768] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.831142][ T5768] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.115535][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.118671][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.121683][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.124436][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.127042][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.153107][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.155730][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.161890][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.164649][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.167659][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.170198][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.172880][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.175660][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.206592][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.210366][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.341477][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   47.447625][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.450481][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.453094][ T5840] bridge_slave_0: entered allmulticast mode
[   47.455814][ T5840] bridge_slave_0: entered promiscuous mode
[   47.463827][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   47.474626][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.476882][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.479111][ T5840] bridge_slave_1: entered allmulticast mode
[   47.482536][ T5840] bridge_slave_1: entered promiscuous mode
[   47.541859][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.554860][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.581415][ T5840] team0: Port device team_slave_0 added
[   47.592915][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   47.607287][ T5840] team0: Port device team_slave_1 added
[   47.613149][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.615349][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.617513][ T5847] bridge_slave_0: entered allmulticast mode
[   47.620095][ T5847] bridge_slave_0: entered promiscuous mode
[   47.623995][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.626201][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.628371][ T5847] bridge_slave_1: entered allmulticast mode
[   47.631202][ T5847] bridge_slave_1: entered promiscuous mode
[   47.672145][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.674277][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.683033][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.697123][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.701845][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.718951][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.721324][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.729096][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.758511][ T5847] team0: Port device team_slave_0 added
[   47.774286][ T5847] team0: Port device team_slave_1 added
[   47.784593][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.786780][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.788954][ T5844] bridge_slave_0: entered allmulticast mode
[   47.792310][ T5844] bridge_slave_0: entered promiscuous mode
[   47.818206][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.820376][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.822994][ T5844] bridge_slave_1: entered allmulticast mode
[   47.825653][ T5844] bridge_slave_1: entered promiscuous mode
[   47.847072][ T5840] hsr_slave_0: entered promiscuous mode
[   47.849399][ T5840] hsr_slave_1: entered promiscuous mode
[   47.863118][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.868068][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.871283][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.873607][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.881289][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.885883][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.888038][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.896523][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.933152][ T5844] team0: Port device team_slave_0 added
[   47.949755][ T5844] team0: Port device team_slave_1 added
[   48.012117][ T5847] hsr_slave_0: entered promiscuous mode
[   48.014353][ T5847] hsr_slave_1: entered promiscuous mode
[   48.016422][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   48.018202][ T5847] Cannot create hsr debugfs directory
[   48.021015][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.023285][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.031743][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.044430][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.046520][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.054441][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.110544][ T5844] hsr_slave_0: entered promiscuous mode
[   48.113311][ T5844] hsr_slave_1: entered promiscuous mode
[   48.115463][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   48.117202][ T5844] Cannot create hsr debugfs directory
[   48.209289][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.224262][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.244732][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.249995][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.317534][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.320151][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.323335][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.325691][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.333368][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.338334][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.344824][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.353352][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.369388][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.372433][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.413735][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.418838][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.425384][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.429868][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.510479][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.517203][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.537940][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   48.542478][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   48.549470][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.551769][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.559065][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.568192][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.570366][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.574373][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.576589][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.585012][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.587130][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.612765][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   48.630435][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.647557][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.649769][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.655932][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.658112][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.775820][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.819627][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.832332][ T5844] veth0_vlan: entered promiscuous mode
[   48.852416][ T5844] veth1_vlan: entered promiscuous mode
[   48.869763][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.884696][ T5840] veth0_vlan: entered promiscuous mode
[   48.897712][ T5844] veth0_macvtap: entered promiscuous mode
[   48.902650][ T5844] veth1_macvtap: entered promiscuous mode
[   48.909889][ T5840] veth1_vlan: entered promiscuous mode
[   48.928103][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.945309][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.951972][ T5847] veth0_vlan: entered promiscuous mode
[   48.960527][ T5868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.966623][ T5868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.972143][ T5868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.978423][ T5840] veth0_macvtap: entered promiscuous mode
[   48.984878][ T5847] veth1_vlan: entered promiscuous mode
[   48.987314][ T5840] veth1_macvtap: entered promiscuous mode
[   48.990005][ T5868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.026466][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.045605][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.046514][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.047953][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.069624][ T5690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.072981][ T5690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.075671][ T5690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.095370][ T5690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.100131][ T5847] veth0_macvtap: entered promiscuous mode
[   49.103306][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.105886][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.126328][ T5847] veth1_macvtap: entered promiscuous mode
[   49.151515][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.151644][   T54] Bluetooth: hci0: command tx timeout
[   49.154035][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.167973][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.177938][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.206834][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.210383][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.219009][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.222824][ T5868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.229441][ T5868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.233130][   T54] Bluetooth: hci2: command tx timeout
[   49.233166][ T5849] Bluetooth: hci1: command tx timeout
[   49.237845][ T5868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.243982][ T5868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.340260][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.344697][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.390511][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.394403][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.412713][ T5916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.415613][ T5916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.434727][ T5918] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.491924][ T5922] netlink: 'syz.2.9': attribute type 1 has an invalid length.
[   49.603181][ T5929] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.967486][ T5947] Illegal XDP return value 5947 on prog  (id 3) dev N/A, expect packet loss!
[   50.126127][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'.
[   50.133221][ T5953] gretap0: entered promiscuous mode
[   50.334409][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'.
[   50.337138][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'.
[   50.339715][ T5965] netlink: 'syz.0.28': attribute type 7 has an invalid length.
[   50.538927][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'.
[   50.568979][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'.
[   50.577278][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'.
[   50.583915][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'.
[   50.586611][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'.
[   50.752605][ T5993] wireguard0: entered promiscuous mode
[   50.754331][ T5993] wireguard0: entered allmulticast mode
[   50.987752][ T6016] bridge_slave_0: left allmulticast mode
[   50.989922][ T6016] bridge_slave_0: left promiscuous mode
[   50.995677][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.012658][ T6016] bridge_slave_1: left allmulticast mode
[   51.014854][ T6016] bridge_slave_1: left promiscuous mode
[   51.017129][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.045144][ T6024] netlink: 'syz.1.52': attribute type 2 has an invalid length.
[   51.048598][ T6016] bond0: (slave bond_slave_0): Releasing backup interface
[   51.054898][ T6016] bond0: (slave bond_slave_1): Releasing backup interface
[   51.065359][ T6016] team0: Port device team_slave_0 removed
[   51.083604][ T6016] team0: Port device team_slave_1 removed
[   51.086485][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.089556][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.095448][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.098317][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.205864][ T6031] tipc: Started in network mode
[   51.207354][ T6031] tipc: Node identity 7, cluster identity 4711
[   51.209463][ T6031] tipc: Node number set to 7
[   51.224922][ T6031] delete_channel: no stack
[   51.240990][ T5849] Bluetooth: hci0: command tx timeout
[   51.312029][ T5849] Bluetooth: hci1: command tx timeout
[   51.312053][   T54] Bluetooth: hci2: command tx timeout
[   51.339210][ T6045] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   51.368917][ T6041] syz.1.62 (6041) used greatest stack depth: 20760 bytes left
[   51.394868][ T6050] netlink: 'syz.2.64': attribute type 7 has an invalid length.
[   51.397193][ T6050] netlink: 'syz.2.64': attribute type 8 has an invalid length.
[   51.929941][ T6102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.936177][ T6102] syzkaller0: entered promiscuous mode
[   51.937910][ T6102] syzkaller0: entered allmulticast mode
[   51.981931][ T6102] tipc: Resetting bearer <eth:syzkaller0>
[   52.034184][ T6101] tipc: Resetting bearer <eth:syzkaller0>
[   52.597456][ T6101] tipc: Disabling bearer <eth:syzkaller0>
[   52.693349][ T6118] netlink: 'syz.0.94': attribute type 1 has an invalid length.
[   52.761537][ T6125] netlink: 'syz.2.99': attribute type 1 has an invalid length.
[   52.808441][ T6130] netlink: 'syz.0.101': attribute type 21 has an invalid length.
[   53.049157][   T33] audit: type=1800 audit(1754814426.716:2): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.110" name="memory.events" dev="tmpfs" ino=204 res=0 errno=0
[   53.064863][   T33] audit: type=1804 audit(1754814426.726:3): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.110" name="memory.events" dev="tmpfs" ino=204 res=1 errno=0
[   53.113737][ T6153] warning: `syz.1.112' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.315661][   T54] Bluetooth: hci0: command tx timeout
[   53.394122][   T54] Bluetooth: hci1: command tx timeout
[   53.403312][   T54] Bluetooth: hci2: command tx timeout
[   53.433307][ T6182] netlink: 'syz.2.125': attribute type 2 has an invalid length.
[   53.512481][ T6192] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   53.616674][ T6201] nbd: socks must be embedded in a SOCK_ITEM attr
[   53.776485][ T6211] netlink: 'syz.1.138': attribute type 1 has an invalid length.
[   54.525355][ T6245] syz.2.154 uses obsolete (PF_INET,SOCK_PACKET)
[   54.716269][ T6258] unknown channel width for channel at 909000KHz?
[   54.718379][ T6258] unknown channel width for channel at 909000KHz?
[   54.720485][ T6258] unknown channel width for channel at 909000KHz?
[   54.877073][ T6265] __nla_validate_parse: 11 callbacks suppressed
[   54.877083][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'.
[   54.914693][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'.
[   54.954002][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'.
[   54.969770][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'.
[   54.974410][ T6271] Zero length message leads to an empty skb
[   54.978178][ T6273] Bluetooth: MGMT ver 1.23
[   55.221897][ T6290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.176'.
[   55.349021][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   55.353338][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   55.390833][   T54] Bluetooth: hci0: command tx timeout
[   55.443424][ T6312] validate_nla: 2 callbacks suppressed
[   55.443445][ T6312] netlink: 'syz.1.187': attribute type 9 has an invalid length.
[   55.449759][ T6312] netlink: 224 bytes leftover after parsing attributes in process `syz.1.187'.
[   55.471324][ T5849] Bluetooth: hci1: command tx timeout
[   55.473013][   T54] Bluetooth: hci2: command tx timeout
[   55.480002][ T6314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.186'.
[   55.854528][ T6277] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   56.172518][ T6385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.213'.
[   56.651746][ T6429] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   56.655154][ T6429] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   57.056807][ T6464] netlink: 'syz.0.248': attribute type 1 has an invalid length.
[   57.106099][ T6464] bond2: (slave gretap1): making interface the new active one
[   57.109526][ T6464] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   57.126087][ T6464] syz.0.248 (6464) used greatest stack depth: 19848 bytes left
[   57.470704][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[   58.797061][ T6575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.739540][ T6635] netlink: 'syz.2.323': attribute type 39 has an invalid length.
[   59.968161][ T6637] lo speed is unknown, defaulting to 1000
[   59.970079][ T6637] lo speed is unknown, defaulting to 1000
[   59.974222][ T6637] lo speed is unknown, defaulting to 1000
[   59.979301][ T6637] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   59.986937][ T6637] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   60.007111][ T6637] lo speed is unknown, defaulting to 1000
[   60.011368][ T6637] lo speed is unknown, defaulting to 1000
[   60.014672][ T6637] lo speed is unknown, defaulting to 1000
[   60.040508][ T6637] ipvlan2: entered promiscuous mode
[   60.197824][ T6646] netlink: 'syz.0.327': attribute type 25 has an invalid length.
[   60.696238][ T6683] __nla_validate_parse: 4 callbacks suppressed
[   60.696249][ T6683] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.344'.
[   60.779368][ T6687] bridge_slave_0: left allmulticast mode
[   60.781436][ T6687] bridge_slave_0: left promiscuous mode
[   60.783368][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.788352][ T6687] bridge_slave_1: left allmulticast mode
[   60.790195][ T6687] bridge_slave_1: left promiscuous mode
[   60.793759][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.799002][ T6687] bond0: (slave bond_slave_0): Releasing backup interface
[   60.806457][ T6687] bond0: (slave bond_slave_1): Releasing backup interface
[   60.815951][ T6687] team0: Port device team_slave_0 removed
[   60.822279][ T6687] team0: Port device team_slave_1 removed
[   60.824562][ T6687] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.826980][ T6687] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.832216][ T6687] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.834543][ T6687] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.852187][  T792] lo speed is unknown, defaulting to 1000
[   60.871653][ T6688] team0: Mode changed to "loadbalance"
[   60.932668][ T6690] netlink: 'syz.2.347': attribute type 2 has an invalid length.
[   60.934942][ T6690] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.347'.
[   61.839261][ T6763] netlink: 'syz.1.378': attribute type 5 has an invalid length.
[   62.005850][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'.
[   62.036342][ T6786] netlink: 60 bytes leftover after parsing attributes in process `syz.1.386'.
[   62.039462][ T6779] netlink: 60 bytes leftover after parsing attributes in process `syz.1.386'.
[   62.211570][ T6804] netlink: 'syz.1.397': attribute type 3 has an invalid length.
[   62.220785][ T6804] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.397'.
[   62.243084][ T6807] netlink: 'syz.0.399': attribute type 12 has an invalid length.
[   62.355551][ T6820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.405'.
[   62.454633][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'.
[   62.779670][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'.
[   63.019601][ T6883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.072322][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'.
[   63.939656][ T5690] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   64.142626][ T6962] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   64.590683][   T54] Bluetooth: hci2: command tx timeout
[   65.193368][ T7011] netlink: 'syz.2.490': attribute type 1 has an invalid length.
[   65.195831][ T7011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.489069][ T7037] nbd: couldn't find device at index 536870912
[   66.291043][ T7039] block nbd0: server does not support multiple connections per device.
[   66.300460][ T7039] block nbd0: shutting down sockets
[   66.434030][ T7056] __nla_validate_parse: 9 callbacks suppressed
[   66.434041][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'.
[   66.460248][ T7060] tc_dump_action: action bad kind
[   66.562539][ T7070] netlink: 'syz.1.516': attribute type 21 has an invalid length.
[   66.566992][ T7070] netlink: 132 bytes leftover after parsing attributes in process `syz.1.516'.
[   66.894587][ T7112] netlink: 'syz.1.529': attribute type 29 has an invalid length.
[   66.896993][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'.
[   66.929854][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'.
[   67.009064][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'.
[   67.035933][ T7130] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[   67.113484][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'.
[   67.393097][ T7183] tipc: Started in network mode
[   67.394710][ T7183] tipc: Node identity 5abf40558443, cluster identity 4711
[   67.396955][ T7183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.399421][ T7183] syzkaller0: entered promiscuous mode
[   67.406820][ T7183] syzkaller0: entered allmulticast mode
[   67.421393][ T7183] tipc: Resetting bearer <eth:syzkaller0>
[   67.424200][ T7181] tipc: Resetting bearer <eth:syzkaller0>
[   67.430249][ T7181] tipc: Disabling bearer <eth:syzkaller0>
[   67.474653][ T7190] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   67.633555][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'.
[   67.808622][ T7225] openvswitch: netlink: Message has 4 unknown bytes.
[   67.810789][ T7225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.981133][ T7226] block nbd0: server does not support multiple connections per device.
[   67.988616][ T7226] block nbd0: shutting down sockets
[   68.483185][ T7272] netlink: 14489 bytes leftover after parsing attributes in process `syz.0.602'.
[   68.492030][ T7267] wireguard0: left promiscuous mode
[   68.493682][ T7267] wireguard0: left allmulticast mode
[   68.497826][ T7267] ipvlan2: left promiscuous mode
[   68.504077][ T5876] lo speed is unknown, defaulting to 1000
[   68.504192][ T7270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.505820][ T5876] syz1: Port: 1 Link DOWN
[   68.513250][ T7273] syzkaller0: entered promiscuous mode
[   68.514952][ T7273] syzkaller0: entered allmulticast mode
[   68.517671][ T5690] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.527647][ T5690] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.530394][ T5690] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.534167][ T5690] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.547056][ T7263] tipc: Resetting bearer <eth:syzkaller0>
[   68.580751][ T7263] tipc: Resetting bearer <eth:syzkaller0>
[   68.592420][ T7263] tipc: Disabling bearer <eth:syzkaller0>
[   68.626924][ T7270] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.599'.
[   68.909219][ T7318] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.917095][ T7321] lo speed is unknown, defaulting to 1000
[   68.919028][ T7321] lo speed is unknown, defaulting to 1000
[   68.927083][ T7318] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   68.933270][ T7318] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[   68.936051][ T7321] lo speed is unknown, defaulting to 1000
[   68.951887][ T7321] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   68.979138][ T7321] lo speed is unknown, defaulting to 1000
[   68.985030][ T7321] lo speed is unknown, defaulting to 1000
[   68.987905][ T7321] lo speed is unknown, defaulting to 1000
[   69.035677][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'.
[   69.073961][ T7333] netlink: 'syz.0.626': attribute type 4 has an invalid length.
[   69.175872][ T7345] netlink: 'syz.2.634': attribute type 11 has an invalid length.
[   69.743033][ T7415] sch_tbf: burst 2 is lower than device lo mtu (81) !
[   69.772782][ T7415] sch_tbf: burst 2 is lower than device lo mtu (81) !
[   69.775618][ T7415] sch_tbf: burst 2 is lower than device lo mtu (81) !
[   70.046730][ T7456] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   70.141583][ T7462] syzkaller0: entered promiscuous mode
[   70.143385][ T7462] syzkaller0: entered allmulticast mode
[   70.915083][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.919906][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.166404][ T7499] netlink: 'syz.0.695': attribute type 10 has an invalid length.
[   71.201107][ T7499] bond0: (slave wlan1): Enslaving as an active interface with an up link
Connection to localhost closed by remote host.
[   71.245474][ T7505] openvswitch: netlink: Unknown nsh attribute 0
[   71.247457][ T7505] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.065186][ T5690] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[   72.071733][ T5690] bond0 (unregistering): Released all slaves
[   72.128961][ T5690] bond1 (unregistering): Released all slaves
[   72.202202][ T5690] tipc: Left network mode
[   72.372027][ T5690] hsr_slave_0: left promiscuous mode
[   72.374180][ T5690] hsr_slave_1: left promiscuous mode
[   73.218317][ T5690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.273956][ T5690] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.343060][ T5690] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.398477][ T5690] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.513963][ T5690] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.550859][ T5690] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.594007][ T5690] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.636406][ T5690] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.737383][ T5690] bridge_slave_1: left allmulticast mode
[   73.739125][ T5690] bridge_slave_1: left promiscuous mode
[   73.742390][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.746352][ T5690] bridge_slave_0: left allmulticast mode
[   73.748098][ T5690] bridge_slave_0: left promiscuous mode
[   73.749909][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.876952][ T5690] bond2 (unregistering): (slave gretap1): Releasing active interface
[   73.978250][ T5690] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   73.985244][ T5690] bond0 (unregistering): Released all slaves
[   73.992957][ T5690] bond1 (unregistering): Released all slaves
[   74.000057][ T5690] bond2 (unregistering): Released all slaves
[   74.301748][ T5690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.307140][ T5690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.311083][ T5690] bond0 (unregistering): Released all slaves
[   74.398284][ T5690] tipc: Left network mode
[   74.421836][ T5690] IPVS: stopping backup sync thread 7456 ...
[   74.707348][ T5690] hsr_slave_0: left promiscuous mode
[   74.709473][ T5690] hsr_slave_1: left promiscuous mode
[   74.714119][ T5690] hsr_slave_0: left promiscuous mode
[   74.716111][ T5690] hsr_slave_1: left promiscuous mode
[   74.718131][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.720456][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.723524][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.725838][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.740038][ T5690] veth1_macvtap: left promiscuous mode
[   74.744177][ T5690] veth0_macvtap: left promiscuous mode
[   74.745908][ T5690] veth1_vlan: left promiscuous mode
[   74.747586][ T5690] veth0_vlan: left promiscuous mode
[   74.750973][ T5690] veth1_macvtap: left promiscuous mode
[   74.752737][ T5690] veth0_macvtap: left promiscuous mode
[   74.754690][ T5690] veth1_vlan: left promiscuous mode
[   74.756357][ T5690] veth0_vlan: left promiscuous mode
[   75.414357][ T5690] team0 (unregistering): Port device team_slave_1 removed
[   75.432779][ T5690] team0 (unregistering): Port device team_slave_0 removed
[   75.635142][   T10] lo speed is unknown, defaulting to 1000
[   75.637125][   T10] infiniband syz2: ib_query_port failed (-19)
[   81.164538][  T791] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
08:27:35  Registers:
info registers vcpu 0

CPU#0
RAX=4839134620411e00 RBX=ffffffff81968308 RCX=4839134620411e00 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005578369cd560 CR3=00000001100d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff 00000000ffffffff
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=000000000000006d 000000002f6d616c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=772f74656e2f396d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000000f5 RBX=ffffc90002c7f688 RCX=ffffea0004375f80 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88810dd7f400 RSP=ffffc90002c7f650
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1f468e7
R12=ffffea0004375f80 R13=0000000000000000 R14=0000000000000000 R15=ffff88810dd7f400
RIP=ffffffff82232889 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3be98c23b0 CR3=0000000108f02000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffff0000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
