last executing test programs:

370.018687ms ago: executing program 2 (id=79):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
io_setup(0x9, &(0x7f0000000b80)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])
io_cancel(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}, 0x0)

367.997223ms ago: executing program 1 (id=81):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="80e02cc39b553e736f9972f6bac2", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

305.86866ms ago: executing program 1 (id=83):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000003400000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc0100000002000000020000000000000000000000000000080019"], 0xe0}}, 0x0)

305.368889ms ago: executing program 2 (id=84):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020)

219.028183ms ago: executing program 0 (id=86):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xa}}}}}}}, 0x0)

218.917166ms ago: executing program 1 (id=87):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)

217.746571ms ago: executing program 2 (id=88):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

161.817638ms ago: executing program 0 (id=89):
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f00000003c0)=' C', 0x2, 0xfffffffffffffffe)

161.494227ms ago: executing program 1 (id=90):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
setreuid(0x0, 0xee01)
ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000080)={0x0, 0x0})

159.305641ms ago: executing program 0 (id=91):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680))
clock_gettime(0x0, &(0x7f0000000400))

156.258563ms ago: executing program 2 (id=92):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000300)="82", 0x0, 0x0, 0x0, 0x7, r0}, 0x38)

68.914126ms ago: executing program 0 (id=93):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)

68.569898ms ago: executing program 1 (id=94):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000300)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000180)=ANY=[@ANYBLOB="1800020002"])

68.389606ms ago: executing program 2 (id=95):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
recvfrom$unix(r1, 0x0, 0x0, 0x2000, 0x0, 0x0)

65.899788ms ago: executing program 0 (id=96):
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0)
readv(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000380)=""/122, 0x7a}], 0x2)

60.686506ms ago: executing program 1 (id=97):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r1, 0x100000000)

220.287µs ago: executing program 2 (id=98):
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r2})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e})
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 0 (id=99):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000800000000000000000000000850000009700000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000e00000095"], &(0x7f0000000680)='GPL\x00'}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:21350' (ED25519) to the list of known hosts.
syzkaller login: [   47.841292][ T5825] cgroup: Unknown subsys name 'net'
[   47.987696][ T5825] cgroup: Unknown subsys name 'cpuset'
[   47.991578][ T5825] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.295668][ T5825] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.682319][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.685510][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.688809][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.692380][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.695333][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.764682][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.767685][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.770441][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.774562][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.778134][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.808276][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.811644][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.814417][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.817247][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.819868][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.908651][ T5924] chnl_net:caif_netlink_parms(): no params data found
[   60.020332][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.023088][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.026939][ T5924] bridge_slave_0: entered allmulticast mode
[   60.029644][ T5924] bridge_slave_0: entered promiscuous mode
[   60.035357][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.038115][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.040385][ T5924] bridge_slave_1: entered allmulticast mode
[   60.043080][ T5924] bridge_slave_1: entered promiscuous mode
[   60.064769][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.069080][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.102386][ T5924] team0: Port device team_slave_0 added
[   60.125656][ T5924] team0: Port device team_slave_1 added
[   60.162363][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.164737][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.172918][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.189651][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.191854][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.200987][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.207404][ T5930] chnl_net:caif_netlink_parms(): no params data found
[   60.226581][ T5934] chnl_net:caif_netlink_parms(): no params data found
[   60.279264][ T5924] hsr_slave_0: entered promiscuous mode
[   60.281544][ T5924] hsr_slave_1: entered promiscuous mode
[   60.307993][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.310544][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.312761][ T5930] bridge_slave_0: entered allmulticast mode
[   60.315648][ T5930] bridge_slave_0: entered promiscuous mode
[   60.335905][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.338349][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.340710][ T5930] bridge_slave_1: entered allmulticast mode
[   60.343665][ T5930] bridge_slave_1: entered promiscuous mode
[   60.358150][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.360992][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.364817][ T5934] bridge_slave_0: entered allmulticast mode
[   60.367541][ T5934] bridge_slave_0: entered promiscuous mode
[   60.392071][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.394814][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.397027][ T5934] bridge_slave_1: entered allmulticast mode
[   60.400706][ T5934] bridge_slave_1: entered promiscuous mode
[   60.417025][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.436815][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.462671][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.469247][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.508966][ T5930] team0: Port device team_slave_0 added
[   60.512308][ T5934] team0: Port device team_slave_0 added
[   60.526552][ T5930] team0: Port device team_slave_1 added
[   60.529469][ T5934] team0: Port device team_slave_1 added
[   60.574134][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.576313][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.588807][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.592674][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.595682][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.603698][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.607969][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.610069][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.618219][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.621977][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.624405][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.632166][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.696226][ T5934] hsr_slave_0: entered promiscuous mode
[   60.698565][ T5934] hsr_slave_1: entered promiscuous mode
[   60.700893][ T5934] debugfs: 'hsr0' already exists in 'hsr'
[   60.703045][ T5934] Cannot create hsr debugfs directory
[   60.715537][ T5930] hsr_slave_0: entered promiscuous mode
[   60.717781][ T5930] hsr_slave_1: entered promiscuous mode
[   60.719894][ T5930] debugfs: 'hsr0' already exists in 'hsr'
[   60.721647][ T5930] Cannot create hsr debugfs directory
[   60.733085][ T5924] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.750695][ T5924] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.776625][ T5924] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.795983][ T5924] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.947070][ T5930] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.959225][ T5930] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.978787][ T5930] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.995175][ T5930] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.045845][ T5934] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.061488][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.066550][ T5934] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.074731][ T5934] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.081844][ T5934] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.111025][ T5924] 8021q: adding VLAN 0 to HW filter on device team0
[   61.122319][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.124949][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.143828][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.146496][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.208982][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.234483][ T5930] 8021q: adding VLAN 0 to HW filter on device team0
[   61.238273][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.256849][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.259138][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.266134][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.269106][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.278152][ T5934] 8021q: adding VLAN 0 to HW filter on device team0
[   61.304888][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.307795][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.327680][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.330042][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.411435][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.446821][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.460157][ T5924] veth0_vlan: entered promiscuous mode
[   61.477013][ T5924] veth1_vlan: entered promiscuous mode
[   61.498167][ T5930] veth0_vlan: entered promiscuous mode
[   61.509241][ T5930] veth1_vlan: entered promiscuous mode
[   61.512704][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.527102][ T5924] veth0_macvtap: entered promiscuous mode
[   61.532070][ T5924] veth1_macvtap: entered promiscuous mode
[   61.557210][ T5930] veth0_macvtap: entered promiscuous mode
[   61.560982][ T5934] veth0_vlan: entered promiscuous mode
[   61.564976][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.570308][ T5930] veth1_macvtap: entered promiscuous mode
[   61.576973][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.584799][ T5934] veth1_vlan: entered promiscuous mode
[   61.595936][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.598714][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.601695][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.608728][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.612816][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.618702][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.631352][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.634660][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.637326][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.639951][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.657769][ T5934] veth0_macvtap: entered promiscuous mode
[   61.661369][ T5934] veth1_macvtap: entered promiscuous mode
[   61.690443][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.705465][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.721598][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.725219][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.738412][ T5933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.752468][ T5933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.756020][ T5234] Bluetooth: hci0: command tx timeout
[   61.758052][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.760455][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.775610][ T5933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.778351][ T5933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.788597][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.794781][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.814612][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.818470][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.833813][   T55] Bluetooth: hci1: command tx timeout
[   61.835820][ T5234] Bluetooth: hci2: command tx timeout
[   61.852791][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.854887][ T5924] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.861024][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.919665][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.925867][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.956462][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'.
[   61.959924][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.74'.
[   61.964151][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'.
[   61.968156][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.74'.
[   61.971631][ T5992] netlink: 'syz.0.74': attribute type 6 has an invalid length.
[   62.066098][ T5999] macvtap0: entered allmulticast mode
[   62.071937][ T5999] veth0_macvtap: entered allmulticast mode
[   62.267645][ T6022] netlink: 'syz.1.87': attribute type 12 has an invalid length.
[   62.295741][ T6024] trusted_key: encrypted_key: master key parameter 'C' is invalid
[   62.510209][ T6044] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   62.512243][   T34] audit: type=1804 audit(1755051585.823:2): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.97" name="/newroot/7/file0" dev="tmpfs" ino=53 res=1 errno=0
client_loop: send disconnect: Broken pipe
[   63.736155][ T5933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.108978][ T5924] syz-executor (5924) used greatest stack depth: 19768 bytes left
[   65.007504][ T5933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.052654][ T5933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.121332][ T5933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.232863][ T5933] bridge_slave_1: left allmulticast mode
[   65.235941][ T5933] bridge_slave_1: left promiscuous mode
[   65.239838][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.247036][ T5933] bridge_slave_0: left allmulticast mode
[   65.249446][ T5933] bridge_slave_0: left promiscuous mode
[   65.252255][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.441834][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.448603][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.452173][ T5933] bond0 (unregistering): Released all slaves
[   65.658739][ T5933] hsr_slave_0: left promiscuous mode
[   65.660962][ T5933] hsr_slave_1: left promiscuous mode
[   65.663084][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.665778][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.669036][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.671412][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.682358][ T5933] veth1_macvtap: left promiscuous mode
[   65.684600][ T5933] veth0_macvtap: left promiscuous mode
[   65.686664][ T5933] veth1_vlan: left promiscuous mode
[   65.688558][ T5933] veth0_vlan: left promiscuous mode
[   65.901514][ T5933] team0 (unregistering): Port device team_slave_1 removed
[   65.919143][ T5933] team0 (unregistering): Port device team_slave_0 removed
[   66.360596][ T5933] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.434328][ T5933] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.513480][ T5933] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.558058][ T5933] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.668373][ T5933] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.723070][ T5933] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.754233][ T5933] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.798179][ T5933] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.925044][ T5933] bridge_slave_1: left allmulticast mode
[   66.927128][ T5933] bridge_slave_1: left promiscuous mode
[   66.929171][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.933170][ T5933] bridge_slave_0: left allmulticast mode
[   66.935769][ T5933] bridge_slave_0: left promiscuous mode
[   66.937730][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.942616][ T5933] bridge_slave_1: left allmulticast mode
[   66.944985][ T5933] bridge_slave_1: left promiscuous mode
[   66.946886][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.950973][ T5933] bridge_slave_0: left allmulticast mode
[   66.952729][ T5933] bridge_slave_0: left promiscuous mode
[   66.954970][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.127573][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.132025][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.136116][ T5933] bond0 (unregistering): Released all slaves
[   67.259463][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.263616][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.267285][ T5933] bond0 (unregistering): Released all slaves
[   67.587372][ T5933] hsr_slave_0: left promiscuous mode
[   67.589545][ T5933] hsr_slave_1: left promiscuous mode
[   67.592373][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.596008][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.598745][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.601115][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.606537][ T5933] hsr_slave_0: left promiscuous mode
[   67.608631][ T5933] hsr_slave_1: left promiscuous mode
[   67.611527][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.616401][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.619644][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.621961][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.634843][ T5933] veth1_macvtap: left promiscuous mode
[   67.636645][ T5933] veth0_macvtap: left allmulticast mode
[   67.638471][ T5933] veth0_macvtap: left promiscuous mode
[   67.640268][ T5933] veth1_vlan: left promiscuous mode
[   67.642495][ T5933] veth0_vlan: left promiscuous mode
[   67.645845][ T5933] veth1_macvtap: left promiscuous mode
[   67.647631][ T5933] veth0_macvtap: left promiscuous mode
[   67.650014][ T5933] veth1_vlan: left promiscuous mode
[   67.651726][ T5933] veth0_vlan: left promiscuous mode
[   67.902320][ T5933] team0 (unregistering): Port device team_slave_1 removed
[   67.921107][ T5933] team0 (unregistering): Port device team_slave_0 removed
[   68.246189][ T5933] team0 (unregistering): Port device team_slave_1 removed
[   68.262802][ T5933] team0 (unregistering): Port device team_slave_0 removed
[   71.038589][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.041261][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   81.280798][    T9] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
02:19:56  Registers:
info registers vcpu 0

CPU#0
RAX=8b5088b4c11d5100 RBX=ffffffff81968308 RCX=8b5088b4c11d5100 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd4dc30138 CR3=0000000103148000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=79215cb6b8241900 RBX=ffffffff81968308 RCX=79215cb6b8241900 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f94576de6c0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000500000064 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00000000ff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
