last executing test programs:

937.993931ms ago: executing program 2 (id=1302):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010003704000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100767469000c00028008000300050000db00"], 0x38}}, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @empty}, 0x1c)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000280)=0x400, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000fdffffff850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400881c)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x14c, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffeffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008810}, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000004b80))
r9 = socket(0xf, 0x4, 0x4)
setsockopt$inet6_tcp_int(r9, 0x6, 0x2, &(0x7f0000000100)=0x3, 0x4)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0)

880.708548ms ago: executing program 2 (id=1305):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
unshare(0x26020480)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00)

814.039677ms ago: executing program 2 (id=1307):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000003f40)=ANY=[@ANYBLOB="60000000020605000000000000000000070000001400078008001140000000000800124000000c8f0500010006000000050005000200000005000400000000000900020073797a3100ff000011000300686173683a69702c6d61726b"], 0x60}}, 0x20004000)

807.790588ms ago: executing program 2 (id=1309):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x164, 0x30, 0x100, 0x71bd23, 0x25dfdbff, {}, [{0x150, 0x1, [@m_csum={0xbc, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x80, 0xffffffffffffffff, 0x48fe, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffa, 0xffffffffffffffff, 0xd49, 0x100}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x90, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0x61, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1baf9b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

728.686391ms ago: executing program 2 (id=1310):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0)

726.903636ms ago: executing program 2 (id=1312):
bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x50)
socket$packet(0x11, 0x3, 0x300)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x118, 0x4a, 0xdf, 0xf, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10)
socket(0x840000000002, 0x3, 0x100)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r4}, 0x18)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000840, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r7, &(0x7f00000000c0)='syz1\x00', 0x1ff)

410.200438ms ago: executing program 1 (id=1323):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)

370.292836ms ago: executing program 1 (id=1326):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x8, 0xa}]}, 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)

320.22618ms ago: executing program 1 (id=1328):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004880)=[{{&(0x7f0000000680)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xf9}]}}}], 0x18}}], 0x2, 0x0)

260.202392ms ago: executing program 1 (id=1330):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x1c, 0x1}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x1, 0x502}, 0x28)

260.024219ms ago: executing program 1 (id=1331):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}})

190.526186ms ago: executing program 0 (id=1333):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}], 0x30)

190.24952ms ago: executing program 1 (id=1334):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x24, 0x301, 0x0, 0x80, {0x11}, [@nested={0x4, 0x12f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000040))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054)

190.140113ms ago: executing program 0 (id=1335):
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000140)="482b11195f5b3ae9", 0x0, 0x0, 0x0, 0xe}, 0x38)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="21000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

135.865738ms ago: executing program 0 (id=1336):
r0 = socket$inet(0x2, 0x1, 0xda06)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
shutdown(r2, 0x1)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a000000000040120000006e7000000100000000200002000a00000000800000000000000000"], 0x6c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r4, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

132.02841ms ago: executing program 0 (id=1337):
syz_emit_ethernet(0x6b6, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61a3fc0006803afffe8000000000000000000000000000bbff0200000000000000000000000000018600907800110400180c00001000000a0314e71f8e70c28ec69e8ebe36aca03a343cbfbd82c7b4788d9f5e26ff1ff40a4572988b545c2c7f46e027f5f058d3a20bd75b518999f69f73fd43b26b59422724c3d26b021d0f215b77f276fd8c09b9a8f636fc53b62f654bd7ea12660d45d8af19e9cc6eb5a024f086e9c8dfef81a25cc6361c3f1ff0e6738d612ce2fcfc864eb187d7f93a550397138b8b35aa4ff465f5"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c0002800800014000"], 0x140}}, 0x0)

50.665726ms ago: executing program 0 (id=1338):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="040000000000000002004e23e0"], 0x90)

0s ago: executing program 0 (id=1339):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4891a, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdc03, {0x0, 0x0, 0x0, r2, 0x8248, 0x2416}}, 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30079' (ED25519) to the list of known hosts.
syzkaller login: [   41.476572][ T5754] cgroup: Unknown subsys name 'net'
[   41.562914][ T5754] cgroup: Unknown subsys name 'cpuset'
[   41.569409][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.852479][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   49.317876][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.324164][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.392106][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.394891][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.430864][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   49.434789][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.632012][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.634924][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.637335][ T5846] bridge_slave_0: entered allmulticast mode
[   49.651451][ T5846] bridge_slave_0: entered promiscuous mode
[   49.660634][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.663081][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.665462][ T5846] bridge_slave_1: entered allmulticast mode
[   49.668789][ T5846] bridge_slave_1: entered promiscuous mode
[   49.719520][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.725620][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.780279][ T5846] team0: Port device team_slave_0 added
[   49.783545][ T5846] team0: Port device team_slave_1 added
[   49.809511][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.811830][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.820414][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.826181][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.829081][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.837270][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.864890][ T5846] hsr_slave_0: entered promiscuous mode
[   49.867237][ T5846] hsr_slave_1: entered promiscuous mode
[   50.011556][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   50.016711][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   50.021086][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   50.025547][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   50.042316][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.044745][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.047372][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.049861][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.094558][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.103416][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.106453][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.118792][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   50.130100][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.132451][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.137279][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.139698][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.233752][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.256153][ T5846] veth0_vlan: entered promiscuous mode
[   50.261451][ T5846] veth1_vlan: entered promiscuous mode
[   50.275933][ T5846] veth0_macvtap: entered promiscuous mode
[   50.282889][ T5846] veth1_macvtap: entered promiscuous mode
[   50.293174][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.300050][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.304876][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.307793][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.311663][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.314503][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.152817][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.156288][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.160925][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.174886][ T5896] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.178310][ T5896] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.189206][ T5896] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.198177][ T5896] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.205936][ T5892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.208917][ T5896] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.212495][ T5892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   51.254853][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.259410][ T5896] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.262394][ T5896] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.268042][ T5896] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.277369][ T5896] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.285268][ T5896] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   51.334020][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.404426][ T5894] chnl_net:caif_netlink_parms(): no params data found
[   51.495460][ T5891] chnl_net:caif_netlink_parms(): no params data found
[   51.532632][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.535032][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.537316][ T5894] bridge_slave_0: entered allmulticast mode
[   51.544048][ T5894] bridge_slave_0: entered promiscuous mode
[   51.578176][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.580536][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.582826][ T5894] bridge_slave_1: entered allmulticast mode
[   51.585482][ T5894] bridge_slave_1: entered promiscuous mode
[   51.626640][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.629216][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.631660][ T5891] bridge_slave_0: entered allmulticast mode
[   51.634335][ T5891] bridge_slave_0: entered promiscuous mode
[   51.647383][ T5899] chnl_net:caif_netlink_parms(): no params data found
[   51.656334][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.659198][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.661487][ T5891] bridge_slave_1: entered allmulticast mode
[   51.664138][ T5891] bridge_slave_1: entered promiscuous mode
[   51.671645][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.692253][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.704137][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.727146][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.745008][ T5894] team0: Port device team_slave_0 added
[   51.761031][ T5894] team0: Port device team_slave_1 added
[   51.784124][ T5891] team0: Port device team_slave_0 added
[   51.802528][ T5891] team0: Port device team_slave_1 added
[   51.825517][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.828280][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.830892][ T5899] bridge_slave_0: entered allmulticast mode
[   51.833832][ T5899] bridge_slave_0: entered promiscuous mode
[   51.839191][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.841473][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.850434][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.861843][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.864132][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.866390][ T5899] bridge_slave_1: entered allmulticast mode
[   51.869830][ T5899] bridge_slave_1: entered promiscuous mode
[   51.879142][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.881350][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.889602][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.893665][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.895869][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.904327][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.909240][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.911437][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.919631][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.934502][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.946309][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.991864][ T5899] team0: Port device team_slave_0 added
[   51.996418][ T5894] hsr_slave_0: entered promiscuous mode
[   51.998769][ T5894] hsr_slave_1: entered promiscuous mode
[   52.000917][ T5894] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.003400][ T5894] Cannot create hsr debugfs directory
[   52.013706][ T5899] team0: Port device team_slave_1 added
[   52.018941][ T5891] hsr_slave_0: entered promiscuous mode
[   52.021233][ T5891] hsr_slave_1: entered promiscuous mode
[   52.023317][ T5891] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.025698][ T5891] Cannot create hsr debugfs directory
[   52.054525][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.057155][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.066106][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.083309][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.085804][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.096023][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.204218][ T5899] hsr_slave_0: entered promiscuous mode
[   52.207599][ T5899] hsr_slave_1: entered promiscuous mode
[   52.211328][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.213897][ T5899] Cannot create hsr debugfs directory
[   52.320078][ T5894] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   52.331476][ T5894] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   52.335967][ T5894] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   52.340877][ T5894] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   52.360094][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.362417][ T5894] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.365089][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.367440][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.381432][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.415769][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.420197][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.422891][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.441001][ T5894] 8021q: adding VLAN 0 to HW filter on device team0
[   52.445737][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.448240][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.455838][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.458229][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.562932][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.590761][ T5894] veth0_vlan: entered promiscuous mode
[   52.596070][ T5894] veth1_vlan: entered promiscuous mode
[   52.611883][ T5894] veth0_macvtap: entered promiscuous mode
[   52.615896][ T5894] veth1_macvtap: entered promiscuous mode
[   52.627004][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.633414][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.639991][ T5894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.643523][ T5894] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.646934][ T5894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.650871][ T5894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.713208][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.716259][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.737883][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.743440][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.298862][ T5896] Bluetooth: hci1: command tx timeout
[   53.300764][ T5896] Bluetooth: hci0: command tx timeout
[   53.379014][ T5219] Bluetooth: hci2: command tx timeout
[   53.400892][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'.
[   53.732799][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.826402][   T12] bridge_slave_1: left allmulticast mode
[   53.828755][   T12] bridge_slave_1: left promiscuous mode
[   53.831233][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.850796][   T12] bridge_slave_0: left allmulticast mode
[   53.853464][   T12] bridge_slave_0: left promiscuous mode
[   53.858460][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.096128][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   54.101801][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   54.107039][   T12] bond0 (unregistering): Released all slaves
[   54.239855][   T12] hsr_slave_0: left promiscuous mode
[   54.246618][   T12] hsr_slave_1: left promiscuous mode
[   54.248946][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.251458][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.261244][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.263778][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.273917][   T12] veth1_macvtap: left promiscuous mode
[   54.275853][   T12] veth0_macvtap: left promiscuous mode
[   54.277876][   T12] veth1_vlan: left promiscuous mode
[   54.280456][   T12] veth0_vlan: left promiscuous mode
[   54.505337][   T12] team0 (unregistering): Port device team_slave_1 removed
[   54.525473][   T12] team0 (unregistering): Port device team_slave_0 removed
[   54.809477][ T6020] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.837081][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'.
[   54.914731][ T5891] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.920664][ T5891] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.926078][ T5891] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.936800][ T5891] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.006258][ T5899] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.017561][ T5899] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.031549][ T5899] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.036034][ T5899] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.103320][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.127697][ T5891] 8021q: adding VLAN 0 to HW filter on device team0
[   55.138507][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.140957][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.158624][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.160998][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.174575][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.204912][ T5899] 8021q: adding VLAN 0 to HW filter on device team0
[   55.216600][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.219059][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.239458][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.241841][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.342153][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.378504][ T5219] Bluetooth: hci0: command tx timeout
[   55.380362][ T5896] Bluetooth: hci1: command tx timeout
[   55.397607][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.404727][ T5891] veth0_vlan: entered promiscuous mode
[   55.422841][ T5891] veth1_vlan: entered promiscuous mode
[   55.451148][ T5899] veth0_vlan: entered promiscuous mode
[   55.456001][ T5899] veth1_vlan: entered promiscuous mode
[   55.458226][ T5219] Bluetooth: hci2: command tx timeout
[   55.474471][ T5899] veth0_macvtap: entered promiscuous mode
[   55.491723][ T5899] veth1_macvtap: entered promiscuous mode
[   55.503630][ T5891] veth0_macvtap: entered promiscuous mode
[   55.524064][ T5891] veth1_macvtap: entered promiscuous mode
[   55.540706][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.550008][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.562069][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.570309][ T5899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.573397][ T5899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.576434][ T5899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.581074][ T5899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.592101][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.604728][ T5891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.610162][ T5891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.613825][ T5891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.617325][ T5891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.693624][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.697042][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.741044][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.750914][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.792880][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.794862][ T6071] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   55.796654][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.819607][ T6071] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   55.840811][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.843361][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.031806][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'.
[   56.069049][ T6090] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   56.072080][ T6090] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   56.074857][ T6090] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   56.077566][ T6090] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   56.090259][ T6090] Zero length message leads to an empty skb
[   56.225318][ T6101] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.235851][ T6101] tipc: Started in network mode
[   56.237716][ T6101] tipc: Node identity 4, cluster identity 4711
[   56.241328][ T6101] tipc: Node number set to 4
[   56.872888][ T6124] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.96'.
[   57.461526][ T5219] Bluetooth: hci0: command tx timeout
[   57.461546][ T5896] Bluetooth: hci1: command tx timeout
[   57.477719][ T6150] netlink: 'syz.2.108': attribute type 15 has an invalid length.
[   57.540753][ T5896] Bluetooth: hci2: command tx timeout
[   57.575624][ T6075] Set syz1 is full, maxelem 65536 reached
[   57.622677][ T6161] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   57.625739][ T6161] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   57.799601][ T6178] block nbd0: server does not support multiple connections per device.
[   57.803477][ T6178] block nbd0: shutting down sockets
[   57.856776][ T6191] netlink: 172 bytes leftover after parsing attributes in process `syz.1.126'.
[   58.222307][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'.
[   58.229868][ T6230] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[   58.433458][ T6253] netlink: 44 bytes leftover after parsing attributes in process `syz.0.152'.
[   58.645795][ T6267] tipc: Started in network mode
[   58.647816][ T6267] tipc: Node identity aa2274558bf9, cluster identity 4711
[   58.654709][ T6267] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.693757][ T6267] syzkaller0: entered promiscuous mode
[   58.698197][ T6267] syzkaller0: entered allmulticast mode
[   58.719855][ T6267] tipc: Resetting bearer <eth:syzkaller0>
[   58.729052][ T6266] tipc: Resetting bearer <eth:syzkaller0>
[   58.748953][ T6266] tipc: Disabling bearer <eth:syzkaller0>
[   58.778966][ T6272] netlink: 'syz.1.159': attribute type 1 has an invalid length.
[   58.832005][ T6275] warning: `syz.2.160' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.538272][ T5896] Bluetooth: hci1: command tx timeout
[   59.540242][ T5896] Bluetooth: hci0: command tx timeout
[   59.619275][ T5219] Bluetooth: hci2: command tx timeout
[   60.421716][ T6319] netlink: 'syz.2.176': attribute type 1 has an invalid length.
[   60.424434][ T6319] netlink: 224 bytes leftover after parsing attributes in process `syz.2.176'.
[   60.550562][ T6324] netlink: 'syz.0.177': attribute type 58 has an invalid length.
[   60.929403][  T770] IPVS: starting estimator thread 0...
[   61.048769][ T6371] IPVS: using max 80 ests per chain, 192000 per kthread
[   61.202152][ T6400] tipc: Started in network mode
[   61.203927][ T6400] tipc: Node identity b297493430ab, cluster identity 4711
[   61.206794][ T6400] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.211940][ T6400] syzkaller0: entered promiscuous mode
[   61.214267][ T6400] syzkaller0: entered allmulticast mode
[   61.237224][ T6400] tipc: Resetting bearer <eth:syzkaller0>
[   61.241449][ T6399] tipc: Resetting bearer <eth:syzkaller0>
[   61.261242][ T6399] tipc: Disabling bearer <eth:syzkaller0>
[   61.560139][ T6413] bridge_slave_0: left allmulticast mode
[   61.565985][ T6413] bridge_slave_0: left promiscuous mode
[   61.569891][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.584600][ T6413] bridge_slave_1: left allmulticast mode
[   61.587361][ T6413] bridge_slave_1: left promiscuous mode
[   61.589891][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.596547][ T6413] bond0: (slave bond_slave_0): Releasing backup interface
[   61.602892][ T6413] bond0: (slave bond_slave_1): Releasing backup interface
[   61.613886][ T6413] team0: Port device team_slave_0 removed
[   61.622243][ T6413] team0: Port device team_slave_1 removed
[   61.624922][ T6413] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.628359][ T6413] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.632505][ T6413] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.635020][ T6413] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.934844][ T6478] syz.1.210 uses obsolete (PF_INET,SOCK_PACKET)
[   62.405655][ T6502] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   62.490088][ T6502] nbd0: detected capacity change from 0 to 127
[   62.500699][   T57] block nbd0: Receive control failed (result -104)
[   62.619777][ T6523] ieee802154 phy1 wpan1: encryption failed: -22
[   62.713095][ T6532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'.
[   62.914667][ T6553] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   63.061952][ T6569] netlink: 264 bytes leftover after parsing attributes in process `syz.2.254'.
[   63.064781][ T6569] netlink: 56 bytes leftover after parsing attributes in process `syz.2.254'.
[   63.111202][ T6575] netlink: 'syz.0.256': attribute type 6 has an invalid length.
[   63.114823][ T6575] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.256'.
[   63.288320][ T6581] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.291389][ T6581] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.294911][ T6581] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.299474][ T6581] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.334699][ T6589] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.338217][ T6583] syzkaller0: entered promiscuous mode
[   63.340130][ T6583] syzkaller0: entered allmulticast mode
[   63.354478][ T6583] tipc: Resetting bearer <eth:syzkaller0>
[   63.359197][ T6582] tipc: Resetting bearer <eth:syzkaller0>
[   63.378542][ T6582] tipc: Disabling bearer <eth:syzkaller0>
[   63.501352][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'.
[   63.507661][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'.
[   63.511785][ T6599] netlink: 'syz.2.267': attribute type 19 has an invalid length.
[   63.758358][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'.
[   63.944272][ T6640] netlink: 'syz.0.287': attribute type 15 has an invalid length.
[   64.130894][ T6658] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   64.224014][ T6666] netlink: 'syz.1.299': attribute type 1 has an invalid length.
[   64.256555][ T6666] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.277410][ T6666] bond1: (slave bridge1): making interface the new active one
[   64.285395][ T6666] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   64.320251][ T6666] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   64.458312][ T6681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'.
[   64.857691][ T6721] netlink: 96 bytes leftover after parsing attributes in process `syz.1.324'.
[   64.934803][ T6731] netlink: 14 bytes leftover after parsing attributes in process `syz.0.329'.
[   64.998080][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'.
[   65.000993][ T6738] netlink: 'syz.2.332': attribute type 1 has an invalid length.
[   65.075366][ T6731] bond0 (unregistering): Released all slaves
[   65.085266][ T6736] macsec0: entered promiscuous mode
[   66.062237][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'.
[   66.211003][ T6815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.362'.
[   66.236144][ T6817] netlink: 'syz.1.363': attribute type 21 has an invalid length.
[   66.315967][ T6824] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.316391][ T6826] netlink: 'syz.1.367': attribute type 21 has an invalid length.
[   66.320704][ T6824] syzkaller0: entered promiscuous mode
[   66.324755][ T6826] netlink: 'syz.1.367': attribute type 15 has an invalid length.
[   66.328699][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'.
[   66.329743][ T6824] syzkaller0: entered allmulticast mode
[   66.351741][ T6824] tipc: Resetting bearer <eth:syzkaller0>
[   66.355547][ T6821] tipc: Resetting bearer <eth:syzkaller0>
[   66.363704][ T6821] tipc: Disabling bearer <eth:syzkaller0>
[   67.219673][ T6873] netlink: 'syz.1.388': attribute type 20 has an invalid length.
[   67.919384][ T6912] veth1_to_bond: entered allmulticast mode
[   67.953306][ T6912] veth1_to_bond (unregistering): left allmulticast mode
[   69.468243][ T5896] Bluetooth: hci2: command 0x0405 tx timeout
[   69.537445][ T7008] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   69.823793][ T7019] __nla_validate_parse: 12 callbacks suppressed
[   69.823811][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'.
[   69.847348][ T7019] 8021q: adding VLAN 0 to HW filter on device bond2
[   69.896009][ T7019] macvlan2: entered promiscuous mode
[   69.902498][ T7019] macvlan2: entered allmulticast mode
[   69.914099][ T7019] bond_slave_0: entered promiscuous mode
[   69.916220][ T7019] bond_slave_1: entered promiscuous mode
[   69.920889][ T7019] bond0: entered allmulticast mode
[   69.922698][ T7019] bond_slave_0: entered allmulticast mode
[   69.924580][ T7019] bond_slave_1: entered allmulticast mode
[   69.926542][ T7019] bond0: entered promiscuous mode
[   69.929114][ T7019] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   69.933240][ T7019] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[   70.163124][ T7046] netlink: 'syz.2.466': attribute type 1 has an invalid length.
[   70.166103][ T7046] netlink: 'syz.2.466': attribute type 2 has an invalid length.
[   70.170141][ T7046] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.466'.
[   70.628251][ T7069] macvlan3: entered allmulticast mode
[   70.630181][ T7069] veth1_vlan: entered allmulticast mode
[   70.633882][ T7069] veth1_vlan: left allmulticast mode
[   70.954044][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'.
[   70.984577][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   70.987086][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'.
[   70.993890][ T7100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.489'.
[   70.994647][ T7098] team0: entered promiscuous mode
[   71.000973][ T7098] team_slave_0: entered promiscuous mode
[   71.003875][ T7098] team_slave_1: entered promiscuous mode
[   71.009438][ T7098] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   71.013560][ T7098] team0: left promiscuous mode
[   71.015228][ T7098] team_slave_0: left promiscuous mode
[   71.017280][ T7098] team_slave_1: left promiscuous mode
[   71.346840][ T7143] syzkaller1: entered promiscuous mode
[   71.349837][ T7143] syzkaller1: entered allmulticast mode
[   71.531211][ T7157] only policy match revision 0 supported
[   71.531226][ T7157] unable to load match
[   71.538294][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[   71.659055][ T7171] netlink: 'syz.0.517': attribute type 1 has an invalid length.
[   71.661543][ T7171] netlink: 'syz.0.517': attribute type 1 has an invalid length.
[   71.662093][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'.
[   71.852824][ T5891] cgroup: fork rejected by pids controller in /syz2
[   72.104291][ T5873] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.118099][ T5873] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.186705][ T5873] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.196237][ T5873] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.275909][ T5873] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.281829][ T5873] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.315618][ T5896] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.323341][ T5896] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.326605][ T5896] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.329950][ T5896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.341854][ T5896] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.357496][ T5873] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.361909][ T5873] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.500519][ T5873] bridge_slave_1: left allmulticast mode
[   72.505611][ T5873] bridge_slave_1: left promiscuous mode
[   72.508284][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.513025][ T7211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.535'.
[   72.516741][ T5873] bridge_slave_0: left allmulticast mode
[   72.520225][ T5873] bridge_slave_0: left promiscuous mode
[   72.522202][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.783446][ T5873] bond0 (unregistering): left allmulticast mode
[   72.785571][ T5873] bond_slave_0: left allmulticast mode
[   72.787380][ T5873] bond_slave_1: left allmulticast mode
[   72.789331][ T5873] bond0 (unregistering): left promiscuous mode
[   72.791400][ T5873] bond_slave_0: left promiscuous mode
[   72.793294][ T5873] bond_slave_1: left promiscuous mode
[   72.801418][ T5873] bond2 (unregistering): (slave macvlan2): Releasing backup interface
[   72.809440][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.813694][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.817285][ T5873] bond0 (unregistering): Released all slaves
[   72.824565][ T5873] bond1 (unregistering): Released all slaves
[   72.875518][ T5873] bond2 (unregistering): Released all slaves
[   72.917616][ T7197] chnl_net:caif_netlink_parms(): no params data found
[   72.985979][ T5873] tipc: Left network mode
[   73.042193][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.044653][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.047090][ T7197] bridge_slave_0: entered allmulticast mode
[   73.050922][ T7197] bridge_slave_0: entered promiscuous mode
[   73.077209][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.080868][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.084054][ T7197] bridge_slave_1: entered allmulticast mode
[   73.087068][ T7197] bridge_slave_1: entered promiscuous mode
[   73.110130][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.114763][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.169041][ T7228] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[   73.170825][ T7197] team0: Port device team_slave_0 added
[   73.175287][ T7197] team0: Port device team_slave_1 added
[   73.216711][ T5873] hsr_slave_0: left promiscuous mode
[   73.219096][ T5873] hsr_slave_1: left promiscuous mode
[   73.221186][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.223626][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.226317][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.230241][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.239927][ T5873] veth1_macvtap: left promiscuous mode
[   73.241750][ T5873] veth0_macvtap: left promiscuous mode
[   73.243612][ T5873] veth1_vlan: left promiscuous mode
[   73.245320][ T5873] veth0_vlan: left promiscuous mode
[   73.473004][ T5873] team0 (unregistering): Port device team_slave_1 removed
[   73.495119][ T5873] team0 (unregistering): Port device team_slave_0 removed
[   73.691166][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.693483][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.702334][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.712507][ T7233] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.716278][ T7233] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.719951][ T7233] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.723520][ T7233] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.736700][ T7233] team0: Port device vxlan0 added
[   73.739423][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.741797][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.750411][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.801108][ T7197] hsr_slave_0: entered promiscuous mode
[   73.803599][ T7197] hsr_slave_1: entered promiscuous mode
[   73.840084][ T7237] Bluetooth: MGMT ver 1.23
[   73.946678][ T5873] IPVS: stop unused estimator thread 0...
[   74.056497][ T7249] netlink: 'syz.1.551': attribute type 11 has an invalid length.
[   74.101883][ T7254] netlink: 'syz.1.552': attribute type 1 has an invalid length.
[   74.104502][ T7254] netlink: 'syz.1.552': attribute type 1 has an invalid length.
[   74.324123][ T7197] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.341193][ T7197] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.368559][ T7197] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.385980][ T7197] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.418280][ T5219] Bluetooth: hci0: command tx timeout
[   74.479484][ T7197] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.503195][ T7197] 8021q: adding VLAN 0 to HW filter on device team0
[   74.520722][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.523145][ T6446] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.541599][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.543975][ T6446] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.669708][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.565'.
[   74.672601][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.565'.
[   74.675430][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.565'.
[   74.687752][ T7197] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.722053][ T7197] veth0_vlan: entered promiscuous mode
[   74.729834][ T7197] veth1_vlan: entered promiscuous mode
[   74.750136][ T7197] veth0_macvtap: entered promiscuous mode
[   74.754323][ T7197] veth1_macvtap: entered promiscuous mode
[   74.765844][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.774051][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.780391][ T7197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.783363][ T7197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.786306][ T7197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.791502][ T7197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.842893][ T6446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.847364][ T6446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.871628][ T6456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.874303][ T6456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.925946][ T7298] netlink: 'syz.2.527': attribute type 74 has an invalid length.
[   75.172691][ T7308] __nla_validate_parse: 1 callbacks suppressed
[   75.172705][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.570'.
[   75.400355][ T7320] openvswitch: netlink: IPv6 tunnel dst address is zero
[   75.574591][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.587251][ T7344] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.585'.
[   75.657015][ T7352] netlink: 56 bytes leftover after parsing attributes in process `syz.0.589'.
[   75.660386][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'.
[   75.962460][ T7380] netlink: 188 bytes leftover after parsing attributes in process `syz.0.600'.
[   76.076779][ T7387] netlink: 'syz.0.603': attribute type 10 has an invalid length.
[   76.092930][ T7387] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   76.255354][ T7394] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   76.284050][ T7398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.607'.
[   76.307466][ T7398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.607'.
[   76.359780][ T7406] netlink: 'syz.1.611': attribute type 2 has an invalid length.
[   76.362482][ T7406] netlink: 119 bytes leftover after parsing attributes in process `syz.1.611'.
[   76.373137][ T7402] netlink: 'syz.2.609': attribute type 1 has an invalid length.
[   76.387828][ T7402] netlink: 44 bytes leftover after parsing attributes in process `syz.2.609'.
[   76.450217][ T7414] netlink: 'syz.0.614': attribute type 1 has an invalid length.
[   76.492729][ T7414] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.498244][ T5219] Bluetooth: hci0: command tx timeout
[   76.530549][ T7414] bond1: (slave gretap1): making interface the new active one
[   76.534848][ T7414] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   76.646554][ T7429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.873639][ T7461] pim6reg1: entered promiscuous mode
[   76.875845][ T7461] pim6reg1: entered allmulticast mode
[   77.064542][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'.
[   77.067370][ T7472] netlink: 'syz.1.641': attribute type 2 has an invalid length.
[   77.124705][ T7478] siw: device registration error -23
[   77.145147][ T7478] ipvlan2: entered promiscuous mode
[   77.157303][ T7478] Driver unsupported XDP return value 0 on prog  (id 108) dev N/A, expect packet loss!
[   77.415873][ T7497] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.804688][ T7542] openvswitch: netlink: IP tunnel dst address not specified
[   77.807609][ T7543] netlink: 'syz.1.675': attribute type 10 has an invalid length.
[   77.838909][ T7543] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.845373][ T7543] team0: Port device bond0 added
[   77.939391][ T7555] netlink: 'syz.0.681': attribute type 1 has an invalid length.
[   78.293479][ T7588] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.339157][ T7588] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.388708][ T7588] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.429796][ T7588] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.502099][ T7588] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.511442][ T7588] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.519616][ T7588] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.527056][ T7588] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.578568][ T5219] Bluetooth: hci0: command tx timeout
[   78.816055][ T7497] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.879001][ T7497] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.939450][ T7497] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.001647][ T7497] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.011414][ T7497] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.022342][ T7497] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.033825][ T7497] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.277076][ T7665] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882)
[   80.280794][ T7665] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   80.515967][ T7683] __nla_validate_parse: 6 callbacks suppressed
[   80.515977][ T7683] netlink: 648 bytes leftover after parsing attributes in process `syz.2.733'.
[   80.658087][ T5219] Bluetooth: hci0: command tx timeout
[   81.251736][   T97] cfg80211: failed to load regulatory.db
[   81.262845][ T5885] IPVS: starting estimator thread 0...
[   81.351542][ T7707] IPVS: using max 78 ests per chain, 187200 per kthread
[   81.413881][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'.
[   81.414063][ T7722] netlink: 72 bytes leftover after parsing attributes in process `syz.1.750'.
[   81.416946][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.751'.
[   81.597442][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'.
[   81.704699][ T7747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.763'.
[   81.843408][ T7766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.846335][ T7766] syzkaller0: entered promiscuous mode
[   81.850211][ T7766] syzkaller0: entered allmulticast mode
[   81.859516][ T7766] tipc: Resetting bearer <eth:syzkaller0>
[   81.863315][ T7766] syzkaller0: tun_net_xmit 90
[   81.867207][ T7763] tipc: Resetting bearer <eth:syzkaller0>
[   81.875351][ T7763] tipc: Disabling bearer <eth:syzkaller0>
[   81.945146][ T7769] macvlan3: entered allmulticast mode
[   81.948180][ T7769] veth1_vlan: entered allmulticast mode
[   81.951406][ T7769] veth1_vlan: left allmulticast mode
[   82.176098][ T7787] netlink: 'syz.1.780': attribute type 10 has an invalid length.
[   82.346567][ T7797] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   82.376209][ T7797] team0: Port device bond0 removed
[   82.380607][ T7797] bridge_slave_0: left allmulticast mode
[   82.382646][ T7797] bridge_slave_0: left promiscuous mode
[   82.384719][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.391900][ T7797] bridge_slave_1: left allmulticast mode
[   82.394321][ T7797] bridge_slave_1: left promiscuous mode
[   82.396695][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.409824][ T7797] bond0: (slave bond_slave_0): Releasing backup interface
[   82.422534][ T7797] bond0: (slave bond_slave_1): Releasing backup interface
[   82.435017][ T7797] team0: Port device team_slave_0 removed
[   82.442433][ T7797] team0: Port device team_slave_1 removed
[   82.445304][ T7797] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.447875][ T7797] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.479816][ T7797] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.482330][ T7797] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.485190][ T7800] netlink: 'syz.1.785': attribute type 10 has an invalid length.
[   82.494538][ T7797] bond1: (slave bridge1): Releasing active interface
[   82.515222][ T7800] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   82.583137][ T7797] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   82.589552][ T7797] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   82.863237][ T7817] syzkaller0: entered promiscuous mode
[   82.865154][ T7817] syzkaller0: entered allmulticast mode
[   84.320322][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'.
[   84.323685][ T7872] netlink: 'syz.2.815': attribute type 12 has an invalid length.
[   84.330466][ T7872] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.333104][ T7872] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.335848][ T7872] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.338973][ T7872] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.344477][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'.
[   84.348394][ T7872] netlink: 'syz.2.815': attribute type 12 has an invalid length.
[   84.385704][ T7877] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   84.810842][ T7908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.833'.
[   85.411814][ T7910] netlink: 148 bytes leftover after parsing attributes in process `syz.1.834'.
[   85.432544][ T7901] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   85.520101][ T7920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.537334][ T7920] tipc: Resetting bearer <eth:syzkaller0>
[   85.566068][ T7919] tipc: Disabling bearer <eth:syzkaller0>
[   85.574372][ T7926] tipc: Cannot configure node identity twice
[   85.577271][ T7928] tipc: Started in network mode
[   85.585941][ T7928] tipc: Node identity 923e071be12d, cluster identity 4711
[   85.589337][ T7928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.592311][ T7928] syzkaller0: entered promiscuous mode
[   85.594091][ T7928] syzkaller0: entered allmulticast mode
[   85.620720][ T7928] tipc: Resetting bearer <eth:syzkaller0>
[   85.624007][ T7927] tipc: Resetting bearer <eth:syzkaller0>
[   85.633375][ T7927] tipc: Disabling bearer <eth:syzkaller0>
[   85.897194][ T7932] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.905817][ T7932] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.913371][ T7932] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.916774][ T7932] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.961670][   T10] syz1: Port: 1 Link DOWN
[   85.963910][ T7950] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.853'.
[   86.085970][ T7958] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.089980][ T7958] syzkaller0: entered promiscuous mode
[   86.094347][ T7958] syzkaller0: entered allmulticast mode
[   86.139315][ T7958] tipc: Resetting bearer <eth:syzkaller0>
[   86.147398][ T7957] tipc: Resetting bearer <eth:syzkaller0>
[   86.159935][ T7957] tipc: Disabling bearer <eth:syzkaller0>
[   86.373459][ T7992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.874'.
[   86.435000][ T8000] netlink: 'syz.0.878': attribute type 1 has an invalid length.
[   86.450982][ T8000] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.470173][ T8000] vlan2: entered allmulticast mode
[   86.471972][ T8000] veth1: entered allmulticast mode
[   86.474196][ T8000] bond2: (slave vlan2): Opening slave failed
[   86.695047][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'.
[   86.698260][ T8021] netlink: 'syz.2.888': attribute type 30 has an invalid length.
[   86.749844][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'.
[   86.752897][ T8021] netlink: 'syz.2.888': attribute type 30 has an invalid length.
[   86.791760][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'.
[   86.830078][ T8028] sctp: [Deprecated]: syz.2.891 (pid 8028) Use of int in max_burst socket option deprecated.
[   86.830078][ T8028] Use struct sctp_assoc_value instead
[   86.975763][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'.
[   86.986139][ T8047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.438409][ T8062] geneve0: entered allmulticast mode
[   87.537586][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'.
[   87.543363][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[   87.545648][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   87.548333][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   87.550789][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   87.570621][ T8069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.580411][ T8069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.757171][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.916'.
[   87.920407][ T8092] netlink: 108 bytes leftover after parsing attributes in process `syz.2.921'.
[   87.924873][ T8092] netlink: 108 bytes leftover after parsing attributes in process `syz.2.921'.
[   88.218143][   T10] IPVS: starting estimator thread 0...
[   88.308080][ T8118] IPVS: using max 80 ests per chain, 192000 per kthread
[   88.597012][ T8134] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.605890][ T8134] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.662391][ T8134] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.666495][ T8134] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.712146][ T8143] netlink: 'syz.0.943': attribute type 21 has an invalid length.
[   88.715599][ T8143] netlink: 'syz.0.943': attribute type 1 has an invalid length.
[   88.744867][ T8134] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.763116][ T8134] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.850676][ T8134] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.854096][ T8134] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.936673][ T8134] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.946026][ T8134] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.956846][ T8134] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.961897][ T8134] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.969457][ T8134] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.980166][ T8134] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.987541][ T8134] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.996096][ T8134] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.305266][ T8189] sch_tbf: burst 240 is lower than device lo mtu (39799) !
[   90.495474][ T8287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.089056][ T8359] __nla_validate_parse: 5 callbacks suppressed
[   91.089068][ T8359] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.1045'.
[   91.316024][ T8380] netlink: 'syz.0.1054': attribute type 3 has an invalid length.
[   91.322028][ T8380] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1054'.
[   91.324956][ T8382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.336282][ T8382] syzkaller0: entered promiscuous mode
[   91.338870][ T8382] syzkaller0: entered allmulticast mode
[   91.351885][ T8382] tipc: Resetting bearer <eth:syzkaller0>
[   91.356078][ T8381] tipc: Resetting bearer <eth:syzkaller0>
[   91.376058][ T8381] tipc: Disabling bearer <eth:syzkaller0>
[   91.570404][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'.
[   91.598584][ T8393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.601293][ T8393] syzkaller0: entered promiscuous mode
[   91.603210][ T8393] syzkaller0: entered allmulticast mode
[   91.620680][ T8393] tipc: Resetting bearer <eth:syzkaller0>
[   91.625808][ T8392] tipc: Resetting bearer <eth:syzkaller0>
[   91.639051][ T8392] tipc: Disabling bearer <eth:syzkaller0>
[   92.031490][ T8428] netlink: 'syz.1.1075': attribute type 42 has an invalid length.
[   92.119385][ T8438] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.136806][ T8438] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   92.141593][ T8438] bond3: (slave macvlan2): Enslaving as a backup interface with a down link
[   92.227045][ T8455] openvswitch: netlink: Message has 4 unknown bytes.
[   92.296833][ T8463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1093'.
[   92.302839][ T8463] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   92.739772][   T61] block nbd0: Possible stuck request ffff888020208000: control (read@0,1024B). Runtime 30 seconds
[   92.743384][   T61] block nbd0: Possible stuck request ffff888020208200: control (read@1024,1024B). Runtime 30 seconds
[   92.746938][   T61] block nbd0: Possible stuck request ffff888020208400: control (read@2048,1024B). Runtime 30 seconds
[   92.751453][   T61] block nbd0: Possible stuck request ffff888020208600: control (read@3072,1024B). Runtime 30 seconds
[   93.233985][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'.
[   93.365316][ T8525] netlink: 'syz.2.1120': attribute type 8 has an invalid length.
[   93.814020][   T33] audit: type=1800 audit(1753898583.115:2): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1131" name="cgroup.controllers" dev="tmpfs" ino=795 res=0 errno=0
[   94.059993][ T8557] netlink: 'syz.2.1134': attribute type 9 has an invalid length.
[   94.206815][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'.
[   94.258559][ T8559] hsr_slave_1 (unregistering): left promiscuous mode
[   94.370824][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'.
[   94.474778][ T8574] netlink: 'syz.0.1141': attribute type 11 has an invalid length.
[   94.478071][ T8574] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1141'.
[   94.525097][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'.
[   94.531944][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'.
[   94.756562][ T8609] netlink: 'syz.1.1157': attribute type 1 has an invalid length.
[   94.812603][   T33] audit: type=1800 audit(1753898584.115:3): pid=8614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1159" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2081 res=0 errno=0
[   94.863998][ T8616] syz.1.1160 (8616) used obsolete PPPIOCDETACH ioctl
[   95.495090][ T8666] netlink: 'syz.2.1185': attribute type 33 has an invalid length.
[   95.504329][ T8666] netlink: 'syz.2.1185': attribute type 10 has an invalid length.
[   95.517266][ T8666] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.521154][ T8666] team0: Port device bond0 added
[   95.606594][ T8676] netlink: 'syz.1.1190': attribute type 1 has an invalid length.
[   95.693862][ T8685] raw_sendmsg: syz.1.1193 forgot to set AF_INET. Fix it!
[   96.042302][ T8734] vxcan1: entered allmulticast mode
[   96.048067][ T8734] vxcan1: left allmulticast mode
[   96.137748][ T8748] netlink: 'syz.0.1223': attribute type 15 has an invalid length.
[   96.209643][ T8760] __nla_validate_parse: 15 callbacks suppressed
[   96.209655][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1230'.
[   96.235923][ T8760] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1230'.
[   96.289860][ T8767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1233'.
[   96.296604][ T8767] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   96.301375][ T8767] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   96.307147][ T8767] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   96.312969][ T8767] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   96.331892][ T8769] netlink: 'syz.1.1234': attribute type 1 has an invalid length.
[   96.349816][ T8769] 8021q: adding VLAN 0 to HW filter on device bond2
[   96.366548][ T8769] bond2: (slave veth9): Enslaving as an active interface with a down link
[   96.379406][ T8769] vlan2: entered allmulticast mode
[   96.381382][ T8769] veth1: entered allmulticast mode
[   96.386556][ T8769] bond2: (slave vlan2): Opening slave failed
[   96.420957][ T8768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.430782][ T8776] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1237'.
[   96.792743][ T8798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1248'.
[   96.795780][ T8798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1248'.
[   97.047439][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1254'.
[   97.150262][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'.
[   97.322542][ T8854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1274'.
[   97.468862][ T8856] netlink: 'syz.2.1275': attribute type 13 has an invalid length.
[   97.473064][ T8856] netlink: 'syz.2.1275': attribute type 17 has an invalid length.
[   97.510054][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'.
[   97.515406][ T8856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.530735][ T8872] macvtap1: entered promiscuous mode
[   97.532540][ T8872] dummy0: entered promiscuous mode
[   97.538422][ T8872] macvtap1: entered allmulticast mode
[   97.540451][ T8872] dummy0: entered allmulticast mode
[   97.560384][ T8872] dummy0: left allmulticast mode
[   97.562188][ T8872] dummy0: left promiscuous mode
[   97.571322][ T8856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.631911][ T8856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.693418][ T8867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.281811][ T8911] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   98.487063][ T8934] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   98.605251][ T8944] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   98.634079][ T8946] netlink: 'syz.0.1314': attribute type 10 has an invalid length.
[   98.644201][ T8946] team0: Port device dummy0 added
[   98.889399][ T8965] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   99.133536][ T8991] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   99.165998][ T8985] netlink: 'syz.1.1334': attribute type 303 has an invalid length.
[   99.170377][ T8985] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   99.174575][ T8985] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   99.295949][ T8997] 
[   99.296838][ T8997] ======================================================
[   99.299033][ T8997] WARNING: possible circular locking dependency detected
[   99.301215][ T8997] 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 Not tainted
[   99.304616][ T8997] ------------------------------------------------------
[   99.306844][ T8997] syz.0.1339/8997 is trying to acquire lock:
[   99.308752][ T8997] ffff88811e098e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_device_event+0x544/0xa20
[   99.312009][ T8997] 
[   99.312009][ T8997] but task is already holding lock:
[   99.314465][ T8997] ffff88811e11ed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   99.317561][ T8997] 
[   99.317561][ T8997] which lock already depends on the new lock.
[   99.317561][ T8997] 
[   99.320964][ T8997] 
[   99.320964][ T8997] the existing dependency chain (in reverse order) is:
[   99.324074][ T8997] 
[   99.324074][ T8997] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   99.326848][ T8997]        lock_acquire+0x120/0x360
[   99.328553][ T8997]        __mutex_lock+0x182/0xe80
[   99.330259][ T8997]        dev_set_mtu+0x10e/0x260
[   99.331903][ T8997]        team_add_slave+0x8b8/0x2840
[   99.333685][ T8997]        do_set_master+0x533/0x6d0
[   99.335395][ T8997]        do_setlink+0xcf0/0x41c0
[   99.337054][ T8997]        rtnl_newlink+0x160b/0x1c70
[   99.338858][ T8997]        rtnetlink_rcv_msg+0x7cf/0xb70
[   99.340642][ T8997]        netlink_rcv_skb+0x208/0x470
[   99.342317][ T8997]        netlink_unicast+0x75c/0x8e0
[   99.344116][ T8997]        netlink_sendmsg+0x805/0xb30
[   99.345863][ T8997]        __sock_sendmsg+0x21c/0x270
[   99.347617][ T8997]        ____sys_sendmsg+0x505/0x830
[   99.349407][ T8997]        ___sys_sendmsg+0x21f/0x2a0
[   99.351249][ T8997]        __x64_sys_sendmsg+0x19b/0x260
[   99.353116][ T8997]        do_syscall_64+0xfa/0x3b0
[   99.354798][ T8997]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.356947][ T8997] 
[   99.356947][ T8997] -> #0 (team->team_lock_key#4){+.+.}-{4:4}:
[   99.359626][ T8997]        validate_chain+0xb9b/0x2140
[   99.361304][ T8997]        __lock_acquire+0xab9/0xd20
[   99.362980][ T8997]        lock_acquire+0x120/0x360
[   99.364697][ T8997]        __mutex_lock+0x182/0xe80
[   99.366391][ T8997]        team_device_event+0x544/0xa20
[   99.368161][ T8997]        notifier_call_chain+0x1b6/0x3e0
[   99.369944][ T8997]        netif_state_change+0x284/0x3a0
[   99.371807][ T8997]        do_setlink+0x35de/0x41c0
[   99.373497][ T8997]        rtnl_newlink+0x149f/0x1c70
[   99.375300][ T8997]        rtnetlink_rcv_msg+0x7cf/0xb70
[   99.377090][ T8997]        netlink_rcv_skb+0x208/0x470
[   99.378854][ T8997]        netlink_unicast+0x75c/0x8e0
[   99.380607][ T8997]        netlink_sendmsg+0x805/0xb30
[   99.382370][ T8997]        __sock_sendmsg+0x21c/0x270
[   99.384143][ T8997]        ____sys_sendmsg+0x505/0x830
[   99.385906][ T8997]        ___sys_sendmsg+0x21f/0x2a0
[   99.387632][ T8997]        __x64_sys_sendmsg+0x19b/0x260
[   99.389434][ T8997]        do_syscall_64+0xfa/0x3b0
[   99.391170][ T8997]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.393302][ T8997] 
[   99.393302][ T8997] other info that might help us debug this:
[   99.393302][ T8997] 
[   99.396654][ T8997]  Possible unsafe locking scenario:
[   99.396654][ T8997] 
[   99.399112][ T8997]        CPU0                    CPU1
[   99.400879][ T8997]        ----                    ----
[   99.402673][ T8997]   lock(&dev_instance_lock_key#3);
[   99.404358][ T8997]                                lock(team->team_lock_key#4);
[   99.406788][ T8997]                                lock(&dev_instance_lock_key#3);
[   99.409278][ T8997]   lock(team->team_lock_key#4);
[   99.410955][ T8997] 
[   99.410955][ T8997]  *** DEADLOCK ***
[   99.410955][ T8997] 
[   99.413662][ T8997] 2 locks held by syz.0.1339/8997:
[   99.415285][ T8997]  #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[   99.418067][ T8997]  #1: ffff88811e11ed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   99.421429][ T8997] 
[   99.421429][ T8997] stack backtrace:
[   99.423305][ T8997] CPU: 0 UID: 0 PID: 8997 Comm: syz.0.1339 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[   99.423315][ T8997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.423321][ T8997] Call Trace:
[   99.423326][ T8997]  <TASK>
[   99.423331][ T8997]  dump_stack_lvl+0x189/0x250
[   99.423343][ T8997]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.423351][ T8997]  ? __pfx__printk+0x10/0x10
[   99.423362][ T8997]  ? print_lock_name+0xde/0x100
[   99.423372][ T8997]  print_circular_bug+0x2ee/0x310
[   99.423383][ T8997]  check_noncircular+0x134/0x160
[   99.423394][ T8997]  validate_chain+0xb9b/0x2140
[   99.423404][ T8997]  ? bpf_trace_run2+0x322/0x4b0
[   99.423415][ T8997]  ? __kasan_slab_free+0x62/0x70
[   99.423425][ T8997]  ? kmem_cache_free+0x18f/0x400
[   99.423436][ T8997]  __lock_acquire+0xab9/0xd20
[   99.423445][ T8997]  ? team_device_event+0x544/0xa20
[   99.423452][ T8997]  lock_acquire+0x120/0x360
[   99.423464][ T8997]  ? team_device_event+0x544/0xa20
[   99.423473][ T8997]  __mutex_lock+0x182/0xe80
[   99.423483][ T8997]  ? team_device_event+0x544/0xa20
[   99.423489][ T8997]  ? do_raw_spin_lock+0x121/0x290
[   99.423500][ T8997]  ? team_device_event+0x544/0xa20
[   99.423507][ T8997]  ? fib_rebalance+0x8e/0x9a0
[   99.423516][ T8997]  ? __pfx___mutex_lock+0x10/0x10
[   99.423524][ T8997]  ? fib_sync_up+0x76d/0x7b0
[   99.423535][ T8997]  team_device_event+0x544/0xa20
[   99.423544][ T8997]  notifier_call_chain+0x1b6/0x3e0
[   99.423554][ T8997]  netif_state_change+0x284/0x3a0
[   99.423565][ T8997]  ? __pfx_netif_state_change+0x10/0x10
[   99.423575][ T8997]  ? netif_change_flags+0xe8/0x1a0
[   99.423586][ T8997]  do_setlink+0x35de/0x41c0
[   99.423598][ T8997]  ? __pfx_do_setlink+0x10/0x10
[   99.423607][ T8997]  ? bpf_trace_run2+0x322/0x4b0
[   99.423616][ T8997]  ? bpf_trace_run2+0x186/0x4b0
[   99.423625][ T8997]  ? __pfx_bpf_trace_run2+0x10/0x10
[   99.423635][ T8997]  ? __bpf_trace_contention_end+0xcd/0x130
[   99.423645][ T8997]  ? __bpf_trace_contention_end+0xdc/0x130
[   99.423654][ T8997]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[   99.423662][ T8997]  ? __mutex_trylock_common+0x153/0x260
[   99.423674][ T8997]  ? rcu_is_watching+0x15/0xb0
[   99.423682][ T8997]  ? trace_contention_end+0x39/0x120
[   99.423690][ T8997]  ? __mutex_lock+0x330/0xe80
[   99.423698][ T8997]  ? __pfx_aa_get_newest_label+0x10/0x10
[   99.423706][ T8997]  ? rtnl_newlink+0x8db/0x1c70
[   99.423714][ T8997]  ? rcu_is_watching+0x15/0xb0
[   99.423722][ T8997]  ? __pfx___mutex_lock+0x10/0x10
[   99.423730][ T8997]  ? ns_capable+0x8a/0xf0
[   99.423738][ T8997]  ? rtnl_link_get_net_capable+0x16a/0x350
[   99.423748][ T8997]  rtnl_newlink+0x149f/0x1c70
[   99.423758][ T8997]  ? __pfx_rtnl_newlink+0x10/0x10
[   99.423768][ T8997]  ? __lock_acquire+0xab9/0xd20
[   99.423778][ T8997]  ? __lock_acquire+0xab9/0xd20
[   99.423787][ T8997]  ? is_bpf_text_address+0x26/0x2b0
[   99.423796][ T8997]  ? is_bpf_text_address+0x292/0x2b0
[   99.423802][ T8997]  ? is_bpf_text_address+0x26/0x2b0
[   99.423810][ T8997]  ? kernel_text_address+0xa5/0xe0
[   99.423818][ T8997]  ? __lock_acquire+0xab9/0xd20
[   99.423828][ T8997]  ? __pfx_rtnl_newlink+0x10/0x10
[   99.423836][ T8997]  rtnetlink_rcv_msg+0x7cf/0xb70
[   99.423845][ T8997]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   99.423853][ T8997]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   99.423864][ T8997]  netlink_rcv_skb+0x208/0x470
[   99.423875][ T8997]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   99.423883][ T8997]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   99.423894][ T8997]  ? netlink_deliver_tap+0x2e/0x1b0
[   99.423902][ T8997]  ? netlink_deliver_tap+0x2e/0x1b0
[   99.423912][ T8997]  netlink_unicast+0x75c/0x8e0
[   99.423922][ T8997]  netlink_sendmsg+0x805/0xb30
[   99.423932][ T8997]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.423941][ T8997]  ? aa_sock_msg_perm+0x94/0x160
[   99.423948][ T8997]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   99.423956][ T8997]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.423965][ T8997]  __sock_sendmsg+0x21c/0x270
[   99.423974][ T8997]  ____sys_sendmsg+0x505/0x830
[   99.423984][ T8997]  ? __pfx_____sys_sendmsg+0x10/0x10
[   99.423995][ T8997]  ? import_iovec+0x74/0xa0
[   99.424005][ T8997]  ___sys_sendmsg+0x21f/0x2a0
[   99.424015][ T8997]  ? __pfx____sys_sendmsg+0x10/0x10
[   99.424030][ T8997]  ? __fget_files+0x2a/0x420
[   99.424037][ T8997]  ? __fget_files+0x3a0/0x420
[   99.424044][ T8997]  __x64_sys_sendmsg+0x19b/0x260
[   99.424054][ T8997]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   99.424066][ T8997]  ? rcu_is_watching+0x15/0xb0
[   99.424074][ T8997]  ? do_syscall_64+0xbe/0x3b0
[   99.424083][ T8997]  do_syscall_64+0xfa/0x3b0
[   99.424090][ T8997]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.424128][ T8997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.424136][ T8997]  ? exc_page_fault+0x9f/0xf0
[   99.424143][ T8997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.424151][ T8997] RIP: 0033:0x7f21a2f8e9a9
[   99.424160][ T8997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.424166][ T8997] RSP: 002b:00007f21a3daf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   99.424175][ T8997] RAX: ffffffffffffffda RBX: 00007f21a31b5fa0 RCX: 00007f21a2f8e9a9
[   99.424180][ T8997] RDX: 0000000006000000 RSI: 0000200000000000 RDI: 0000000000000003
[   99.424186][ T8997] RBP: 00007f21a3010d69 R08: 0000000000000000 R09: 0000000000000000
[   99.424190][ T8997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.424195][ T8997] R13: 0000000000000000 R14: 00007f21a31b5fa0 R15: 00007ffdd81fb3a8
[   99.424202][ T8997]  </TASK>

VM DIAGNOSIS:
18:03:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000009726 RDI=0000000000009727 RBP=00000000000003f8 RSP=ffffc9000265dfb0
R8 =ffff8881088e0237 R9 =1ffff1102111c046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18b0 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f21a3daf6c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f21a3daefc8 CR3=0000000038602000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133a4fe ffffffff8133a4fe
XMM02=ffffffff8165faba ffffffff8133a4fe XMM03=ffffffff8133a4fe ffffffff8133a4fe
XMM04=ffffffff894a6021 ffffffff894a5cdb XMM05=ffffffff894a5b7d ffffffff84beefcf
XMM06=ffffffff84beef6e ffffffff823b6214 XMM07=ffffffff823b60ad ffffffff823b574c
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f3f15611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000000f6 RBX=0000000000000200 RCX=000000000000083f RDX=0000000000000000
RSI=00000000000000f6 RDI=000000000000083f RBP=ffffc9000357f5a0 RSP=ffffc9000357f4c8
R8 =ffffc9000357f527 R9 =1ffff920006afea4 R10=dffffc0000000000 R11=fffff520006afea5
R12=ffff888136631401 R13=0000000000000000 R14=0000000000000000 R15=ffff8881366314f0
RIP=ffffffff81714f69 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f32ea48ec80 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=000000003998a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000ff0000ff00 XMM05=696765002f2d0061 642e7269662f302e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=000000ff0000ff00 0000000000000000 XMM09=756765722f657261 776d7269662f302e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
