last executing test programs:

361.071215ms ago: executing program 1 (id=6):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x8918750823dce856}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

360.887685ms ago: executing program 0 (id=7):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000008000000080000000b"], 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f0000000280), 0x0}, 0x20)

360.568502ms ago: executing program 1 (id=8):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}}, 0x80)

267.903768ms ago: executing program 0 (id=9):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0)

267.699784ms ago: executing program 2 (id=3):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007b00000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

267.389623ms ago: executing program 1 (id=10):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
syz_genetlink_get_family_id$batadv(0x0, r0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)

210.309077ms ago: executing program 2 (id=11):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="000100000c0200001800128008000100030000000000000005000400"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="24002d8005000100"], 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)

210.090731ms ago: executing program 0 (id=12):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ffff0000000000002700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001d00b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffd)

148.797643ms ago: executing program 1 (id=13):
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

146.955719ms ago: executing program 2 (id=14):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4)

146.642189ms ago: executing program 0 (id=15):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000800}, 0x4000042)

67.901564ms ago: executing program 1 (id=16):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

67.792224ms ago: executing program 0 (id=17):
syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @random="fe995905a6f4", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x34, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xd, 0x2, 0xfffe, 0x0, 0x400, {[@timestamp={0x8, 0xa, 0x801, 0x80de}, @sack_perm={0x4, 0x2}, @generic={0x1, 0x11, "d60eba9716d7b646011b806410fe7f"}]}}}}}}}, 0x0)

67.727277ms ago: executing program 2 (id=18):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1f6, 0x4)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)

264.256µs ago: executing program 1 (id=19):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r4, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

72.684µs ago: executing program 0 (id=20):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)

0s ago: executing program 2 (id=21):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
read(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5024' (ED25519) to the list of known hosts.
syzkaller login: [   49.281130][ T5778] cgroup: Unknown subsys name 'net'
[   49.411753][ T5778] cgroup: Unknown subsys name 'cpuset'
[   49.418603][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.638013][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.428526][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.432448][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.436891][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.441756][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.445760][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.450202][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.454142][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.457916][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.461628][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.466486][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.495031][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.502140][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.505644][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.510220][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.513843][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.708131][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   56.802856][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   56.862892][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.866246][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.870243][ T5852] bridge_slave_0: entered allmulticast mode
[   56.873265][ T5852] bridge_slave_0: entered promiscuous mode
[   56.877085][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.879661][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.882173][ T5852] bridge_slave_1: entered allmulticast mode
[   56.885195][ T5852] bridge_slave_1: entered promiscuous mode
[   56.889291][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   56.953003][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.975861][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.013729][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.016548][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.019485][ T5848] bridge_slave_0: entered allmulticast mode
[   57.023310][ T5848] bridge_slave_0: entered promiscuous mode
[   57.030197][ T5852] team0: Port device team_slave_0 added
[   57.039860][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.043154][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.046277][ T5848] bridge_slave_1: entered allmulticast mode
[   57.051385][ T5848] bridge_slave_1: entered promiscuous mode
[   57.069329][ T5852] team0: Port device team_slave_1 added
[   57.110477][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.124557][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.127797][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.131045][ T5857] bridge_slave_0: entered allmulticast mode
[   57.134787][ T5857] bridge_slave_0: entered promiscuous mode
[   57.140876][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.143685][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.152951][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.160603][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.164762][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.168719][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.171840][ T5857] bridge_slave_1: entered allmulticast mode
[   57.175721][ T5857] bridge_slave_1: entered promiscuous mode
[   57.180051][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.182690][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.192641][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.246471][ T5848] team0: Port device team_slave_0 added
[   57.265422][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.271399][ T5848] team0: Port device team_slave_1 added
[   57.276082][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.374097][ T5852] hsr_slave_0: entered promiscuous mode
[   57.377436][ T5852] hsr_slave_1: entered promiscuous mode
[   57.382558][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.385559][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.397734][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.404540][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.407461][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.418469][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.425325][ T5857] team0: Port device team_slave_0 added
[   57.451207][ T5857] team0: Port device team_slave_1 added
[   57.533066][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.536145][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.547385][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.565060][ T5848] hsr_slave_0: entered promiscuous mode
[   57.568946][ T5848] hsr_slave_1: entered promiscuous mode
[   57.571643][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   57.573986][ T5848] Cannot create hsr debugfs directory
[   57.580047][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.583005][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.593372][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.695336][ T5857] hsr_slave_0: entered promiscuous mode
[   57.698606][ T5857] hsr_slave_1: entered promiscuous mode
[   57.701541][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   57.703949][ T5857] Cannot create hsr debugfs directory
[   57.891914][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.923962][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.949972][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.966519][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.009767][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.020964][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.041325][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.050680][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.085411][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.096361][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.101584][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.117235][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.191544][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.203107][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.230205][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   58.247251][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.250897][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.262918][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   58.270174][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.272849][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.285634][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.302171][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.305326][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.318548][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.321373][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.343878][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   58.374374][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   58.378645][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.387362][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.390467][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.422042][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.425227][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.513626][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.539037][ T5851] Bluetooth: hci2: command tx timeout
[   58.543068][ T5235] Bluetooth: hci1: command tx timeout
[   58.545717][ T5855] Bluetooth: hci0: command tx timeout
[   58.588919][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.592450][ T5848] veth0_vlan: entered promiscuous mode
[   58.605323][ T5848] veth1_vlan: entered promiscuous mode
[   58.646261][ T5852] veth0_vlan: entered promiscuous mode
[   58.652500][ T5848] veth0_macvtap: entered promiscuous mode
[   58.664015][ T5848] veth1_macvtap: entered promiscuous mode
[   58.672243][ T5852] veth1_vlan: entered promiscuous mode
[   58.702185][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.712064][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.715526][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.731380][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.737502][ T5852] veth0_macvtap: entered promiscuous mode
[   58.746618][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.752673][ T5852] veth1_macvtap: entered promiscuous mode
[   58.765403][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.771031][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.796378][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.813169][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.824413][ T5717] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.828678][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.842915][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.867117][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.874599][ T5857] veth0_vlan: entered promiscuous mode
[   58.912782][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.916226][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.929408][ T5857] veth1_vlan: entered promiscuous mode
[   58.961343][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.964726][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.004001][ T5857] veth0_macvtap: entered promiscuous mode
[   59.010832][ T4191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.018712][ T4191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.023339][ T5857] veth1_macvtap: entered promiscuous mode
[   59.044120][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.049023][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.058916][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.060819][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.071727][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.093259][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.096706][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.114687][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.117480][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.245244][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.257883][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.299288][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.301916][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.435705][ T5937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'.
[   59.652925][ T5957] ------------[ cut here ]------------
[   59.655189][ T5957] WARNING: CPU: 0 PID: 5957 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0
[   59.659475][ T5957] Modules linked in:
[   59.661356][ T5957] CPU: 0 UID: 0 PID: 5957 Comm: syz.1.19 Not tainted syzkaller #0 PREEMPT(full) 
[   59.665915][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.670526][ T5957] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[   59.672666][ T5957] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 95 8c 00 cc e8 32 26 cf f6 90 0f 0b 90 eb e1 e8 27 26 cf f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[   59.679447][ T5957] RSP: 0018:ffffc900039aef70 EFLAGS: 00010283
[   59.681716][ T5957] RAX: ffffffff8af08569 RBX: ffff888123eec000 RCX: 0000000000080000
[   59.684798][ T5957] RDX: ffffc90020be8000 RSI: 000000000000042e RDI: 000000000000042f
[   59.688182][ T5957] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8af08083
[   59.691288][ T5957] R10: dffffc0000000000 R11: ffffed10247dd831 R12: 1ffff110247dd80a
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   59.694455][ T5957] R13: ffff888030a48e40 R14: 0000000000000001 R15: ffffffff8af08083
[   59.698143][ T5957] FS:  00007ff5f21f66c0(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[   59.701868][ T5957] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   59.704971][ T5957] CR2: 0000200000001080 CR3: 00000001072f8000 CR4: 00000000000006f0
[   59.708301][ T5957] Call Trace:
[   59.709695][ T5957]  <TASK>
[   59.710719][ T5957]  rate_control_rate_init_all_links+0x109/0x1a0
[   59.713208][ T5957]  sta_apply_auth_flags+0x1c2/0x400
[   59.715254][ T5957]  sta_apply_parameters+0xe4b/0x15b0
[   59.717207][ T5957]  ieee80211_add_station+0x424/0x6a0
[   59.719766][ T5957]  rdev_add_station+0x108/0x290
[   59.721872][ T5957]  nl80211_new_station+0x1755/0x1b70
[   59.723966][ T5957]  ? __pfx_nl80211_new_station+0x10/0x10
[   59.726290][ T5957]  ? netdev_run_todo+0xe1d/0xea0
[   59.728954][ T5957]  ? nl80211_pre_doit+0x4f1/0x930
[   59.731062][ T5957]  genl_family_rcv_msg_doit+0x215/0x300
[   59.733853][ T5957]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   59.736272][ T5957]  ? bpf_lsm_capable+0x9/0x20
[   59.738804][ T5957]  ? security_capable+0x7e/0x2e0
[   59.740874][ T5957]  genl_rcv_msg+0x60e/0x790
[   59.742668][ T5957]  ? __pfx_genl_rcv_msg+0x10/0x10
[   59.744772][ T5957]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   59.746999][ T5957]  ? __pfx_nl80211_new_station+0x10/0x10
[   59.749628][ T5957]  ? __pfx_nl80211_post_doit+0x10/0x10
[   59.751878][ T5957]  ? __asan_memcpy+0x40/0x70
[   59.753814][ T5957]  ? __pfx_ref_tracker_free+0x10/0x10
[   59.756034][ T5957]  netlink_rcv_skb+0x208/0x470
[   59.758378][ T5957]  ? __lock_acquire+0xab9/0xd20
[   59.759996][ T5957]  ? __pfx_genl_rcv_msg+0x10/0x10
[   59.761574][ T5957]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   59.763896][ T5957]  ? down_read+0x1ad/0x2e0
[   59.766333][ T5957]  genl_rcv+0x28/0x40
[   59.768207][ T5957]  netlink_unicast+0x82f/0x9e0
[   59.770142][ T5957]  ? __pfx_netlink_unicast+0x10/0x10
[   59.772424][ T5957]  ? netlink_sendmsg+0x642/0xb30
[   59.774564][ T5957]  ? skb_put+0x11b/0x210
[   59.776352][ T5957]  netlink_sendmsg+0x805/0xb30
[   59.778810][ T5957]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.781081][ T5957]  ? aa_sock_msg_perm+0xf1/0x1d0
[   59.783204][ T5957]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   59.785484][ T5957]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.787919][ T5957]  __sock_sendmsg+0x21c/0x270
[   59.789925][ T5957]  ____sys_sendmsg+0x505/0x830
[   59.791931][ T5957]  ? __pfx_____sys_sendmsg+0x10/0x10
[   59.794139][ T5957]  ? import_iovec+0x74/0xa0
[   59.796121][ T5957]  ___sys_sendmsg+0x21f/0x2a0
[   59.798276][ T5957]  ? __pfx____sys_sendmsg+0x10/0x10
[   59.800486][ T5957]  ? __fget_files+0x2a/0x420
[   59.802479][ T5957]  ? __fget_files+0x3a0/0x420
[   59.804537][ T5957]  __x64_sys_sendmsg+0x19b/0x260
[   59.806692][ T5957]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   59.809052][ T5957]  ? rcu_is_watching+0x15/0xb0
[   59.811149][ T5957]  ? do_syscall_64+0xbe/0x3b0
[   59.813181][ T5957]  do_syscall_64+0xfa/0x3b0
[   59.815040][ T5957]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.817238][ T5957]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.820512][ T5957]  ? exc_page_fault+0x9f/0xf0
[   59.822593][ T5957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.825559][ T5957] RIP: 0033:0x7ff5f3f8ebe9
[   59.827515][ T5957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.836162][ T5957] RSP: 002b:00007ff5f21f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   59.839805][ T5957] RAX: ffffffffffffffda RBX: 00007ff5f41c5fa0 RCX: 00007ff5f3f8ebe9
[   59.843155][ T5957] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006
[   59.846528][ T5957] RBP: 00007ff5f4011e19 R08: 0000000000000000 R09: 0000000000000000
[   59.850015][ T5957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.853367][ T5957] R13: 00007ff5f41c6038 R14: 00007ff5f41c5fa0 R15: 00007ffd16479578
[   59.856885][ T5957]  </TASK>
[   59.858350][ T5957] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   59.861355][ T5957] CPU: 0 UID: 0 PID: 5957 Comm: syz.1.19 Not tainted syzkaller #0 PREEMPT(full) 
[   59.865173][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.869402][ T5957] Call Trace:
[   59.870786][ T5957]  <TASK>
[   59.872012][ T5957]  dump_stack_lvl+0x99/0x250
[   59.873993][ T5957]  ? __asan_memcpy+0x40/0x70
[   59.875979][ T5957]  ? __pfx_dump_stack_lvl+0x10/0x10
[   59.878205][ T5957]  ? __pfx__printk+0x10/0x10
[   59.880201][ T5957]  vpanic+0x281/0x750
[   59.881983][ T5957]  ? __pfx__printk+0x10/0x10
[   59.884002][ T5957]  ? __pfx_vpanic+0x10/0x10
[   59.885976][ T5957]  ? is_bpf_text_address+0x292/0x2b0
[   59.888246][ T5957]  panic+0xb9/0xc0
[   59.889856][ T5957]  ? __pfx_panic+0x10/0x10
[   59.891786][ T5957]  __warn+0x31b/0x4b0
[   59.893509][ T5957]  ? rate_control_rate_init+0x64a/0x6e0
[   59.895888][ T5957]  ? rate_control_rate_init+0x64a/0x6e0
[   59.898136][ T5957]  report_bug+0x2be/0x4f0
[   59.899894][ T5957]  ? rate_control_rate_init+0x64a/0x6e0
[   59.902129][ T5957]  ? rate_control_rate_init+0x64a/0x6e0
[   59.904376][ T5957]  ? rate_control_rate_init+0x64c/0x6e0
[   59.906767][ T5957]  handle_bug+0x84/0x160
[   59.908563][ T5957]  exc_invalid_op+0x1a/0x50
[   59.910506][ T5957]  asm_exc_invalid_op+0x1a/0x20
[   59.912527][ T5957] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[   59.915190][ T5957] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 95 8c 00 cc e8 32 26 cf f6 90 0f 0b 90 eb e1 e8 27 26 cf f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[   59.922529][ T5957] RSP: 0018:ffffc900039aef70 EFLAGS: 00010283
[   59.924812][ T5957] RAX: ffffffff8af08569 RBX: ffff888123eec000 RCX: 0000000000080000
[   59.927878][ T5957] RDX: ffffc90020be8000 RSI: 000000000000042e RDI: 000000000000042f
[   59.930609][ T5957] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8af08083
[   59.933538][ T5957] R10: dffffc0000000000 R11: ffffed10247dd831 R12: 1ffff110247dd80a
[   59.936306][ T5957] R13: ffff888030a48e40 R14: 0000000000000001 R15: ffffffff8af08083
[   59.939506][ T5957]  ? rate_control_rate_init+0x163/0x6e0
[   59.941743][ T5957]  ? rate_control_rate_init+0x163/0x6e0
[   59.944024][ T5957]  ? rate_control_rate_init+0x649/0x6e0
[   59.946147][ T5957]  rate_control_rate_init_all_links+0x109/0x1a0
[   59.948672][ T5957]  sta_apply_auth_flags+0x1c2/0x400
[   59.950868][ T5957]  sta_apply_parameters+0xe4b/0x15b0
[   59.952878][ T5957]  ieee80211_add_station+0x424/0x6a0
[   59.954812][ T5957]  rdev_add_station+0x108/0x290
[   59.956407][ T5957]  nl80211_new_station+0x1755/0x1b70
[   59.958234][ T5957]  ? __pfx_nl80211_new_station+0x10/0x10
[   59.960206][ T5957]  ? netdev_run_todo+0xe1d/0xea0
[   59.961937][ T5957]  ? nl80211_pre_doit+0x4f1/0x930
[   59.963662][ T5957]  genl_family_rcv_msg_doit+0x215/0x300
[   59.965523][ T5957]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   59.967618][ T5957]  ? bpf_lsm_capable+0x9/0x20
[   59.969246][ T5957]  ? security_capable+0x7e/0x2e0
[   59.970960][ T5957]  genl_rcv_msg+0x60e/0x790
[   59.972697][ T5957]  ? __pfx_genl_rcv_msg+0x10/0x10
[   59.974510][ T5957]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   59.976324][ T5957]  ? __pfx_nl80211_new_station+0x10/0x10
[   59.978383][ T5957]  ? __pfx_nl80211_post_doit+0x10/0x10
[   59.980525][ T5957]  ? __asan_memcpy+0x40/0x70
[   59.982109][ T5957]  ? __pfx_ref_tracker_free+0x10/0x10
[   59.983991][ T5957]  netlink_rcv_skb+0x208/0x470
[   59.985651][ T5957]  ? __lock_acquire+0xab9/0xd20
[   59.987345][ T5957]  ? __pfx_genl_rcv_msg+0x10/0x10
[   59.989074][ T5957]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   59.990919][ T5957]  ? down_read+0x1ad/0x2e0
[   59.992438][ T5957]  genl_rcv+0x28/0x40
[   59.993862][ T5957]  netlink_unicast+0x82f/0x9e0
[   59.995542][ T5957]  ? __pfx_netlink_unicast+0x10/0x10
[   59.997345][ T5957]  ? netlink_sendmsg+0x642/0xb30
[   59.999299][ T5957]  ? skb_put+0x11b/0x210
[   60.001027][ T5957]  netlink_sendmsg+0x805/0xb30
[   60.002950][ T5957]  ? __pfx_netlink_sendmsg+0x10/0x10
[   60.005122][ T5957]  ? aa_sock_msg_perm+0xf1/0x1d0
[   60.007115][ T5957]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   60.008944][ T5957]  ? __pfx_netlink_sendmsg+0x10/0x10
[   60.010971][ T5957]  __sock_sendmsg+0x21c/0x270
[   60.012817][ T5957]  ____sys_sendmsg+0x505/0x830
[   60.014736][ T5957]  ? __pfx_____sys_sendmsg+0x10/0x10
[   60.016911][ T5957]  ? import_iovec+0x74/0xa0
[   60.018513][ T5957]  ___sys_sendmsg+0x21f/0x2a0
[   60.020309][ T5957]  ? __pfx____sys_sendmsg+0x10/0x10
[   60.022190][ T5957]  ? __fget_files+0x2a/0x420
[   60.023834][ T5957]  ? __fget_files+0x3a0/0x420
[   60.025578][ T5957]  __x64_sys_sendmsg+0x19b/0x260
[   60.027691][ T5957]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   60.029844][ T5957]  ? rcu_is_watching+0x15/0xb0
[   60.031878][ T5957]  ? do_syscall_64+0xbe/0x3b0
[   60.033867][ T5957]  do_syscall_64+0xfa/0x3b0
[   60.035735][ T5957]  ? lockdep_hardirqs_on+0x9c/0x150
[   60.037877][ T5957]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.040406][ T5957]  ? exc_page_fault+0x9f/0xf0
[   60.042393][ T5957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.044909][ T5957] RIP: 0033:0x7ff5f3f8ebe9
[   60.046786][ T5957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.054711][ T5957] RSP: 002b:00007ff5f21f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   60.058099][ T5957] RAX: ffffffffffffffda RBX: 00007ff5f41c5fa0 RCX: 00007ff5f3f8ebe9
[   60.061259][ T5957] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006
[   60.064653][ T5957] RBP: 00007ff5f4011e19 R08: 0000000000000000 R09: 0000000000000000
[   60.067984][ T5957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   60.071163][ T5957] R13: 00007ff5f41c6038 R14: 00007ff5f41c5fa0 R15: 00007ffd16479578
[   60.074495][ T5957]  </TASK>
[   60.076525][ T5957] Kernel Offset: disabled
[   60.078366][ T5957] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:02:04  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000010549 RDI=000000000001054a RBP=00000000000003f8 RSP=ffffc900039ae710
R8 =ffff888020e80237 R9 =1ffff110041d0046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018c1 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff5f21f66c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001080 CR3=00000001072f8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007ff5f4cfd100 00007ff5f4197460 XMM05=00007ff5f4197478 00007ff5f41974c0
XMM06=00007ff5f41974b8 00007ff5f41974b0 XMM07=00007ff5f41974a8 00007ff5f41974a0
XMM08=0000000000000000 00007ff5f4012ee7 XMM09=0000000000000000 00007ff5f4012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff82094743 RBX=ffffea00047bc0c8 RCX=ffff88810a50d640 RDX=ffffc90003a1f979
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc90003a1f890 RSP=ffffc90003a1f5e0
R8 =ffffea00047bc0b3 R9 =1ffffd40008f7816 R10=dffffc0000000000 R11=fffff940008f7817
R12=00007fc0f0400000 R13=00007fc0f0242000 R14=ffffea00047bc0c0 R15=ffffc90003a1faa0
RIP=ffffffff8209475c RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555e674500 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005597f0e267e8 CR3=0000000027e4a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000ffff00000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=ff00000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
