last executing test programs:

1.090511727s ago: executing program 2 (id=47):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48)

951.137118ms ago: executing program 2 (id=50):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0)

850.192884ms ago: executing program 2 (id=52):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_virt_wifi\x00', <r1=>0x0})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000004c0)=0x6b22, 0x4)
bind$packet(r0, &(0x7f00000003c0)={0x11, 0x2, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$packet(r0, &(0x7f0000000380)="bb53a9459f285101010000853e6c", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x10000004}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x2040, 0x0)

743.83647ms ago: executing program 2 (id=53):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40040d4)

707.052692ms ago: executing program 2 (id=54):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080), 0x4)

589.519638ms ago: executing program 2 (id=56):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x28, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36)

383.249409ms ago: executing program 0 (id=62):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10)
close(0x3)

313.976942ms ago: executing program 0 (id=64):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

262.482714ms ago: executing program 1 (id=66):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)

262.299302ms ago: executing program 0 (id=67):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
getsockopt$ax25_int(r0, 0x101, 0x4, 0x0, &(0x7f0000000400))

211.477746ms ago: executing program 1 (id=68):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c000280050001000000000014000180080001"], 0x80}}, 0x0)

210.997411ms ago: executing program 0 (id=69):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050)

153.637956ms ago: executing program 1 (id=70):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10)

153.397939ms ago: executing program 0 (id=71):
syz_init_net_socket$ax25(0x3, 0x5, 0xcc)

83.431867ms ago: executing program 1 (id=72):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

83.08883ms ago: executing program 0 (id=73):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x40000100)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[], 0x3c}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r1, 0x84, 0x70, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)

385.251µs ago: executing program 1 (id=74):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 1 (id=75):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
unshare(0x2c020400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000c00)={r1, 0x0, 0x20000000}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29405' (ED25519) to the list of known hosts.
syzkaller login: [   56.104047][ T5755] cgroup: Unknown subsys name 'net'
[   56.190013][ T5755] cgroup: Unknown subsys name 'cpuset'
[   56.195834][ T5755] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.998700][ T5755] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.751496][ T5820] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.057574][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.060046][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.084458][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.087643][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.110056][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   71.408557][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.410574][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   72.271811][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.282908][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.286260][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.289534][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.292481][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.295629][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.298488][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.301078][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.305005][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.308014][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.311276][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.314412][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.354995][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.369386][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.374776][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.573015][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   72.739056][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.742675][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.745266][ T5852] bridge_slave_0: entered allmulticast mode
[   72.749363][ T5852] bridge_slave_0: entered promiscuous mode
[   72.775778][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.778707][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.781571][ T5852] bridge_slave_1: entered allmulticast mode
[   72.785395][ T5852] bridge_slave_1: entered promiscuous mode
[   72.848573][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.876379][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.934717][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   72.946026][ T5852] team0: Port device team_slave_0 added
[   72.952329][ T5852] team0: Port device team_slave_1 added
[   72.972637][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   73.027368][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.030020][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.039870][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.065504][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.068129][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.077639][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.178536][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.181179][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.183731][ T5851] bridge_slave_0: entered allmulticast mode
[   73.188847][ T5851] bridge_slave_0: entered promiscuous mode
[   73.198234][ T5852] hsr_slave_0: entered promiscuous mode
[   73.201380][ T5852] hsr_slave_1: entered promiscuous mode
[   73.207679][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.210449][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.212910][ T5858] bridge_slave_0: entered allmulticast mode
[   73.216130][ T5858] bridge_slave_0: entered promiscuous mode
[   73.219556][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.221759][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.224062][ T5851] bridge_slave_1: entered allmulticast mode
[   73.227833][ T5851] bridge_slave_1: entered promiscuous mode
[   73.231423][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.234122][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.237201][ T5858] bridge_slave_1: entered allmulticast mode
[   73.240862][ T5858] bridge_slave_1: entered promiscuous mode
[   73.320752][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.327109][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.350577][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.356259][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.442092][ T5851] team0: Port device team_slave_0 added
[   73.449773][ T5858] team0: Port device team_slave_0 added
[   73.454730][ T5851] team0: Port device team_slave_1 added
[   73.472928][ T5858] team0: Port device team_slave_1 added
[   73.527074][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.529560][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.539774][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.564840][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.567344][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.577279][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.588262][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.590625][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.599811][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.604829][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.607680][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.616133][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.697529][ T5851] hsr_slave_0: entered promiscuous mode
[   73.699898][ T5851] hsr_slave_1: entered promiscuous mode
[   73.702272][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.705242][ T5851] Cannot create hsr debugfs directory
[   73.723768][ T5858] hsr_slave_0: entered promiscuous mode
[   73.732353][ T5858] hsr_slave_1: entered promiscuous mode
[   73.735125][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.739113][ T5858] Cannot create hsr debugfs directory
[   73.793010][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.825235][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.841151][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.860725][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.024459][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.031147][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.038074][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.050076][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.150648][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.161164][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.167504][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.178245][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.182291][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.212645][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   74.233663][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.236148][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.259062][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.261724][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.280734][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.311438][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   74.328301][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.330995][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.358232][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.368482][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.371285][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.374568][ T5857] Bluetooth: hci1: command tx timeout
[   74.377748][ T5855] Bluetooth: hci0: command tx timeout
[   74.382565][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.433634][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   74.446031][ T5857] Bluetooth: hci2: command tx timeout
[   74.451215][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.453814][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.482620][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.484806][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.551626][ T5858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.555204][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.630386][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.692745][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.723062][ T5852] veth0_vlan: entered promiscuous mode
[   74.749805][ T5852] veth1_vlan: entered promiscuous mode
[   74.772054][ T5851] veth0_vlan: entered promiscuous mode
[   74.783331][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.795179][ T5851] veth1_vlan: entered promiscuous mode
[   74.831681][ T5852] veth0_macvtap: entered promiscuous mode
[   74.851452][ T5852] veth1_macvtap: entered promiscuous mode
[   74.863436][ T5851] veth0_macvtap: entered promiscuous mode
[   74.874919][ T5851] veth1_macvtap: entered promiscuous mode
[   74.907813][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.912647][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.922545][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.933652][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.937119][ T5858] veth0_vlan: entered promiscuous mode
[   74.948624][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.952107][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.957883][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.961318][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.970426][ T5858] veth1_vlan: entered promiscuous mode
[   74.974220][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.978293][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.981581][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.984887][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.088341][ T5858] veth0_macvtap: entered promiscuous mode
[   75.115359][ T5858] veth1_macvtap: entered promiscuous mode
[   75.134388][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.145594][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.172329][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.175243][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.181547][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.220110][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.238601][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.241427][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.242596][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.249881][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.253286][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.256832][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.268330][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.273656][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.423779][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.429137][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.489353][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.492746][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.589296][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'.
[   75.952865][ T5943] sctp: [Deprecated]: syz.1.29 (pid 5943) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.952865][ T5943] Use struct sctp_sack_info instead
[   76.446195][ T5857] Bluetooth: hci1: command tx timeout
[   76.455803][ T5857] Bluetooth: hci0: command tx timeout
[   76.462658][ T5969] trusted_key: syz.0.41 sent an empty control message without MSG_MORE.
[   76.526503][ T5857] Bluetooth: hci2: command tx timeout
[   77.206256][ T6012] tun0: tun_chr_ioctl cmd 1074025681
[   77.315009][ T6014] syzkaller1: entered promiscuous mode
[   77.320033][ T6014] syzkaller1: entered allmulticast mode
[   77.623130][ T6038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.68'.
[   77.631538][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'.
[   77.651910][ T6040] netlink: 'syz.0.69': attribute type 1 has an invalid length.
[   77.791974][ T6046] Zero length message leads to an empty skb
Connection to localhost closed by remote host.
[   78.604647][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.662715][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.724155][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.792486][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.888276][   T13] bridge_slave_1: left allmulticast mode
[   78.890772][   T13] bridge_slave_1: left promiscuous mode
[   78.894182][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.901986][   T13] bridge_slave_0: left allmulticast mode
[   78.904269][   T13] bridge_slave_0: left promiscuous mode
[   78.908118][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.212869][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.217918][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.221812][   T13] bond0 (unregistering): Released all slaves
[   79.481329][   T13] hsr_slave_0: left promiscuous mode
[   79.484333][   T13] hsr_slave_1: left promiscuous mode
[   79.488863][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.491800][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.497449][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.500549][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.514070][   T13] veth1_macvtap: left promiscuous mode
[   79.516751][   T13] veth0_macvtap: left promiscuous mode
[   79.518651][   T13] veth1_vlan: left promiscuous mode
[   79.520315][   T13] veth0_vlan: left promiscuous mode
[   79.949658][   T13] team0 (unregistering): Port device team_slave_1 removed
[   79.989929][   T13] team0 (unregistering): Port device team_slave_0 removed
[   80.687461][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.743955][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.785560][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.852711][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.981167][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.063481][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.102308][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.144053][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.228896][   T13] bridge_slave_1: left allmulticast mode
[   81.231175][   T13] bridge_slave_1: left promiscuous mode
[   81.233525][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.240045][   T13] bridge_slave_0: left allmulticast mode
[   81.242268][   T13] bridge_slave_0: left promiscuous mode
[   81.244625][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.252125][   T13] bridge_slave_1: left allmulticast mode
[   81.254277][   T13] bridge_slave_1: left promiscuous mode
[   81.257037][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.263146][   T13] bridge_slave_0: left allmulticast mode
[   81.265618][   T13] bridge_slave_0: left promiscuous mode
[   81.267977][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.649696][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.656624][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.662357][   T13] bond0 (unregistering): Released all slaves
[   81.906076][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.910689][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.915052][   T13] bond0 (unregistering): Released all slaves
[   82.326642][   T13] hsr_slave_0: left promiscuous mode
[   82.329505][   T13] hsr_slave_1: left promiscuous mode
[   82.332157][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.334859][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.338937][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.341799][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.353287][   T13] hsr_slave_0: left promiscuous mode
[   82.356793][   T13] hsr_slave_1: left promiscuous mode
[   82.359653][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.362608][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.367966][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.370898][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.394818][   T13] veth1_macvtap: left promiscuous mode
[   82.397086][   T13] veth0_macvtap: left promiscuous mode
[   82.399303][   T13] veth1_vlan: left promiscuous mode
[   82.401309][   T13] veth0_vlan: left promiscuous mode
[   82.404761][   T13] veth1_macvtap: left promiscuous mode
[   82.407015][   T13] veth0_macvtap: left promiscuous mode
[   82.409330][   T13] veth1_vlan: left promiscuous mode
[   82.411507][   T13] veth0_vlan: left promiscuous mode
[   82.913032][   T13] team0 (unregistering): Port device team_slave_1 removed
[   82.950463][   T13] team0 (unregistering): Port device team_slave_0 removed
[   83.660931][   T13] team0 (unregistering): Port device team_slave_1 removed
[   83.694656][   T13] team0 (unregistering): Port device team_slave_0 removed
[   86.767089][   T10] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
13:03:47  Registers:
info registers vcpu 0

CPU#0
RAX=1251fd8cf44f2300 RBX=ffffffff81974d58 RCX=1251fd8cf44f2300 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31b18ff8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000ff00000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000ff00000000ff XMM05=0000000000000000 ffff000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=67a208d12cfbe700 RBX=ffffffff81974d58 RCX=67a208d12cfbe700 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d2000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31c1aff8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 000000000000ffff XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
