last executing test programs:

6.572797244s ago: executing program 1 (id=23):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

6.313517002s ago: executing program 1 (id=26):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

5.930288569s ago: executing program 1 (id=31):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

1.463418257s ago: executing program 2 (id=36):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
unshare(0x2c060000)
unshare(0x24020400)
r1 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)

1.340526196s ago: executing program 2 (id=37):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x4}]}]}, 0x2c}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0xffffffffffffff0b}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.232820703s ago: executing program 2 (id=38):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = epoll_create1(0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f6", 0x42}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0xa002a008})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)

1.168894972s ago: executing program 1 (id=34):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x9c)

482.779827ms ago: executing program 0 (id=47):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40004)
r1 = socket$packet(0x11, 0x2, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
sendmmsg(r1, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@can={0x1d, r3}, 0x80, 0x0}}], 0x2, 0x0)

353.219607ms ago: executing program 0 (id=48):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast2=0x80ee3600, @rand_addr=0x64010100}}}], 0x20}, 0x4040010)

291.933642ms ago: executing program 0 (id=49):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
close(0x3)

228.184791ms ago: executing program 0 (id=50):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x41, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@typed={0x9, 0xd2, 0x0, 0x0, @str='syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)

225.562116ms ago: executing program 2 (id=51):
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @local}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0)

211.742119ms ago: executing program 1 (id=52):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001200010400000000000000000a00000008000200", @ANYRES32, @ANYBLOB="0c000080080031"], 0x28}}, 0x0)

120.61655ms ago: executing program 2 (id=53):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
sendto(r0, 0x0, 0x0, 0x80, &(0x7f0000001080)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80)

120.338473ms ago: executing program 0 (id=54):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f2f140002"], 0x44}, 0x1, 0x1000000}, 0x0)

120.121182ms ago: executing program 1 (id=55):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

1.68004ms ago: executing program 2 (id=56):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

0s ago: executing program 0 (id=57):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
close(r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36131' (ED25519) to the list of known hosts.
syzkaller login: [   55.663714][ T5820] cgroup: Unknown subsys name 'net'
[   55.773429][ T5820] cgroup: Unknown subsys name 'cpuset'
[   55.779980][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.514197][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.378925][ T5879] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.476812][ T5893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.480310][ T5893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.482825][ T5893] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.485467][ T5893] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.489241][ T5893] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.355448][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.371711][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.375364][ T5911] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.378812][ T5911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.382189][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.385894][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.389661][ T5911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.392555][ T5913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.416143][ T5911] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.420040][ T5911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.472705][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.476417][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.480852][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.489527][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.492884][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.754855][ T5910] chnl_net:caif_netlink_parms(): no params data found
[   69.827026][ T5908] chnl_net:caif_netlink_parms(): no params data found
[   69.877065][ T5914] chnl_net:caif_netlink_parms(): no params data found
[   69.917237][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.920542][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.922741][ T5910] bridge_slave_0: entered allmulticast mode
[   69.925648][ T5910] bridge_slave_0: entered promiscuous mode
[   69.949265][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.951745][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.954594][ T5910] bridge_slave_1: entered allmulticast mode
[   69.957623][ T5910] bridge_slave_1: entered promiscuous mode
[   70.026127][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.034927][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.037675][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.042116][ T5908] bridge_slave_0: entered allmulticast mode
[   70.045790][ T5908] bridge_slave_0: entered promiscuous mode
[   70.051518][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.071101][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.074058][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.076825][ T5908] bridge_slave_1: entered allmulticast mode
[   70.081254][ T5908] bridge_slave_1: entered promiscuous mode
[   70.125080][ T5910] team0: Port device team_slave_0 added
[   70.138859][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.141551][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.144049][ T5914] bridge_slave_0: entered allmulticast mode
[   70.147339][ T5914] bridge_slave_0: entered promiscuous mode
[   70.153810][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.160767][ T5910] team0: Port device team_slave_1 added
[   70.163295][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.165838][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.168748][ T5914] bridge_slave_1: entered allmulticast mode
[   70.171483][ T5914] bridge_slave_1: entered promiscuous mode
[   70.188775][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.252228][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.256103][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.259427][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.268716][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.274408][ T5908] team0: Port device team_slave_0 added
[   70.279638][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.283019][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.285494][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.294583][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.307244][ T5908] team0: Port device team_slave_1 added
[   70.352921][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.354994][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.363362][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.382973][ T5914] team0: Port device team_slave_0 added
[   70.411990][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.414572][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.424117][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.431870][ T5914] team0: Port device team_slave_1 added
[   70.445105][ T5910] hsr_slave_0: entered promiscuous mode
[   70.450047][ T5910] hsr_slave_1: entered promiscuous mode
[   70.507501][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.510716][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.518403][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.540059][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.542472][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.551338][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.559908][ T5908] hsr_slave_0: entered promiscuous mode
[   70.562332][ T5908] hsr_slave_1: entered promiscuous mode
[   70.564394][ T5908] debugfs: 'hsr0' already exists in 'hsr'
[   70.566181][ T5908] Cannot create hsr debugfs directory
[   70.633248][ T5914] hsr_slave_0: entered promiscuous mode
[   70.635675][ T5914] hsr_slave_1: entered promiscuous mode
[   70.638605][ T5914] debugfs: 'hsr0' already exists in 'hsr'
[   70.640547][ T5914] Cannot create hsr debugfs directory
[   70.914674][ T5910] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.944716][ T5910] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.961365][ T5910] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.967652][ T5910] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.012570][ T5908] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.021813][ T5908] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.030915][ T5908] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.054061][ T5908] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.111630][ T5914] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.126450][ T5914] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.142987][ T5914] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.151180][ T5914] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.227163][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.262607][ T5910] 8021q: adding VLAN 0 to HW filter on device team0
[   71.283556][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.286196][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.299509][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.302701][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.326205][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.329008][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.341696][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.381633][ T5908] 8021q: adding VLAN 0 to HW filter on device team0
[   71.389820][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.412067][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.414704][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.422619][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.425350][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.439097][ T5911] Bluetooth: hci1: command tx timeout
[   71.441040][   T55] Bluetooth: hci0: command tx timeout
[   71.505387][ T5914] 8021q: adding VLAN 0 to HW filter on device team0
[   71.518998][ T5911] Bluetooth: hci2: command tx timeout
[   71.526327][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.529163][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.532895][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.535359][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.593844][ T5914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   71.597669][ T5914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.644389][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.716892][ T5910] veth0_vlan: entered promiscuous mode
[   71.727286][ T5910] veth1_vlan: entered promiscuous mode
[   71.751252][ T5910] veth0_macvtap: entered promiscuous mode
[   71.764668][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.769981][ T5910] veth1_macvtap: entered promiscuous mode
[   71.793053][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.811297][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.830586][ T5880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.834701][ T5880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.849554][ T5880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.853212][ T5880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.864602][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.914679][ T5908] veth0_vlan: entered promiscuous mode
[   71.946531][ T5908] veth1_vlan: entered promiscuous mode
[   72.012166][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.012342][ T5908] veth0_macvtap: entered promiscuous mode
[   72.014996][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.021451][ T5908] veth1_macvtap: entered promiscuous mode
[   72.034709][ T5914] veth0_vlan: entered promiscuous mode
[   72.062890][ T5914] veth1_vlan: entered promiscuous mode
[   72.077576][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.084898][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.089407][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.110911][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.133861][ T5934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.151771][ T5914] veth0_macvtap: entered promiscuous mode
[   72.160266][ T5934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.164258][ T5934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.167629][ T5934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.175983][ T5914] veth1_macvtap: entered promiscuous mode
[   72.221609][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.249561][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.275316][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.280216][ T5880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.303954][ T5880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.310573][ T5880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.365728][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.373041][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.395908][ T5976] netlink: 'syz.2.37': attribute type 1 has an invalid length.
[   72.406631][ T5976] netlink: 172 bytes leftover after parsing attributes in process `syz.2.37'.
[   72.408569][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.412930][ T5976] netlink: 'syz.2.37': attribute type 1 has an invalid length.
[   72.414001][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.463682][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.466775][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.504221][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.515728][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.526664][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'.
[   72.533449][ T5980] Zero length message leads to an empty skb
[   73.464700][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'.
[   73.521914][ T5911] Bluetooth: hci1: command tx timeout
[   73.524046][ T5911] Bluetooth: hci0: command tx timeout
[   73.599821][   T55] Bluetooth: hci2: command tx timeout
[   73.704292][ T6023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.56'.
Connection to localhost closed by remote host.
[   75.598827][   T55] Bluetooth: hci0: command tx timeout
[   75.600929][   T55] Bluetooth: hci1: command tx timeout
[   75.678429][ T5911] Bluetooth: hci2: command tx timeout
[   77.678355][ T5911] Bluetooth: hci1: command tx timeout
[   77.678900][   T55] Bluetooth: hci0: command tx timeout
[   77.768178][   T55] Bluetooth: hci2: command tx timeout
[   86.644532][   T10] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
01:50:17  Registers:
info registers vcpu 0

CPU#0
RAX=5db4063bf5fcf400 RBX=ffffffff819683a8 RCX=5db4063bf5fcf400 RDX=0000000000000001
RSI=ffffffff8d9b69f6 RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555578f635c8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0060dc0304048800 60d4030404840060
XMM02=00040a60c8030004 880060e403000488 XMM03=28609c000200040a 60b0032860c40002
XMM04=ffffffffff046080 046c1000060172dc XMM05=010fffffffffffff 046080046c100006
XMM06=0172dc28609c0002 00040a60b0032860 XMM07=c4000200040a60c8 030004880060e403
XMM08=0004880060dc0304 04880060d4030404 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=5822dfa54ca4ae00 RBX=ffffffff819683a8 RCX=5822dfa54ca4ae00 RDX=0000000000000001
RSI=ffffffff8d9b69f6 RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffd5828ef8 CR3=000000010f2bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0060dc0304048800 60d4030404840060
XMM02=00040a60c8030004 880060e403000488 XMM03=28609c000200040a 60b0032860c40002
XMM04=ffffffffff046080 046c1000060172dc XMM05=010fffffffffffff 046080046c100006
XMM06=0172dc28609c0002 00040a60b0032860 XMM07=c4000200040a60c8 030004880060e403
XMM08=0004880060dc0304 04880060d4030404 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
