last executing test programs:

4.684339883s ago: executing program 0 (id=1):
socket$inet6_dccp(0xa, 0x6, 0x0)

4.684298843s ago: executing program 1 (id=11):
socket$hf(0x13, 0x2, 0x0)

4.683930966s ago: executing program 2 (id=3):
mkdirat(0xffffffffffffffff, &(0x7f0000000000), 0x0)

4.660243471s ago: executing program 2 (id=12):
socket$nl_route(0x10, 0x3, 0x0)

4.647942273s ago: executing program 1 (id=13):
socket$caif_seqpacket(0x25, 0x5, 0x0)

349.696889ms ago: executing program 0 (id=14):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x20)

348.135868ms ago: executing program 1 (id=15):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b003a05142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000)

294.682918ms ago: executing program 2 (id=16):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))

227.384224ms ago: executing program 1 (id=17):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33)

226.947498ms ago: executing program 0 (id=18):
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="1d005f0078000000f63a15cb5a8c8a08bf4ab42f", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x80)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

156.353824ms ago: executing program 0 (id=19):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x0)

156.130099ms ago: executing program 1 (id=20):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x102}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf8ff}, @generic={0x66, 0x8, 0x5}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)

98.258109ms ago: executing program 2 (id=21):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x35}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x10, 0x1}, 0x94)

97.93881ms ago: executing program 1 (id=22):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000080a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000000000000000000000800010054454500090002"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)

97.591619ms ago: executing program 0 (id=23):
r0 = socket(0x840000000002, 0x3, 0xff)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001680)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000040)="84a3e234cb9d329665e1fc1e5ff8af1d22915284", 0x14}], 0x1}, 0x4000)

279.221µs ago: executing program 2 (id=24):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4088)

0s ago: executing program 0 (id=25):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x10b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x20000001, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:61615' (ED25519) to the list of known hosts.
syzkaller login: [   49.567172][ T5772] cgroup: Unknown subsys name 'net'
[   49.656051][ T5772] cgroup: Unknown subsys name 'cpuset'
[   49.660517][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.250218][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.591958][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.595471][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.598496][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.601842][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.611021][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.621347][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.631277][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.634999][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.638338][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.645594][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.649631][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.653141][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.674030][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.683574][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.687283][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.868814][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   60.010593][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.014543][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.017703][ T5873] bridge_slave_0: entered allmulticast mode
[   60.021339][ T5873] bridge_slave_0: entered promiscuous mode
[   60.028568][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.031474][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.034824][ T5873] bridge_slave_1: entered allmulticast mode
[   60.038469][ T5873] bridge_slave_1: entered promiscuous mode
[   60.107742][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.117116][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.168507][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   60.176560][ T5873] team0: Port device team_slave_0 added
[   60.178728][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   60.195115][ T5873] team0: Port device team_slave_1 added
[   60.263129][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.266529][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.275935][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.291079][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.294055][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.302674][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.358337][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.361401][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.364657][ T5879] bridge_slave_0: entered allmulticast mode
[   60.367878][ T5879] bridge_slave_0: entered promiscuous mode
[   60.389230][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.391687][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.395035][ T5879] bridge_slave_1: entered allmulticast mode
[   60.398383][ T5879] bridge_slave_1: entered promiscuous mode
[   60.418444][ T5873] hsr_slave_0: entered promiscuous mode
[   60.422070][ T5873] hsr_slave_1: entered promiscuous mode
[   60.440141][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.443077][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.446561][ T5877] bridge_slave_0: entered allmulticast mode
[   60.450079][ T5877] bridge_slave_0: entered promiscuous mode
[   60.454325][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.457212][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.460151][ T5877] bridge_slave_1: entered allmulticast mode
[   60.464005][ T5877] bridge_slave_1: entered promiscuous mode
[   60.470613][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.495187][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.518282][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.536807][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.545680][ T5879] team0: Port device team_slave_0 added
[   60.560793][ T5879] team0: Port device team_slave_1 added
[   60.593076][ T5877] team0: Port device team_slave_0 added
[   60.612116][ T5877] team0: Port device team_slave_1 added
[   60.625531][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.627793][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.638131][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.669246][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.672060][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.683505][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.712195][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.715376][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.726191][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.731248][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.734136][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.743488][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.796109][ T5879] hsr_slave_0: entered promiscuous mode
[   60.800128][ T5879] hsr_slave_1: entered promiscuous mode
[   60.802590][ T5879] debugfs: 'hsr0' already exists in 'hsr'
[   60.805259][ T5879] Cannot create hsr debugfs directory
[   60.850701][ T5877] hsr_slave_0: entered promiscuous mode
[   60.854024][ T5877] hsr_slave_1: entered promiscuous mode
[   60.856314][ T5877] debugfs: 'hsr0' already exists in 'hsr'
[   60.858506][ T5877] Cannot create hsr debugfs directory
[   60.940634][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.969057][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.987493][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.002287][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.110254][ T5879] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.122705][ T5879] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.131199][ T5879] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.149990][ T5879] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.212122][ T5877] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.218828][ T5877] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.231524][ T5877] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.239933][ T5877] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.291384][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.319490][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   61.344859][  T188] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.348074][  T188] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.367537][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.371474][  T188] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.374492][  T188] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.415315][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   61.439722][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.442427][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.447626][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.450082][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.465780][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.517735][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   61.534942][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.537115][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.557944][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.560405][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.647045][ T5237] Bluetooth: hci0: command tx timeout
[   61.726251][ T5237] Bluetooth: hci2: command tx timeout
[   61.728750][ T5237] Bluetooth: hci1: command tx timeout
[   61.729615][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.745698][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.828819][ T5873] veth0_vlan: entered promiscuous mode
[   61.830819][ T5879] veth0_vlan: entered promiscuous mode
[   61.845459][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.849442][ T5873] veth1_vlan: entered promiscuous mode
[   61.856722][ T5879] veth1_vlan: entered promiscuous mode
[   61.891523][ T5873] veth0_macvtap: entered promiscuous mode
[   61.901800][ T5873] veth1_macvtap: entered promiscuous mode
[   61.925807][ T5879] veth0_macvtap: entered promiscuous mode
[   61.933313][ T5877] veth0_vlan: entered promiscuous mode
[   61.944405][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.947840][ T5879] veth1_macvtap: entered promiscuous mode
[   61.957027][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.976380][ T5877] veth1_vlan: entered promiscuous mode
[   61.983807][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.987013][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.997380][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.001933][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.008413][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.013548][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.038229][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.041947][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.049583][ T5877] veth0_macvtap: entered promiscuous mode
[   62.062270][ T5877] veth1_macvtap: entered promiscuous mode
[   62.066820][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.082235][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.115032][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.135993][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.143263][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.152823][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.168666][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.182280][  T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.186639][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.190271][  T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.213965][  T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.216723][  T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.259183][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.262211][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.294465][ T4686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.297748][ T4686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.354253][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.362338][ T5873] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.368223][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.395473][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.399532][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.423465][ T5938] netlink: 'syz.1.15': attribute type 27 has an invalid length.
[   62.426146][ T5938] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15'.
[   62.514153][ T5944] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.17'.
Connection to localhost closed by remote host.
[   62.942572][ T5967] Zero length message leads to an empty skb
[   64.082287][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.042944][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.105067][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.178258][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.281657][   T13] bridge_slave_1: left allmulticast mode
[   65.283840][   T13] bridge_slave_1: left promiscuous mode
[   65.286617][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.292135][   T13] bridge_slave_0: left allmulticast mode
[   65.296655][   T13] bridge_slave_0: left promiscuous mode
[   65.298753][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.467968][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.475699][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.480275][   T13] bond0 (unregistering): Released all slaves
[   65.698036][   T13] hsr_slave_0: left promiscuous mode
[   65.700996][   T13] hsr_slave_1: left promiscuous mode
[   65.704013][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.707245][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.711105][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.714526][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.726674][   T13] veth1_macvtap: left promiscuous mode
[   65.729411][   T13] veth0_macvtap: left promiscuous mode
[   65.733026][   T13] veth1_vlan: left promiscuous mode
[   65.735575][   T13] veth0_vlan: left promiscuous mode
[   66.032653][   T13] team0 (unregistering): Port device team_slave_1 removed
[   66.057488][   T13] team0 (unregistering): Port device team_slave_0 removed
[   66.599318][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.661136][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.727973][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.786980][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.899436][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.968865][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.031333][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.082354][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.149739][   T13] bridge_slave_1: left allmulticast mode
[   67.151648][   T13] bridge_slave_1: left promiscuous mode
[   67.153631][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.157953][   T13] bridge_slave_0: left allmulticast mode
[   67.160275][   T13] bridge_slave_0: left promiscuous mode
[   67.162640][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.171812][   T13] bridge_slave_1: left allmulticast mode
[   67.174269][   T13] bridge_slave_1: left promiscuous mode
[   67.176636][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.181745][   T13] bridge_slave_0: left allmulticast mode
[   67.184400][   T13] bridge_slave_0: left promiscuous mode
[   67.186513][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.389820][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.395131][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.399255][   T13] bond0 (unregistering): Released all slaves
[   67.541224][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.546066][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.550338][   T13] bond0 (unregistering): Released all slaves
[   67.866447][   T13] hsr_slave_0: left promiscuous mode
[   67.868932][   T13] hsr_slave_1: left promiscuous mode
[   67.871329][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.874233][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.877554][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.880569][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.886399][   T13] hsr_slave_0: left promiscuous mode
[   67.888596][   T13] hsr_slave_1: left promiscuous mode
[   67.890638][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.893037][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.896969][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.899278][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.911415][   T13] veth1_macvtap: left promiscuous mode
[   67.914080][   T13] veth0_macvtap: left promiscuous mode
[   67.916027][   T13] veth1_vlan: left promiscuous mode
[   67.917853][   T13] veth0_vlan: left promiscuous mode
[   67.920459][   T13] veth1_macvtap: left promiscuous mode
[   67.922711][   T13] veth0_macvtap: left promiscuous mode
[   67.925648][   T13] veth1_vlan: left promiscuous mode
[   67.927744][   T13] veth0_vlan: left promiscuous mode
[   68.164838][   T13] team0 (unregistering): Port device team_slave_1 removed
[   68.178947][   T13] team0 (unregistering): Port device team_slave_0 removed
[   68.480112][   T13] team0 (unregistering): Port device team_slave_1 removed
[   68.495360][   T13] team0 (unregistering): Port device team_slave_0 removed
[   71.167822][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.170625][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   81.404453][   T51] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
10:16:34  Registers:
info registers vcpu 0

CPU#0
RAX=c7080d19faa34600 RBX=ffffffff81968308 RCX=c7080d19faa34600 RDX=0000000000000001
RSI=ffffffff8d9b6dcb RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7933f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f347168dfc8 CR3=0000000106b60000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=ff00000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000977ae RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=00000000000977ae RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0e50
R8 =0000000000000000 R9 =ffffffff81ae029e R10=0000000000000003 R11=ffffffff81703490
R12=000000000ffff294 R13=dffffc0000000000 R14=00000000000977ae R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d16188bd78 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ffff0000000000 000000000000ff00 XMM01=00000000ff000000 0000000000000000
XMM02=ff00000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
