last executing test programs:

912.651114ms ago: executing program 2 (id=481):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140)=0x5, 0x4)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

608.17135ms ago: executing program 1 (id=498):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

561.484318ms ago: executing program 1 (id=500):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0)

561.039659ms ago: executing program 1 (id=502):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

491.733809ms ago: executing program 1 (id=504):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x25, 0x0, &(0x7f0000000900))

491.272156ms ago: executing program 1 (id=507):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000001000010402400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000009800128009000100766c616e00000000880002800c0002000e0000000c0000000600050088a8000040000380200001007b4b0000000000000c0001e004000000090000000c000100bf000000000400000c00010002000000ff0100000c0001000e000000000001000400048004000480280004800c00010007000000040000000c00010008000000040000000c000100060000000080000014000300766c616e30"], 0xcc}}, 0x0)

431.612088ms ago: executing program 1 (id=508):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x17, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250af7a19d98c880e1b30400000000001800000000000000000000000000003db0519c2ae7179490"], &(0x7f0000000000)='GPL\x00'}, 0x80)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r1 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b80)={0x59c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1b}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7ae, 0xc, 0x6, 0x7fff}, {0x9, 0xff, 0x2, 0x6}, {0x2, 0x8, 0x5, 0x7ff}, {0x1, 0x52, 0x2, 0x2}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x3, 0x2, 0x2}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x101, 0x80, 0x40, 0x6}, {0x5, 0x6, 0x9, 0xffffffff}, {0x7, 0x9, 0x5, 0x5}, {0x400, 0xb, 0xb8}, {0xffff, 0x6, 0x5, 0x5}, {0x40, 0x8, 0x2, 0x1ff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x59c}}, 0x8800)
syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_int(r3, &(0x7f0000000080)=0x8, 0x12)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7, 0x0, 0xd}, 0x18)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, r8, 0x1, 0x1, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}}, 0x0)

369.010811ms ago: executing program 0 (id=513):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x8000)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0)

193.109648ms ago: executing program 0 (id=514):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r0, 0x0)

51.002018ms ago: executing program 2 (id=515):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x230, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000)

50.733567ms ago: executing program 0 (id=516):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x4, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

50.471158ms ago: executing program 2 (id=517):
syz_emit_ethernet(0x2e, &(0x7f0000000380)={@link_local, @dev, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @empty, @link_local, @private=0xa010101}}}}, 0x0)

50.380182ms ago: executing program 0 (id=518):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x3000d041)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

50.289812ms ago: executing program 2 (id=519):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0xfffffffe}, 0x50)

702.901µs ago: executing program 0 (id=520):
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)

620.274µs ago: executing program 2 (id=521):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r0, 0x29, 0xcf, 0xffffffffffffffff, &(0x7f0000000040))

309.51µs ago: executing program 0 (id=522):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockname(r1, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000100010012000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a01"], 0x8c}}, 0x0)
listen(r0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x8}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r9, &(0x7f0000000080)={0x11, 0x4, r10, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14)
sendmsg$nl_route_sched(r11, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc0, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x101}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0xc090)
shutdown(r0, 0x0)

0s ago: executing program 2 (id=523):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40084}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000007dc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x680c}], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:34935' (ED25519) to the list of known hosts.
syzkaller login: [   40.993626][ T5759] cgroup: Unknown subsys name 'net'
[   41.069287][ T5759] cgroup: Unknown subsys name 'cpuset'
[   41.074225][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.332889][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.288687][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.292061][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.294895][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.297631][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.300788][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.323866][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.328354][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.331344][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.334600][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.337153][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.346177][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.348846][ T5219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.351345][ T5219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.356929][ T5219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.360163][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.594151][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   45.606867][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   45.631831][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   45.745529][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.748501][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.751053][ T5830] bridge_slave_0: entered allmulticast mode
[   45.754300][ T5830] bridge_slave_0: entered promiscuous mode
[   45.757877][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.760826][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.763300][ T5826] bridge_slave_0: entered allmulticast mode
[   45.765975][ T5826] bridge_slave_0: entered promiscuous mode
[   45.769194][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.771461][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.774149][ T5826] bridge_slave_1: entered allmulticast mode
[   45.776889][ T5826] bridge_slave_1: entered promiscuous mode
[   45.787651][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.790015][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.792362][ T5830] bridge_slave_1: entered allmulticast mode
[   45.796329][ T5830] bridge_slave_1: entered promiscuous mode
[   45.822069][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.824625][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.826968][ T5835] bridge_slave_0: entered allmulticast mode
[   45.829585][ T5835] bridge_slave_0: entered promiscuous mode
[   45.841613][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.844771][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.847026][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.849272][ T5835] bridge_slave_1: entered allmulticast mode
[   45.851942][ T5835] bridge_slave_1: entered promiscuous mode
[   45.869015][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.873669][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.887739][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.899383][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.905266][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.940397][ T5826] team0: Port device team_slave_0 added
[   45.955325][ T5835] team0: Port device team_slave_0 added
[   45.958547][ T5826] team0: Port device team_slave_1 added
[   45.962036][ T5830] team0: Port device team_slave_0 added
[   45.966919][ T5830] team0: Port device team_slave_1 added
[   45.969772][ T5835] team0: Port device team_slave_1 added
[   46.009379][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.011955][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.020853][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.025624][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.027770][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.036143][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.046332][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.048672][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.057266][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.065567][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.067774][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.076206][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.080351][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.082851][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.091746][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.104002][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.106208][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.114763][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.134642][ T5830] hsr_slave_0: entered promiscuous mode
[   46.136906][ T5830] hsr_slave_1: entered promiscuous mode
[   46.171382][ T5826] hsr_slave_0: entered promiscuous mode
[   46.175039][ T5826] hsr_slave_1: entered promiscuous mode
[   46.177113][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.179716][ T5826] Cannot create hsr debugfs directory
[   46.191167][ T5835] hsr_slave_0: entered promiscuous mode
[   46.193575][ T5835] hsr_slave_1: entered promiscuous mode
[   46.195737][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.198412][ T5835] Cannot create hsr debugfs directory
[   46.381580][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.387265][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.391580][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.400479][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.427752][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.439423][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.444623][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.457550][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.463056][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.465685][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.469288][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.471966][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.497575][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.508990][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.511976][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.526857][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.530929][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.538412][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.579875][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.605832][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   46.620157][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.622446][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.632959][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.635389][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.640889][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.672478][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   46.688747][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.690952][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.705916][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.708159][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.720486][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.751243][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   46.769111][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.771362][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.785586][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.787842][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.807997][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.858267][ T5830] veth0_vlan: entered promiscuous mode
[   46.865170][ T5830] veth1_vlan: entered promiscuous mode
[   46.882140][ T5830] veth0_macvtap: entered promiscuous mode
[   46.895219][ T5830] veth1_macvtap: entered promiscuous mode
[   46.912330][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.922734][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.937026][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.942111][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.946523][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.949206][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.951896][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.997081][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.005165][ T5835] veth0_vlan: entered promiscuous mode
[   47.015235][ T5835] veth1_vlan: entered promiscuous mode
[   47.035885][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.038448][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.076369][ T5826] veth0_vlan: entered promiscuous mode
[   47.081373][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.084739][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.085737][ T5835] veth0_macvtap: entered promiscuous mode
[   47.092950][ T5835] veth1_macvtap: entered promiscuous mode
[   47.098517][ T5826] veth1_vlan: entered promiscuous mode
[   47.108668][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.120593][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.126945][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.129837][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.132537][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.138955][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.150160][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.167718][ T5826] veth0_macvtap: entered promiscuous mode
[   47.178394][ T5826] veth1_macvtap: entered promiscuous mode
[   47.223078][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.238699][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.242449][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.246034][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.246178][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.249163][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.256092][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.258937][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.290297][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.293738][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.318755][ T5895] sctp: [Deprecated]: syz.0.1 (pid 5895) Use of struct sctp_assoc_value in delayed_ack socket option.
[   47.318755][ T5895] Use struct sctp_sack_info instead
[   47.328325][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.330891][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.369890][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.372861][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.375895][ T5829] Bluetooth: hci2: command tx timeout
[   47.375925][ T5219] Bluetooth: hci0: command tx timeout
[   47.384178][ T5219] Bluetooth: hci1: command tx timeout
[   47.552895][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'.
[   47.560886][ T5915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9'.
[   47.705656][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'.
[   47.738542][   T24] IPVS: starting estimator thread 0...
[   47.789050][ T5937] bridge_slave_0: invalid flags given to default FDB implementation
[   47.830668][ T5940] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[   47.843457][ T5935] IPVS: using max 80 ests per chain, 192000 per kthread
[   47.918204][ T5946] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   47.925123][ T5946] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   48.074652][ T5955] syz_tun: entered allmulticast mode
[   48.078024][ T5954] syz_tun: left allmulticast mode
[   48.165092][ T5963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.32'.
[   48.168216][ T5963] Zero length message leads to an empty skb
[   48.278673][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'.
[   48.293995][ T5972] hsr_slave_0: left promiscuous mode
[   48.297146][ T5972] hsr_slave_1: left promiscuous mode
[   48.377805][ T5975] syz.1.36 (5975) used greatest stack depth: 19848 bytes left
[   48.529459][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'.
[   48.585904][ T5993] xt_CT: You must specify a L4 protocol and not use inversions on it
[   49.359919][ T6031] veth0: entered promiscuous mode
[   49.365343][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'.
[   49.453435][ T5219] Bluetooth: hci1: command tx timeout
[   49.457571][ T5219] Bluetooth: hci0: command tx timeout
[   49.459261][ T5219] Bluetooth: hci2: command tx timeout
[   49.929321][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.942812][ T6050] xt_ecn: cannot match TCP bits for non-tcp packets
[   50.111788][ T6064] warning: `syz.0.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   50.181932][ T6069] sch_fq: defrate 0 ignored.
[   50.408934][ T6083] netlink: 144 bytes leftover after parsing attributes in process `syz.0.85'.
[   50.487500][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'.
[   50.915586][ T6111] netlink: 'syz.2.99': attribute type 11 has an invalid length.
[   50.956954][ T6115] netlink: 36 bytes leftover after parsing attributes in process `syz.0.101'.
[   51.175991][ T6135] netlink: 'syz.1.111': attribute type 1 has an invalid length.
[   51.291595][ T6147] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[   51.361030][ T6156] netlink: 'syz.1.117': attribute type 9 has an invalid length.
[   51.368163][ T6156] hsr0: entered promiscuous mode
[   51.369961][ T6156] macvlan2: entered promiscuous mode
[   51.372152][ T6156] macvlan2: entered allmulticast mode
[   51.376965][ T6156] hsr0: entered allmulticast mode
[   51.378623][ T6156] hsr_slave_0: entered allmulticast mode
[   51.380423][ T6156] hsr_slave_1: entered allmulticast mode
[   51.474895][ T6167] netlink: 'syz.2.126': attribute type 1 has an invalid length.
[   51.484210][ T6167] netlink: 'syz.2.126': attribute type 1 has an invalid length.
[   51.536557][ T5829] Bluetooth: hci2: command tx timeout
[   51.538400][ T5829] Bluetooth: hci0: command tx timeout
[   51.540097][ T5829] Bluetooth: hci1: command tx timeout
[   51.641773][ T6185] netlink: 'syz.0.135': attribute type 1 has an invalid length.
[   51.691336][ T6185] bond1: (slave gretap1): making interface the new active one
[   51.698391][ T6185] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   51.738291][ T6199] netlink: 'syz.0.141': attribute type 1 has an invalid length.
[   51.838583][ T6212] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   51.847189][ T6212] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   51.886501][ T6217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   51.965886][ T6228] vlan0: entered promiscuous mode
[   52.950070][ T6298] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.981199][ T6300] __nla_validate_parse: 6 callbacks suppressed
[   52.981209][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'.
[   53.215233][ T6326] geneve1: entered promiscuous mode
[   53.217012][ T6326] geneve1: entered allmulticast mode
[   53.378709][ T6344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.197'.
[   53.382914][ T6344] netlink: 84 bytes leftover after parsing attributes in process `syz.2.197'.
[   53.454246][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'.
[   53.489475][ T6350] bridge_slave_1: left allmulticast mode
[   53.491341][ T6350] bridge_slave_1: left promiscuous mode
[   53.493864][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.499652][ T6350] bridge_slave_0: left allmulticast mode
[   53.501467][ T6350] bridge_slave_0: left promiscuous mode
[   53.504944][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.543444][ T6360] syz.0.200 uses obsolete (PF_INET,SOCK_PACKET)
[   53.613365][ T5219] Bluetooth: hci1: command tx timeout
[   53.615692][ T5829] Bluetooth: hci0: command tx timeout
[   53.616017][ T5832] Bluetooth: hci2: command tx timeout
[   53.729872][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'.
[   53.780916][ T6380] syzkaller0: mtu greater than device maximum
[   54.199929][ T6434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.229'.
[   54.338794][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[   54.370576][ T6452] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   54.485512][ T6464] wg2: entered promiscuous mode
[   54.490949][ T6464] wg2: entered allmulticast mode
[   54.578474][ T6479] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[   55.400249][ T6614] xt_ecn: cannot match TCP bits for non-tcp packets
[   55.515467][ T6627] netlink: 60 bytes leftover after parsing attributes in process `syz.2.270'.
[   55.518404][ T6627] netlink: 60 bytes leftover after parsing attributes in process `syz.2.270'.
[   56.716311][ T6723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.729592][ T6725] bridge_slave_0: left allmulticast mode
[   56.731721][ T6725] bridge_slave_0: left promiscuous mode
[   56.733999][ T6725] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.738511][ T6725] bridge_slave_1: left allmulticast mode
[   56.740421][ T6725] bridge_slave_1: left promiscuous mode
[   56.742376][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.749642][ T6725] bond0: (slave bond_slave_0): Releasing backup interface
[   56.758251][ T6725] bond0: (slave bond_slave_1): Releasing backup interface
[   56.771002][ T6725] team0: Port device team_slave_0 removed
[   56.778907][ T6725] team0: Port device team_slave_1 removed
[   56.781167][ T6725] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.784484][ T6725] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.787996][ T6725] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.790387][ T6725] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.798132][ T6725] bond1: (slave gretap1): Releasing active interface
[   57.761940][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.344'.
[   58.087759][ T6819] netlink: 'syz.2.363': attribute type 2 has an invalid length.
[   58.090374][ T6819] __nla_validate_parse: 5 callbacks suppressed
[   58.090381][ T6819] netlink: 119 bytes leftover after parsing attributes in process `syz.2.363'.
[   58.104186][ T6817] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[   58.119816][ T6817] bond1: entered promiscuous mode
[   58.121671][ T6817] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.134070][ T6817] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.136466][ T6817] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   58.139625][ T6817] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   58.145911][ T6817] bond1: (slave vcan1): making interface the new active one
[   58.148279][ T6817] vcan1: entered promiscuous mode
[   58.150610][ T6817] bond1: (slave vcan1): Enslaving as an active interface with an up link
[   58.270013][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'.
[   58.451129][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'.
[   58.477982][ T6860] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[   58.551379][ T6866] dvmrp0: entered allmulticast mode
[   58.579869][ T6868] netlink: 'syz.1.385': attribute type 1 has an invalid length.
[   58.712820][ T6876] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.388'.
[   58.745060][ T6880] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   58.851091][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'.
[   59.055820][ T6913] veth0: entered promiscuous mode
[   59.065551][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'.
[   59.372216][ T6949] pim6reg: entered allmulticast mode
[   59.432712][ T6953] xt_CT: No such helper "snmp"
[   59.497116][ T6964] netlink: 148 bytes leftover after parsing attributes in process `syz.0.419'.
[   59.502508][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'.
[   59.512590][ T6962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.420'.
[   59.534716][ T6966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.550947][ T6968] netlink: 'syz.2.422': attribute type 1 has an invalid length.
[   59.560440][ T6968] netlink: 144 bytes leftover after parsing attributes in process `syz.2.422'.
[   59.593301][ T6973] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   59.620605][ T6976] xt_socket: unknown flags 0xfc
[   59.626182][ T6978] netlink: 'syz.0.427': attribute type 1 has an invalid length.
[   59.678779][ T6986] netlink: 'syz.2.431': attribute type 84 has an invalid length.
[   59.695372][ T6988] bond0: entered promiscuous mode
[   59.697756][ T6988] macvlan1: entered promiscuous mode
[   59.700474][ T6988] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   59.704356][ T6988] hsr0: entered promiscuous mode
[   60.288419][ T7063] bridge0: port 1(erspan0) entered blocking state
[   60.290798][ T7063] bridge0: port 1(erspan0) entered disabled state
[   60.295007][ T7063] erspan0: entered allmulticast mode
[   60.304807][ T7063] erspan0: entered promiscuous mode
[   60.307110][ T7063] bridge0: port 1(erspan0) entered blocking state
[   60.309261][ T7063] bridge0: port 1(erspan0) entered forwarding state
[   60.312447][ T7069] netlink: 'syz.1.469': attribute type 2 has an invalid length.
[   60.326296][ T7063] erspan0: left allmulticast mode
[   60.327891][ T7063] erspan0: left promiscuous mode
[   60.329520][ T7063] bridge0: port 1(erspan0) entered disabled state
[   60.340307][ T7071] tipc: Started in network mode
[   60.341941][ T7071] tipc: Node identity 4, cluster identity 4711
[   60.344048][ T7071] tipc: Node number set to 4
[   60.532269][ T7093] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   60.535167][ T7093] openvswitch: netlink: Message has 1 unknown bytes.
[   61.012727][ T7147] vlan0: entered promiscuous mode
[   61.133426][ T7161] netlink: 'syz.0.513': attribute type 1 has an invalid length.
[   61.179767][ T7161] 8021q: adding VLAN 0 to HW filter on device bond2
[   61.194393][ T7164] 8021q: adding VLAN 0 to HW filter on device bond2
[   61.196736][ T7164] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   61.200704][ T7164] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   61.244714][ T7161] veth3: entered promiscuous mode
[   61.248359][ T7161] bond2: (slave veth3): Enslaving as an active interface with a down link
[   61.254716][ T7161] 8021q: adding VLAN 0 to HW filter on device bond2
[   61.470749][ T7180] tipc: Started in network mode
[   61.472484][ T7180] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[   61.476988][ T7180] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   61.516441][ T7186] netlink: 'syz.0.522': attribute type 10 has an invalid length.
[   61.529930][ T7186] team0: Port device dummy0 added
[   61.533451][ T7186] netlink: 'syz.0.522': attribute type 10 has an invalid length.
[   61.537231][ T7186] 
[   61.538030][ T7186] ======================================================
[   61.540218][ T7186] WARNING: possible circular locking dependency detected
[   61.542416][ T7186] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   61.545665][ T7186] ------------------------------------------------------
[   61.547927][ T7186] syz.0.522/7186 is trying to acquire lock:
[   61.549961][ T7186] ffff8880396e0e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[   61.553114][ T7186] 
[   61.553114][ T7186] but task is already holding lock:
[   61.555514][ T7186] ffff88801bb34d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   61.558566][ T7186] 
[   61.558566][ T7186] which lock already depends on the new lock.
[   61.558566][ T7186] 
[   61.561780][ T7186] 
[   61.561780][ T7186] the existing dependency chain (in reverse order) is:
[   61.564584][ T7186] 
[   61.564584][ T7186] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   61.567250][ T7186]        lock_acquire+0x120/0x360
[   61.568903][ T7186]        __mutex_lock+0x182/0xe80
[   61.570510][ T7186]        dev_set_mtu+0x10e/0x260
[   61.572095][ T7186]        team_add_slave+0x8b8/0x2840
[   61.573763][ T7186]        do_set_master+0x533/0x6d0
[   61.575410][ T7186]        do_setlink+0xcf0/0x41c0
[   61.576956][ T7186]        rtnl_newlink+0x160b/0x1c70
[   61.578612][ T7186]        rtnetlink_rcv_msg+0x7cf/0xb70
[   61.580432][ T7186]        netlink_rcv_skb+0x208/0x470
[   61.582191][ T7186]        netlink_unicast+0x75b/0x8d0
[   61.583963][ T7186]        netlink_sendmsg+0x805/0xb30
[   61.585654][ T7186]        __sock_sendmsg+0x21c/0x270
[   61.587378][ T7186]        ____sys_sendmsg+0x505/0x830
[   61.589115][ T7186]        ___sys_sendmsg+0x21f/0x2a0
[   61.590828][ T7186]        __x64_sys_sendmsg+0x19b/0x260
[   61.592539][ T7186]        do_syscall_64+0xfa/0x3b0
[   61.594165][ T7186]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.596298][ T7186] 
[   61.596298][ T7186] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[   61.598954][ T7186]        validate_chain+0xb9b/0x2140
[   61.600696][ T7186]        __lock_acquire+0xab9/0xd20
[   61.602340][ T7186]        lock_acquire+0x120/0x360
[   61.603907][ T7186]        __mutex_lock+0x182/0xe80
[   61.605516][ T7186]        team_device_event+0x182/0xa20
[   61.607251][ T7186]        notifier_call_chain+0x1b6/0x3e0
[   61.609083][ T7186]        __dev_notify_flags+0x18d/0x2e0
[   61.610906][ T7186]        netif_change_flags+0xe8/0x1a0
[   61.612700][ T7186]        do_setlink+0xc55/0x41c0
[   61.614272][ T7186]        rtnl_newlink+0x160b/0x1c70
[   61.615926][ T7186]        rtnetlink_rcv_msg+0x7cf/0xb70
[   61.617654][ T7186]        netlink_rcv_skb+0x208/0x470
[   61.619319][ T7186]        netlink_unicast+0x75b/0x8d0
[   61.620975][ T7186]        netlink_sendmsg+0x805/0xb30
[   61.622664][ T7186]        __sock_sendmsg+0x21c/0x270
[   61.624314][ T7186]        ____sys_sendmsg+0x505/0x830
[   61.626015][ T7186]        ___sys_sendmsg+0x21f/0x2a0
[   61.627728][ T7186]        __x64_sys_sendmsg+0x19b/0x260
[   61.629526][ T7186]        do_syscall_64+0xfa/0x3b0
[   61.631180][ T7186]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.633179][ T7186] 
[   61.633179][ T7186] other info that might help us debug this:
[   61.633179][ T7186] 
[   61.636499][ T7186]  Possible unsafe locking scenario:
[   61.636499][ T7186] 
[   61.638969][ T7186]        CPU0                    CPU1
[   61.640734][ T7186]        ----                    ----
[   61.642445][ T7186]   lock(&dev_instance_lock_key#3);
[   61.644097][ T7186]                                lock(team->team_lock_key#3);
[   61.646458][ T7186]                                lock(&dev_instance_lock_key#3);
[   61.648892][ T7186]   lock(team->team_lock_key#3);
[   61.650504][ T7186] 
[   61.650504][ T7186]  *** DEADLOCK ***
[   61.650504][ T7186] 
[   61.653045][ T7186] 2 locks held by syz.0.522/7186:
[   61.654625][ T7186]  #0: ffffffff8f51c948 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[   61.657417][ T7186]  #1: ffff88801bb34d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   61.660566][ T7186] 
[   61.660566][ T7186] stack backtrace:
[   61.662430][ T7186] CPU: 0 UID: 0 PID: 7186 Comm: syz.0.522 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   61.662440][ T7186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.662446][ T7186] Call Trace:
[   61.662450][ T7186]  <TASK>
[   61.662455][ T7186]  dump_stack_lvl+0x189/0x250
[   61.662468][ T7186]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.662477][ T7186]  ? __pfx__printk+0x10/0x10
[   61.662489][ T7186]  ? print_lock_name+0xde/0x100
[   61.662499][ T7186]  print_circular_bug+0x2ee/0x310
[   61.662512][ T7186]  check_noncircular+0x134/0x160
[   61.662522][ T7186]  validate_chain+0xb9b/0x2140
[   61.662533][ T7186]  ? __lock_acquire+0xab9/0xd20
[   61.662544][ T7186]  __lock_acquire+0xab9/0xd20
[   61.662552][ T7186]  ? team_device_event+0x182/0xa20
[   61.662563][ T7186]  lock_acquire+0x120/0x360
[   61.662569][ T7186]  ? team_device_event+0x182/0xa20
[   61.662579][ T7186]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   61.662591][ T7186]  __mutex_lock+0x182/0xe80
[   61.662598][ T7186]  ? team_device_event+0x182/0xa20
[   61.662608][ T7186]  ? __try_to_del_timer_sync+0x34a/0x3a0
[   61.662619][ T7186]  ? team_device_event+0x182/0xa20
[   61.662628][ T7186]  ? __pfx___mutex_lock+0x10/0x10
[   61.662634][ T7186]  ? __timer_delete_sync+0x218/0x2d0
[   61.662646][ T7186]  team_device_event+0x182/0xa20
[   61.662657][ T7186]  notifier_call_chain+0x1b6/0x3e0
[   61.662668][ T7186]  __dev_notify_flags+0x18d/0x2e0
[   61.662677][ T7186]  ? __pfx___dev_notify_flags+0x10/0x10
[   61.662685][ T7186]  ? __dev_change_flags+0x4cc/0x6d0
[   61.662695][ T7186]  ? __pfx___dev_change_flags+0x10/0x10
[   61.662703][ T7186]  ? __pfx_console_unlock+0x10/0x10
[   61.662713][ T7186]  netif_change_flags+0xe8/0x1a0
[   61.662723][ T7186]  do_setlink+0xc55/0x41c0
[   61.662734][ T7186]  ? __pfx_do_setlink+0x10/0x10
[   61.662741][ T7186]  ? bpf_trace_run2+0x322/0x4b0
[   61.662753][ T7186]  ? bpf_trace_run2+0x186/0x4b0
[   61.662762][ T7186]  ? __pfx_bpf_trace_run2+0x10/0x10
[   61.662772][ T7186]  ? __bpf_trace_contention_end+0xcd/0x130
[   61.662782][ T7186]  ? __bpf_trace_contention_end+0xdc/0x130
[   61.662790][ T7186]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[   61.662799][ T7186]  ? __mutex_trylock_common+0x153/0x260
[   61.662808][ T7186]  ? rcu_is_watching+0x15/0xb0
[   61.662817][ T7186]  ? trace_contention_end+0x39/0x120
[   61.662825][ T7186]  ? __mutex_lock+0x330/0xe80
[   61.662832][ T7186]  ? __pfx_aa_get_newest_label+0x10/0x10
[   61.662843][ T7186]  ? rtnl_newlink+0x8db/0x1c70
[   61.662850][ T7186]  ? rcu_is_watching+0x15/0xb0
[   61.662858][ T7186]  ? __pfx___mutex_lock+0x10/0x10
[   61.662866][ T7186]  ? ns_capable+0x8a/0xf0
[   61.662874][ T7186]  ? rtnl_link_get_net_capable+0x16a/0x350
[   61.662883][ T7186]  rtnl_newlink+0x160b/0x1c70
[   61.662891][ T7186]  ? netlink_sendmsg+0x805/0xb30
[   61.662901][ T7186]  ? __pfx_rtnl_newlink+0x10/0x10
[   61.662912][ T7186]  ? kasan_quarantine_put+0xdd/0x220
[   61.662920][ T7186]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.662927][ T7186]  ? nlmon_xmit+0xb0/0x100
[   61.662935][ T7186]  ? kmem_cache_free+0x18f/0x400
[   61.662945][ T7186]  ? __local_bh_enable_ip+0x12d/0x1c0
[   61.662954][ T7186]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.662960][ T7186]  ? __local_bh_enable_ip+0x12d/0x1c0
[   61.662967][ T7186]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   61.662975][ T7186]  ? __dev_queue_xmit+0x27e/0x3a70
[   61.662987][ T7186]  ? __lock_acquire+0xab9/0xd20
[   61.662997][ T7186]  ? __pfx_rtnl_newlink+0x10/0x10
[   61.663004][ T7186]  rtnetlink_rcv_msg+0x7cf/0xb70
[   61.663012][ T7186]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   61.663019][ T7186]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   61.663026][ T7186]  ? ref_tracker_free+0x63a/0x7d0
[   61.663032][ T7186]  ? __copy_skb_header+0xa7/0x550
[   61.663049][ T7186]  ? __pfx_ref_tracker_free+0x10/0x10
[   61.663056][ T7186]  ? __skb_clone+0x63/0x7a0
[   61.663066][ T7186]  netlink_rcv_skb+0x208/0x470
[   61.663075][ T7186]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   61.663083][ T7186]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   61.663094][ T7186]  ? netlink_deliver_tap+0x2e/0x1b0
[   61.663104][ T7186]  ? netlink_deliver_tap+0x2e/0x1b0
[   61.663113][ T7186]  netlink_unicast+0x75b/0x8d0
[   61.663123][ T7186]  netlink_sendmsg+0x805/0xb30
[   61.663134][ T7186]  ? __pfx_netlink_sendmsg+0x10/0x10
[   61.663143][ T7186]  ? aa_sock_msg_perm+0x94/0x160
[   61.663154][ T7186]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   61.663162][ T7186]  ? __pfx_netlink_sendmsg+0x10/0x10
[   61.663172][ T7186]  __sock_sendmsg+0x21c/0x270
[   61.663180][ T7186]  ____sys_sendmsg+0x505/0x830
[   61.663190][ T7186]  ? __pfx_____sys_sendmsg+0x10/0x10
[   61.663227][ T7186]  ? import_iovec+0x74/0xa0
[   61.663239][ T7186]  ___sys_sendmsg+0x21f/0x2a0
[   61.663250][ T7186]  ? __pfx____sys_sendmsg+0x10/0x10
[   61.663265][ T7186]  ? __fget_files+0x2a/0x420
[   61.663276][ T7186]  ? __fget_files+0x3a0/0x420
[   61.663288][ T7186]  __x64_sys_sendmsg+0x19b/0x260
[   61.663297][ T7186]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   61.663308][ T7186]  ? rcu_is_watching+0x15/0xb0
[   61.663319][ T7186]  ? do_syscall_64+0xbe/0x3b0
[   61.663328][ T7186]  do_syscall_64+0xfa/0x3b0
[   61.663335][ T7186]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.663342][ T7186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.663350][ T7186]  ? exc_page_fault+0x9f/0xf0
[   61.663360][ T7186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.663368][ T7186] RIP: 0033:0x7fd2e258e929
[   61.663376][ T7186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.663383][ T7186] RSP: 002b:00007fd2e335e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   61.663391][ T7186] RAX: ffffffffffffffda RBX: 00007fd2e27b5fa0 RCX: 00007fd2e258e929
[   61.663396][ T7186] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008
[   61.663401][ T7186] RBP: 00007fd2e2610b39 R08: 0000000000000000 R09: 0000000000000000
[   61.663405][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   61.663410][ T7186] R13: 0000000000000000 R14: 00007fd2e27b5fa0 R15: 00007ffe033033f8
[   61.663418][ T7186]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   61.857138][ T7186] team0: Port device dummy0 removed
[   61.952993][ T7186] dummy0: entered promiscuous mode
[   61.955329][ T7186] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   62.091768][ T5840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.146015][ T5840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.286947][ T5840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.315971][ T5840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.420309][ T5840] dvmrp0 (unregistering): left allmulticast mode
[   62.435728][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.440408][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.445124][ T5840] bond0 (unregistering): Released all slaves
[   62.484489][ T5840] bond1 (unregistering): (slave vcan1): Releasing backup interface
[   62.487088][ T5840] vcan1: left promiscuous mode
[   62.489083][ T5840] bond1 (unregistering): Released all slaves
[   62.532597][ T5840] tipc: Left network mode
[   62.629085][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.633179][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.635857][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.638219][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.642056][ T5840] hsr0: left allmulticast mode
[   62.643915][ T5840] veth1_macvtap: left promiscuous mode
[   62.645796][ T5840] veth0_macvtap: left promiscuous mode
[   62.647564][ T5840] veth1_vlan: left promiscuous mode
[   62.725084][ T5840] team0 (unregistering): Port device team_slave_1 removed
[   62.733853][ T5840] team0 (unregistering): Port device team_slave_0 removed
[   62.977144][ T5840] IPVS: stop unused estimator thread 0...
[   70.814796][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.817126][ T1362] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
21:51:11  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002dac RDI=0000000000002dad RBP=00000000000003f8 RSP=ffffc90008035f10
R8 =ffff888108c38237 R9 =1ffff11021187046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78e8 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd2e335e6c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2f7640 CR3=000000003b016000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe6f5411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=85049ccd42130f00 RBX=ffffffff81975d58 RCX=85049ccd42130f00 RDX=0000000000000001
RSI=ffffffff8be28fa0 RDI=ffffffff81975d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020258000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557ee4c808 CR3=000000010ac56000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f168fa11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
