last executing test programs:

2.138058573s ago: executing program 2 (id=158):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10)

2.060749809s ago: executing program 2 (id=159):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x50, 0x8, 0x6, 0x2}, {0x28, 0x0, 0x1, 0x8000}, {0x6, 0x80, 0x4}]}, 0x10)
sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bde49a", 0x3}], 0x1}, 0x0)

2.000591419s ago: executing program 2 (id=160):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffff1f1, 0x80000001}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.156236156s ago: executing program 2 (id=166):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.035651898s ago: executing program 2 (id=168):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {{'ecb(arc4)-generic\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x24008805}, 0x80)

1.000572315s ago: executing program 0 (id=170):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)

859.513226ms ago: executing program 0 (id=172):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14)
getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x4000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

858.980272ms ago: executing program 2 (id=174):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r2, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)

740.944349ms ago: executing program 0 (id=176):
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x6, &(0x7f0000000300)={0x7fffffffefff}, 0x10)

629.905526ms ago: executing program 0 (id=179):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x80586300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x29}]}}}]}, 0x40}}, 0x0)

557.818286ms ago: executing program 1 (id=180):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000700))

498.298182ms ago: executing program 0 (id=181):
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr, 0x80, 0x0}, 0x0)

410.695783ms ago: executing program 0 (id=182):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
shutdown(r1, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
socket(0x11, 0x800000003, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

410.214868ms ago: executing program 1 (id=183):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0)

350.687064ms ago: executing program 1 (id=184):
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002f00000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

119.096885ms ago: executing program 1 (id=185):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df", 0x69}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025315eea3990c2de68e835c4fec57e2dd70f47b58472c2f915de1a58a32d021d", 0xd3}, {&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf889077c111c77030761c0f5d6baccf58dd38bdc0889b55669170d96224c8fd12762ad7f2a635040cde08fb0cdfb05e646af483235ca7da", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001a80)="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", 0x246}], 0x1}}], 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000000)="17", 0x1, 0x10008095, 0x0, 0x0)

65.959692ms ago: executing program 1 (id=186):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001340))

0s ago: executing program 1 (id=187):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x30}}, @sndrcv={0x30, 0x84, 0x1, {0xb9, 0x8001, 0x1, 0x5, 0x3, 0x8, 0x48, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0xb, 0xfffffffe, 0xff}}], 0x68, 0x4054}, 0x4040041)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59089' (ED25519) to the list of known hosts.
syzkaller login: [   49.520598][ T5758] cgroup: Unknown subsys name 'net'
[   49.646568][ T5758] cgroup: Unknown subsys name 'cpuset'
[   49.656204][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.101039][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.703758][ T5873] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.872858][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   59.177940][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.181168][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.183639][ T5872] bridge_slave_0: entered allmulticast mode
[   59.188252][ T5872] bridge_slave_0: entered promiscuous mode
[   59.214132][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.216567][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.218986][ T5872] bridge_slave_1: entered allmulticast mode
[   59.225407][ T5872] bridge_slave_1: entered promiscuous mode
[   59.276514][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.292303][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.352443][ T5872] team0: Port device team_slave_0 added
[   59.371974][ T5872] team0: Port device team_slave_1 added
[   59.482638][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.485231][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.504849][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.531246][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.533572][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.542617][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.603798][ T5872] hsr_slave_0: entered promiscuous mode
[   59.606375][ T5872] hsr_slave_1: entered promiscuous mode
[   59.715321][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.721546][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.727075][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.731538][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.751508][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.754077][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.757039][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.759375][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.795980][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.805141][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.808775][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.819621][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   59.828837][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.831204][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.845822][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.848550][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.941553][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.977581][ T5872] veth0_vlan: entered promiscuous mode
[   59.987955][ T5872] veth1_vlan: entered promiscuous mode
[   60.012436][ T5872] veth0_macvtap: entered promiscuous mode
[   60.017840][ T5872] veth1_macvtap: entered promiscuous mode
[   60.029920][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.038368][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.046929][ T5700] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.050866][ T5700] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.056709][ T5700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.067313][ T5700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.638811][ T5872] syz-executor (5872) used greatest stack depth: 20888 bytes left
[   61.894634][ T5924] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.902209][ T5927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.906377][ T5927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.909966][ T5927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.914321][ T5929] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.918445][ T5929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.922250][ T5929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.949151][ T5926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.967304][ T5926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.971221][ T5926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.981799][ T5931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.986134][ T5931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.989992][ T5926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.994075][ T5926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.997632][ T5926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.998503][ T5886] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.316620][ T5922] chnl_net:caif_netlink_parms(): no params data found
[   62.342758][ T5921] chnl_net:caif_netlink_parms(): no params data found
[   62.391050][ T5928] chnl_net:caif_netlink_parms(): no params data found
[   62.463205][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.466400][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.469380][ T5922] bridge_slave_0: entered allmulticast mode
[   62.473012][ T5922] bridge_slave_0: entered promiscuous mode
[   62.477709][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.480672][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.483634][ T5922] bridge_slave_1: entered allmulticast mode
[   62.486809][ T5922] bridge_slave_1: entered promiscuous mode
[   62.541387][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.544972][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.547487][ T5921] bridge_slave_0: entered allmulticast mode
[   62.550178][ T5921] bridge_slave_0: entered promiscuous mode
[   62.557657][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.579300][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.582272][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.585590][ T5921] bridge_slave_1: entered allmulticast mode
[   62.589373][ T5921] bridge_slave_1: entered promiscuous mode
[   62.595169][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.643411][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.646424][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.648728][ T5928] bridge_slave_0: entered allmulticast mode
[   62.651581][ T5928] bridge_slave_0: entered promiscuous mode
[   62.665729][ T5922] team0: Port device team_slave_0 added
[   62.668028][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.670996][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.674255][ T5928] bridge_slave_1: entered allmulticast mode
[   62.678096][ T5928] bridge_slave_1: entered promiscuous mode
[   62.690913][ T5922] team0: Port device team_slave_1 added
[   62.702419][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.720546][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.736301][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.740570][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.757206][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.759973][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.769678][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.800535][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.803262][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.813564][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.833827][ T5921] team0: Port device team_slave_0 added
[   62.838661][ T5921] team0: Port device team_slave_1 added
[   62.849480][ T5928] team0: Port device team_slave_0 added
[   62.868746][ T5928] team0: Port device team_slave_1 added
[   62.879610][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.881777][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.889674][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.908681][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.910870][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.918899][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.930065][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.932375][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.940663][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.952934][ T5922] hsr_slave_0: entered promiscuous mode
[   62.956985][ T5922] hsr_slave_1: entered promiscuous mode
[   62.959949][ T5922] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.963157][ T5922] Cannot create hsr debugfs directory
[   62.967165][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.969895][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.980692][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.038957][ T5921] hsr_slave_0: entered promiscuous mode
[   63.041533][ T5921] hsr_slave_1: entered promiscuous mode
[   63.043855][ T5921] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.047075][ T5921] Cannot create hsr debugfs directory
[   63.123013][ T5928] hsr_slave_0: entered promiscuous mode
[   63.126059][ T5928] hsr_slave_1: entered promiscuous mode
[   63.128863][ T5928] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.131843][ T5928] Cannot create hsr debugfs directory
[   63.384929][ T5921] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.390055][ T5921] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.396439][ T5921] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.402358][ T5921] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.477830][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.495376][ T5921] 8021q: adding VLAN 0 to HW filter on device team0
[   63.503460][  T139] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.507000][  T139] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.520284][  T139] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.523404][  T139] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.606806][ T5886] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.643771][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.660642][ T5886] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.687287][ T5921] veth0_vlan: entered promiscuous mode
[   63.693191][ T5921] veth1_vlan: entered promiscuous mode
[   63.713081][ T5886] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.730271][ T5921] veth0_macvtap: entered promiscuous mode
[   63.735094][ T5921] veth1_macvtap: entered promiscuous mode
[   63.744611][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.752506][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.759849][ T5700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.764670][ T5888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.767891][ T5888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.771116][ T5888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.876846][  T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.880024][ T5886] bridge_slave_1: left allmulticast mode
[   63.883103][  T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.883473][ T5886] bridge_slave_1: left promiscuous mode
[   63.890675][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.899051][ T5886] bridge_slave_0: left allmulticast mode
[   63.901162][ T5886] bridge_slave_0: left promiscuous mode
[   63.903348][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.934513][   T55] Bluetooth: hci0: command tx timeout
[   64.017214][   T55] Bluetooth: hci1: command tx timeout
[   64.102982][ T5886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.104596][   T55] Bluetooth: hci2: command tx timeout
[   64.109802][ T5886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.113711][ T5886] bond0 (unregistering): Released all slaves
[   64.171201][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.180496][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.277155][ T5886] hsr_slave_0: left promiscuous mode
[   64.290759][ T5886] hsr_slave_1: left promiscuous mode
[   64.302377][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.309269][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.318638][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.323234][ T5969] sctp: [Deprecated]: syz.0.40 (pid 5969) Use of int in maxseg socket option.
[   64.323234][ T5969] Use struct sctp_assoc_value instead
[   64.324964][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.375917][ T5886] veth1_macvtap: left promiscuous mode
[   64.378428][ T5886] veth0_macvtap: left promiscuous mode
[   64.380739][ T5886] veth1_vlan: left promiscuous mode
[   64.382762][ T5886] veth0_vlan: left promiscuous mode
[   64.651571][ T5886] team0 (unregistering): Port device team_slave_1 removed
[   64.671207][ T5886] team0 (unregistering): Port device team_slave_0 removed
[   64.943252][ T5978] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET)
[   65.075468][ T5922] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.083837][ T5922] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.091573][ T5922] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.120788][ T5922] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.193149][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.222158][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.233193][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.251412][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.341719][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.379935][ T5922] 8021q: adding VLAN 0 to HW filter on device team0
[   65.396959][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.399390][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.420046][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.423005][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.447882][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.481885][ T5928] 8021q: adding VLAN 0 to HW filter on device team0
[   65.496803][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.499241][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.509999][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.512566][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.539073][ T5928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.543469][ T5928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.683546][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.742291][ T5922] veth0_vlan: entered promiscuous mode
[   65.756642][ T5922] veth1_vlan: entered promiscuous mode
[   65.789947][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.813843][ T5922] veth0_macvtap: entered promiscuous mode
[   65.826577][ T5922] veth1_macvtap: entered promiscuous mode
[   65.860576][ T5928] veth0_vlan: entered promiscuous mode
[   65.867135][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.877423][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.886727][ T5928] veth1_vlan: entered promiscuous mode
[   65.895534][ T5960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.901256][ T5960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.906925][ T6032] netlink: 'syz.0.56': attribute type 2 has an invalid length.
[   65.910122][ T6032] netlink: 164 bytes leftover after parsing attributes in process `syz.0.56'.
[   65.913778][ T5960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.929944][ T5960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.006007][ T5928] veth0_macvtap: entered promiscuous mode
[   66.010270][ T5928] veth1_macvtap: entered promiscuous mode
[   66.018481][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.019285][   T55] Bluetooth: hci0: command tx timeout
[   66.021722][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.046000][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.071577][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.092051][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.096387][   T55] Bluetooth: hci1: command tx timeout
[   66.102311][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.103088][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.110679][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.120742][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.137656][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.182608][   T55] Bluetooth: hci2: command tx timeout
[   66.230319][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.233050][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.284023][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.287225][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.347488][ T6045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.61'.
[   66.445556][ T6051] netlink: 'syz.0.63': attribute type 1 has an invalid length.
[   67.183504][ T6087] syz.2.80 (6087) used greatest stack depth: 20328 bytes left
[   67.332305][ T6097] Illegal XDP return value 4294967289 on prog  (id 7) dev N/A, expect packet loss!
[   67.352618][ T5911] IPVS: starting estimator thread 0...
[   67.439155][ T6103] netlink: 40 bytes leftover after parsing attributes in process `syz.1.86'.
[   67.442997][ T6103] netlink: 260 bytes leftover after parsing attributes in process `syz.1.86'.
[   67.454427][ T6101] IPVS: using max 78 ests per chain, 187200 per kthread
[   67.698959][ T6119] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.757142][ T6123] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.767034][ T6121] bridge1: entered allmulticast mode
[   67.895543][ T6127] tipc: Started in network mode
[   67.897825][ T6127] tipc: Node identity eae4d5e012ef, cluster identity 4711
[   67.904737][ T6127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.945426][ T6132] wireguard0: entered promiscuous mode
[   67.947885][ T6132] wireguard0: entered allmulticast mode
[   67.980099][ T6127] syzkaller0: entered promiscuous mode
[   67.981934][ T6127] syzkaller0: entered allmulticast mode
[   68.001318][ T6127] tipc: Resetting bearer <eth:syzkaller0>
[   68.012189][ T6126] tipc: Resetting bearer <eth:syzkaller0>
[   68.027820][ T6126] tipc: Disabling bearer <eth:syzkaller0>
[   68.095694][   T55] Bluetooth: hci0: command tx timeout
[   68.186114][   T55] Bluetooth: hci1: command tx timeout
[   68.264171][   T55] Bluetooth: hci2: command tx timeout
[   68.280222][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'.
[   68.963190][ T6167] syzkaller1: entered promiscuous mode
[   68.968462][ T6167] syzkaller1: entered allmulticast mode
[   69.412525][ T6189] netlink: 'syz.0.126': attribute type 1 has an invalid length.
[   69.417538][ T6189] netlink: 224 bytes leftover after parsing attributes in process `syz.0.126'.
[   69.455412][ T6193] Bluetooth: MGMT ver 1.23
[   69.509669][ T6198] Zero length message leads to an empty skb
[   69.539150][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'.
[   69.671276][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'.
[   69.807849][ T6217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.885147][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.139'.
[   69.888482][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.139'.
[   70.174485][   T55] Bluetooth: hci0: command tx timeout
[   70.257291][   T55] Bluetooth: hci1: command tx timeout
[   70.284433][ T6234] "syz.0.144" (6234) uses obsolete ecb(arc4) skcipher
[   70.334120][   T55] Bluetooth: hci2: command tx timeout
[   71.140222][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.313148][ T6276] syzkaller0: entered promiscuous mode
[   71.315782][ T6276] syzkaller0: entered allmulticast mode
[   72.419537][   T55] Bluetooth: hci2: command tx timeout
[   72.679271][ T6320] IPv6: sit1: Disabled Multicast RS
[   72.866013][ T6327] __nla_validate_parse: 2 callbacks suppressed
[   72.866036][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'.
[   73.730235][ T5960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.831069][ T5960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.902697][ T5960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.972239][ T5960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.074279][ T5960] bridge_slave_1: left allmulticast mode
[   74.076142][ T5960] bridge_slave_1: left promiscuous mode
[   74.078707][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.086930][ T5960] bridge_slave_0: left allmulticast mode
[   74.088847][ T5960] bridge_slave_0: left promiscuous mode
[   74.090869][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.450849][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.456588][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.461907][ T5960] bond0 (unregistering): Released all slaves
[   74.538670][ T5960] tipc: Left network mode
[   74.723556][ T5960] hsr_slave_0: left promiscuous mode
[   74.726879][ T5960] hsr_slave_1: left promiscuous mode
[   74.729723][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.732864][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.740053][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.743255][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.765451][ T5960] veth1_macvtap: left promiscuous mode
[   74.767974][ T5960] veth0_macvtap: left promiscuous mode
[   74.770531][ T5960] veth1_vlan: left promiscuous mode
[   74.773601][ T5960] veth0_vlan: left promiscuous mode
[   75.118563][ T5960] team0 (unregistering): Port device team_slave_1 removed
[   75.144922][ T5960] team0 (unregistering): Port device team_slave_0 removed
[   75.720392][ T5960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.773441][ T5960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.850893][ T5960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.901160][ T5960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.010023][ T5960] bridge_slave_1: left allmulticast mode
[   76.013702][ T5960] bridge_slave_1: left promiscuous mode
[   76.020751][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.026601][ T5960] bridge_slave_0: left allmulticast mode
[   76.028551][ T5960] bridge_slave_0: left promiscuous mode
[   76.030537][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.346856][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.351540][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.356130][ T5960] bond0 (unregistering): Released all slaves
[   76.568469][ T5960] hsr_slave_0: left promiscuous mode
[   76.570887][ T5960] hsr_slave_1: left promiscuous mode
[   76.573278][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.576728][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.579926][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.582475][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.594640][ T5960] veth1_macvtap: left promiscuous mode
[   76.596975][ T5960] veth0_macvtap: left promiscuous mode
[   76.599962][ T5960] veth1_vlan: left promiscuous mode
[   76.602228][ T5960] veth0_vlan: left promiscuous mode
[   76.885522][ T5960] team0 (unregistering): Port device team_slave_1 removed
[   76.912821][ T5960] team0 (unregistering): Port device team_slave_0 removed
[   77.467180][ T5960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.528913][ T5960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.609308][ T5960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.660587][ T5960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.799756][ T5960] bridge_slave_1: left allmulticast mode
[   77.804004][ T5960] bridge_slave_1: left promiscuous mode
[   77.806751][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.812119][ T5960] bridge_slave_0: left allmulticast mode
[   77.816547][ T5960] bridge_slave_0: left promiscuous mode
[   77.819090][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.082366][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.088430][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.092589][ T5960] bond0 (unregistering): Released all slaves
[   78.379955][ T5960] hsr_slave_0: left promiscuous mode
[   78.383017][ T5960] hsr_slave_1: left promiscuous mode
[   78.389249][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.392485][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.398638][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.401770][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.415549][ T5960] veth1_macvtap: left promiscuous mode
[   78.417942][ T5960] veth0_macvtap: left promiscuous mode
[   78.420456][ T5960] veth1_vlan: left promiscuous mode
[   78.422702][ T5960] veth0_vlan: left promiscuous mode
[   78.846344][ T5960] team0 (unregistering): Port device team_slave_1 removed
[   78.869421][ T5960] team0 (unregistering): Port device team_slave_0 removed
[   79.409868][ T5960] IPVS: stop unused estimator thread 0...
[   86.495930][  T519] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
17:55:56  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff90256064 RCX=ffffffff90256068 RDX=ffffffff90d8f2fa
RSI=ffffffff90d8f2fa RDI=ffffffff8be28ca0 RBP=dffffc0000000000 RSP=ffffc90000007658
R8 =000000000000000f R9 =ffffffff8172aae5 R10=ffffc90000007778 R11=ffffffff81acfe40
R12=ffffffff90d8f2fe R13=ffffffff90d8f2ff R14=ffffc90000007728 R15=ffffffff90256064
RIP=ffffffff8172adb4 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcd9da3e88 CR3=000000010ef56000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00000000000000ff 000000ff00000000 XMM03=00000000ff000000 0000ff00000000ff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000202 RCX=f2b9ef56d3461900 RDX=0000000000000003
RSI=ffffffff8db879e8 RDI=ffffffff8be28d00 RBP=ffff888105f58b68 RSP=ffffc90001c1f290
R8 =ffffc90001c1fee0 R9 =0000000000000000 R10=ffffc90001c1f418 R11=fffff52000383e85
R12=0000000000000003 R13=0000000000000003 R14=ffffffff8e13f0e0 R15=ffff888105f58000
RIP=ffffffff819e4e14 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd335d13740 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005592a3c545a0 CR3=000000010993e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000034316270616c XMM01=ffffffffffffffff 00000000ffffffff
XMM02=0000000000000000 ff00000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0000000000000071 0000000000000000
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00306e6170772f74 656e2f307968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
