last executing test programs:

470.202431ms ago: executing program 0 (id=189):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000001700))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0)
sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
accept4(r5, 0x0, 0x0, 0x0)
connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

469.70171ms ago: executing program 2 (id=193):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, @local, 0x2000003, 0x0, 0x7d, 0xb00, 0x0, 0x2000000})

408.997761ms ago: executing program 1 (id=194):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000)

408.795158ms ago: executing program 2 (id=195):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x4}]}]}, 0x13c}}, 0x0)

408.672268ms ago: executing program 2 (id=196):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x8, 0x0, 0x8000)
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="b8261912ddc34d7e", 0x8}, {0x0}, {0x0}, {0x0, 0x57}, {&(0x7f00000000c0)="55242684a208746812522e1bc4d3c93fe32ccf8cc373a4cec308148b4b72e5948b65c94c93a287bbf98d08721ae656d7beee2707ae0a0f048d86612522fc180f874e53266e6232fbe8cb1b37c98293912ecea8c841fdd10f2a9eb095107b1d9edaedb15d3edb56caeba84cc9a5e2290381cd39b4fa757cc8cec34346e7004ff96846b3876001cb2e65cf44c845073423230886cd0613964596c4b001790e70fa82033bb2f58087986513f47ed7889d45e95f7b16f46fb1b5e383a4208fe40b5e56a2f61221b0a309bbfa35f0bc68b38d0ee06c15bcdafcb84e06b3cab16acee7a3a2b45b977d8b169dc8b0e096802f66644e5f"}, {&(0x7f0000000000)="ce39bddc48194a2bf8184ac0"}], 0x4}}, {{&(0x7f0000003600)={0xa, 0x4e21, 0x3, @private2, 0x8}, 0x1c, 0x0}}], 0x2, 0x20088880)

319.619632ms ago: executing program 0 (id=197):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0x2004}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

319.443627ms ago: executing program 1 (id=198):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x70200, 0x440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0)

319.290729ms ago: executing program 0 (id=199):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}}, 0x0)

229.123357ms ago: executing program 0 (id=200):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002380)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd1d}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

228.88293ms ago: executing program 1 (id=201):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x5, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0)

169.057284ms ago: executing program 2 (id=202):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="bc", 0x1)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4)

168.811341ms ago: executing program 1 (id=203):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000064000003850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94)

168.490239ms ago: executing program 0 (id=204):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d)
sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d", 0x6f}, {&(0x7f0000002300)="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", 0xe50}], 0x4, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080)

168.411755ms ago: executing program 1 (id=205):
socket$inet6(0xa, 0x3, 0x2c)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x5, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xe}, {}, {0xa, 0x8}}}, 0x24}, 0x1, 0x400000000000000, 0x0, 0x4040011}, 0x0)

89.547159ms ago: executing program 2 (id=206):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

89.441434ms ago: executing program 2 (id=207):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000240))

64.529469ms ago: executing program 1 (id=208):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x4, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

0s ago: executing program 0 (id=209):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x10, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0xff, 0x0, 0xd, 0x3], 0x0, [0x7f, 0x4, 0x2, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x106], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14267' (ED25519) to the list of known hosts.
syzkaller login: [   41.781254][ T5784] cgroup: Unknown subsys name 'net'
[   41.917595][ T5784] cgroup: Unknown subsys name 'cpuset'
[   41.922464][ T5784] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.198595][ T5784] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.393389][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.397577][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.399953][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.403095][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.405861][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.408502][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.411353][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.416618][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.419356][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.422093][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.424496][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.427222][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.429933][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.432271][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.435477][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.634508][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   46.717583][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   46.722488][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   46.785961][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.788737][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.791123][ T5835] bridge_slave_0: entered allmulticast mode
[   46.793834][ T5835] bridge_slave_0: entered promiscuous mode
[   46.798437][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.800712][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.802966][ T5835] bridge_slave_1: entered allmulticast mode
[   46.805911][ T5835] bridge_slave_1: entered promiscuous mode
[   46.862899][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.872854][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.876692][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.879033][ T5826] bridge_slave_0: entered allmulticast mode
[   46.881745][ T5826] bridge_slave_0: entered promiscuous mode
[   46.884544][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.887517][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.889874][ T5830] bridge_slave_0: entered allmulticast mode
[   46.892578][ T5830] bridge_slave_0: entered promiscuous mode
[   46.896674][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.907137][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.909471][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.911923][ T5826] bridge_slave_1: entered allmulticast mode
[   46.914586][ T5826] bridge_slave_1: entered promiscuous mode
[   46.917499][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.919828][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.922077][ T5830] bridge_slave_1: entered allmulticast mode
[   46.926126][ T5830] bridge_slave_1: entered promiscuous mode
[   46.946293][ T5835] team0: Port device team_slave_0 added
[   46.969871][ T5835] team0: Port device team_slave_1 added
[   46.973482][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.978660][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.990534][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.995512][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.006351][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.008496][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.016979][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.042680][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.045186][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.053399][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.068677][ T5830] team0: Port device team_slave_0 added
[   47.072299][ T5826] team0: Port device team_slave_0 added
[   47.080104][ T5830] team0: Port device team_slave_1 added
[   47.083254][ T5826] team0: Port device team_slave_1 added
[   47.124482][ T5835] hsr_slave_0: entered promiscuous mode
[   47.126945][ T5835] hsr_slave_1: entered promiscuous mode
[   47.137570][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.139899][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.148477][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.152876][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.155541][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.164536][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.169223][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.171528][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.180964][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.189312][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.191624][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.200037][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.256350][ T5830] hsr_slave_0: entered promiscuous mode
[   47.258666][ T5830] hsr_slave_1: entered promiscuous mode
[   47.260764][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.263237][ T5830] Cannot create hsr debugfs directory
[   47.290326][ T5826] hsr_slave_0: entered promiscuous mode
[   47.292523][ T5826] hsr_slave_1: entered promiscuous mode
[   47.294945][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.297295][ T5826] Cannot create hsr debugfs directory
[   47.458857][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.474487][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.479617][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.483922][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.502148][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.507755][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.519700][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.530978][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.554074][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.560303][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.562677][ T5835] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.565617][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.567950][ T5835] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.576757][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.581226][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.585920][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.601440][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.603749][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.606189][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.608478][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.636788][  T946] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.640003][  T946] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.643750][  T946] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.646580][  T946] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.686159][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.707107][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   47.718494][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.720787][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.731187][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.739168][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.742522][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.744919][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.765249][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   47.772866][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   47.783118][  T946] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.785480][  T946] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.790287][  T946] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.792535][  T946] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.809125][  T946] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.811532][  T946] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.816040][  T946] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.818321][  T946] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.946383][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.984501][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.991197][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.998485][ T5835] veth0_vlan: entered promiscuous mode
[   48.005664][ T5835] veth1_vlan: entered promiscuous mode
[   48.042559][ T5835] veth0_macvtap: entered promiscuous mode
[   48.049752][ T5830] veth0_vlan: entered promiscuous mode
[   48.052915][ T5835] veth1_macvtap: entered promiscuous mode
[   48.057510][ T5826] veth0_vlan: entered promiscuous mode
[   48.065070][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.068127][ T5826] veth1_vlan: entered promiscuous mode
[   48.072111][ T5830] veth1_vlan: entered promiscuous mode
[   48.077888][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.081843][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.086009][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.088671][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.091339][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.135343][ T5830] veth0_macvtap: entered promiscuous mode
[   48.138942][ T5830] veth1_macvtap: entered promiscuous mode
[   48.152206][ T5826] veth0_macvtap: entered promiscuous mode
[   48.163227][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.172559][ T5826] veth1_macvtap: entered promiscuous mode
[   48.187442][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.190212][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.194228][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.196218][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.204402][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.208262][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.210995][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.213751][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.220240][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.232049][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.235402][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.238157][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.240895][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.255332][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.257813][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.313272][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.315586][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.315904][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.363089][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.370665][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.373840][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.378925][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.404300][  T946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.408544][  T946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.515844][ T5828] Bluetooth: hci1: command tx timeout
[   48.516176][   T54] Bluetooth: hci2: command tx timeout
[   48.517895][ T5828] Bluetooth: hci0: command tx timeout
[   48.866088][ T5910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6'.
[   48.869747][ T5910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'.
[   49.206964][ T5908] 8021q: adding VLAN 0 to HW filter on device bond1
[   49.212347][ T5908] bridge0: port 3(bond1) entered blocking state
[   49.215072][ T5908] bridge0: port 3(bond1) entered disabled state
[   49.217337][ T5908] bond1: entered allmulticast mode
[   49.220057][ T5908] bond1: entered promiscuous mode
[   49.222164][ T5908] bridge0: port 3(bond1) entered blocking state
[   49.224506][ T5908] bridge0: port 3(bond1) entered forwarding state
[   49.244386][ T5910] dummy0: entered promiscuous mode
[   49.247885][ T5910] team0: entered promiscuous mode
[   49.249563][ T5910] team_slave_0: entered promiscuous mode
[   49.251544][ T5910] team_slave_1: entered promiscuous mode
[   49.259862][ T5910] bridge0: port 4(hsr1) entered blocking state
[   49.262185][ T5910] bridge0: port 4(hsr1) entered disabled state
[   49.264404][ T5910] hsr1: entered allmulticast mode
[   49.266805][ T5910] dummy0: entered allmulticast mode
[   49.268814][ T5910] team0: entered allmulticast mode
[   49.270498][ T5910] team_slave_0: entered allmulticast mode
[   49.272728][ T5910] team_slave_1: entered allmulticast mode
[   49.276481][ T5910] hsr1: entered promiscuous mode
[   49.278336][ T5910] bridge0: port 4(hsr1) entered blocking state
[   49.280270][ T5910] bridge0: port 4(hsr1) entered forwarding state
[   49.352722][ T1092] bridge0: port 3(bond1) entered disabled state
[   49.522293][ T5919] tipc: Started in network mode
[   49.523991][ T5919] tipc: Node identity 7, cluster identity 4711
[   49.529122][ T5919] tipc: Node number set to 7
[   49.534388][ T5925] bridge0: port 3(erspan0) entered blocking state
[   49.540322][ T5925] bridge0: port 3(erspan0) entered disabled state
[   49.542535][ T5925] erspan0: entered allmulticast mode
[   49.553832][ T5925] erspan0: entered promiscuous mode
[   49.557902][ T5925] bridge0: port 3(erspan0) entered blocking state
[   49.560073][ T5925] bridge0: port 3(erspan0) entered forwarding state
[   49.571028][ T5925] erspan0: left allmulticast mode
[   49.572659][ T5925] erspan0: left promiscuous mode
[   49.574684][ T5925] bridge0: port 3(erspan0) entered disabled state
[   49.583504][ T5927] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   49.710436][ T5940] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[   50.071047][ T5977] netlink: 'syz.0.30': attribute type 1 has an invalid length.
[   50.079831][ T5977] netlink: 'syz.0.30': attribute type 1 has an invalid length.
[   50.082695][ T5977] netlink: 216 bytes leftover after parsing attributes in process `syz.0.30'.
[   50.107280][ T5981] netlink: 26 bytes leftover after parsing attributes in process `syz.2.33'.
[   50.112281][ T5983] tipc: Started in network mode
[   50.113877][ T5983] tipc: Node identity 1e59fe400b0b, cluster identity 4711
[   50.118897][ T5983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.121686][ T5983] syzkaller0: entered promiscuous mode
[   50.123503][ T5983] syzkaller0: entered allmulticast mode
[   50.190245][ T5982] tipc: Resetting bearer <eth:syzkaller0>
[   50.208822][ T5982] tipc: Disabling bearer <eth:syzkaller0>
[   50.219387][ T5990] Zero length message leads to an empty skb
[   50.594807][ T5828] Bluetooth: hci2: command tx timeout
[   50.594928][ T5217] Bluetooth: hci1: command tx timeout
[   50.604800][ T5217] Bluetooth: hci0: command tx timeout
[   51.173507][ T6012] tipc: Started in network mode
[   51.176514][ T6012] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711
[   51.179968][ T6012] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   51.266665][ T6018] smc: net device bond0 applied user defined pnetid SYZ2
[   51.269059][ T6018] smc: net device bond0 erased user defined pnetid SYZ2
[   51.376906][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'.
[   51.509863][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'.
[   51.512899][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'.
[   51.530786][ T6039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   51.920429][ T6081] netlink: 100 bytes leftover after parsing attributes in process `syz.2.74'.
[   52.023891][ T6094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.077742][ T6098] syz.2.82 uses obsolete (PF_INET,SOCK_PACKET)
[   52.412780][  T790] IPVS: starting estimator thread 0...
[   52.505081][ T6126] IPVS: using max 79 ests per chain, 189600 per kthread
[   52.529742][ T6134] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[   52.674755][ T5217] Bluetooth: hci0: command tx timeout
[   52.676616][ T5217] Bluetooth: hci1: command tx timeout
[   52.678351][ T5217] Bluetooth: hci2: command tx timeout
[   52.720596][ T6153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.107'.
[   52.723702][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.107'.
[   52.821314][ T6164] x_tables: duplicate underflow at hook 4
[   52.861496][ T6168] netlink: 'syz.1.115': attribute type 10 has an invalid length.
[   52.880169][ T6168] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   52.893708][ T6168] bridge_slave_0: left allmulticast mode
[   52.896559][ T6168] bridge_slave_0: left promiscuous mode
[   52.898513][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.907090][ T6168] bridge_slave_1: left allmulticast mode
[   52.908878][ T6168] bridge_slave_1: left promiscuous mode
[   52.910705][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.919320][ T6168] bond0: (slave bond_slave_0): Releasing backup interface
[   52.923757][ T6168] bond0: (slave bond_slave_1): Releasing backup interface
[   52.932681][ T6168] team0: Port device team_slave_0 removed
[   52.938970][ T6168] team0: Port device team_slave_1 removed
[   52.942125][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.944552][ T6168] batman_adv: batadv0: Removing interface: batadv_slave_0
[   52.950383][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.952747][ T6168] batman_adv: batadv0: Removing interface: batadv_slave_1
[   52.962225][ T6168] bond0: (slave wlan1): Releasing backup interface
[   53.351002][ T6201] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   53.364191][ T6201] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   53.373366][ T6201] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   53.695862][ T6236] No such timeout policy "syz0"
[   54.332001][ T6302] __nla_validate_parse: 2 callbacks suppressed
[   54.332012][ T6302] netlink: 32 bytes leftover after parsing attributes in process `syz.2.176'.
[   54.396276][ T6312] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.415565][ T6314] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.582758][ T6335] netlink: 'syz.0.189': attribute type 1 has an invalid length.
[   54.589628][ T6335] netlink: 208 bytes leftover after parsing attributes in process `syz.0.189'.
[   54.664519][ T6339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.194'.
[   54.738668][ T6350] bridge0: entered promiscuous mode
[   54.740974][ T6350] batadv0: entered promiscuous mode
[   54.756362][ T5828] Bluetooth: hci2: command tx timeout
[   54.756388][ T5217] Bluetooth: hci1: command tx timeout
[   54.758400][ T5828] Bluetooth: hci0: command tx timeout
[   55.074926][  T790] 
[   55.075804][  T790] ============================================
[   55.077729][  T790] WARNING: possible recursive locking detected
[   55.079675][  T790] 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 Not tainted
[   55.082987][  T790] --------------------------------------------
[   55.084884][  T790] kworker/1:2/790 is trying to acquire lock:
[   55.086801][  T790] ffff888029a38f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220
[   55.089673][  T790] 
[   55.089673][  T790] but task is already holding lock:
[   55.091951][  T790] ffff88811999ef30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220
[   55.094773][  T790] 
[   55.094773][  T790] other info that might help us debug this:
[   55.097252][  T790]  Possible unsafe locking scenario:
[   55.097252][  T790] 
[   55.099578][  T790]        CPU0
[   55.100640][  T790]        ----
[   55.101707][  T790]   lock(&hsr->seqnr_lock);
[   55.103144][  T790]   lock(&hsr->seqnr_lock);
[   55.104586][  T790] 
[   55.104586][  T790]  *** DEADLOCK ***
[   55.104586][  T790] 
[   55.107126][  T790]  May be due to missing lock nesting notation
[   55.107126][  T790] 
[   55.109667][  T790] 11 locks held by kworker/1:2/790:
[   55.111310][  T790]  #0: ffff888020361148 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   55.114612][  T790]  #1: ffffc90004e2fbc0 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   55.118639][  T790]  #2: ffff88803af78538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xde0
[   55.121471][  T790]  #3: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1de/0xd80
[   55.124350][  T790]  #4: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0
[   55.127468][  T790]  #5: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[   55.130511][  T790]  #6: ffff88811999ef30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220
[   55.133447][  T790]  #7: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860
[   55.136402][  T790]  #8: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[   55.139468][  T790]  #9: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840
[   55.142307][  T790]  #10: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[   55.145384][  T790] 
[   55.145384][  T790] stack backtrace:
[   55.147231][  T790] CPU: 1 UID: 0 PID: 790 Comm: kworker/1:2 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[   55.147241][  T790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   55.147247][  T790] Workqueue: mld mld_ifc_work
[   55.147258][  T790] Call Trace:
[   55.147264][  T790]  <TASK>
[   55.147268][  T790]  dump_stack_lvl+0x189/0x250
[   55.147281][  T790]  ? __pfx_dump_stack_lvl+0x10/0x10
[   55.147288][  T790]  ? __pfx__printk+0x10/0x10
[   55.147298][  T790]  ? print_lock_name+0xde/0x100
[   55.147307][  T790]  print_deadlock_bug+0x28b/0x2a0
[   55.147317][  T790]  validate_chain+0x1a3f/0x2140
[   55.147327][  T790]  ? unwind_next_frame+0xa5/0x2390
[   55.147336][  T790]  ? rcu_is_watching+0x15/0xb0
[   55.147344][  T790]  ? __kasan_check_byte+0x12/0x40
[   55.147354][  T790]  ? unwind_next_frame+0xa5/0x2390
[   55.147362][  T790]  __lock_acquire+0xab9/0xd20
[   55.147370][  T790]  ? hsr_dev_xmit+0x19a/0x220
[   55.147379][  T790]  lock_acquire+0x120/0x360
[   55.147385][  T790]  ? hsr_dev_xmit+0x19a/0x220
[   55.147394][  T790]  ? unwind_next_frame+0xa5/0x2390
[   55.147402][  T790]  ? hsr_dev_xmit+0x19a/0x220
[   55.147411][  T790]  _raw_spin_lock_bh+0x36/0x50
[   55.147423][  T790]  ? hsr_dev_xmit+0x19a/0x220
[   55.147431][  T790]  hsr_dev_xmit+0x19a/0x220
[   55.147441][  T790]  dev_hard_start_xmit+0x2d7/0x830
[   55.147450][  T790]  __dev_queue_xmit+0x1adf/0x3a70
[   55.147458][  T790]  ? __dev_queue_xmit+0x27e/0x3a70
[   55.147465][  T790]  ? __local_bh_enable_ip+0x12d/0x1c0
[   55.147473][  T790]  ? lockdep_hardirqs_on+0x9c/0x150
[   55.147482][  T790]  ? __pfx___dev_queue_xmit+0x10/0x10
[   55.147489][  T790]  ? do_raw_read_unlock+0x3d/0x80
[   55.147499][  T790]  ? ebt_do_table+0x265b/0x2820
[   55.147509][  T790]  ? __lock_acquire+0xab9/0xd20
[   55.147519][  T790]  br_dev_queue_push_xmit+0x6c5/0x890
[   55.147528][  T790]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[   55.147536][  T790]  ? NF_HOOK+0x9e/0x3c0
[   55.147542][  T790]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[   55.147549][  T790]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[   55.147561][  T790]  NF_HOOK+0x320/0x3c0
[   55.147568][  T790]  ? NF_HOOK+0x9e/0x3c0
[   55.147574][  T790]  ? __pfx_NF_HOOK+0x10/0x10
[   55.147581][  T790]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[   55.147589][  T790]  br_forward_finish+0xd3/0x130
[   55.147596][  T790]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[   55.147603][  T790]  ? __pfx_br_forward_finish+0x10/0x10
[   55.147609][  T790]  ? __pfx_br_forward_finish+0x10/0x10
[   55.147616][  T790]  NF_HOOK+0x320/0x3c0
[   55.147623][  T790]  ? NF_HOOK+0x9e/0x3c0
[   55.147629][  T790]  ? __pfx_NF_HOOK+0x10/0x10
[   55.147636][  T790]  ? __pfx_br_forward_finish+0x10/0x10
[   55.147644][  T790]  __br_forward+0x41e/0x600
[   55.147652][  T790]  ? __pfx_br_forward_finish+0x10/0x10
[   55.147659][  T790]  ? __pfx___br_forward+0x10/0x10
[   55.147666][  T790]  ? skb_clone+0x246/0x3a0
[   55.147673][  T790]  maybe_deliver+0xb5/0x160
[   55.147681][  T790]  br_flood+0x31a/0x6a0
[   55.147689][  T790]  ? br_dev_xmit+0x185/0x1840
[   55.147697][  T790]  br_dev_xmit+0x11b3/0x1840
[   55.147706][  T790]  ? br_dev_xmit+0x185/0x1840
[   55.147715][  T790]  ? __pfx_br_dev_xmit+0x10/0x10
[   55.147723][  T790]  ? validate_xmit_xfrm+0xbf/0x1130
[   55.147730][  T790]  ? __pfx_skb_network_protocol+0x10/0x10
[   55.147737][  T790]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[   55.147744][  T790]  ? __pfx_passthru_features_check+0x10/0x10
[   55.147752][  T790]  dev_hard_start_xmit+0x2d7/0x830
[   55.147760][  T790]  __dev_queue_xmit+0x1adf/0x3a70
[   55.147768][  T790]  ? __dev_queue_xmit+0x27e/0x3a70
[   55.147776][  T790]  ? trace_kmem_cache_alloc+0x1f/0xc0
[   55.147785][  T790]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   55.147795][  T790]  ? __pfx___dev_queue_xmit+0x10/0x10
[   55.147801][  T790]  ? __copy_skb_header+0xa7/0x550
[   55.147812][  T790]  ? __asan_memcpy+0x40/0x70
[   55.147820][  T790]  ? __pskb_copy_fclone+0x9b5/0xfb0
[   55.147826][  T790]  ? __asan_memcpy+0x40/0x70
[   55.147833][  T790]  ? __pskb_copy_fclone+0x9b5/0xfb0
[   55.147840][  T790]  ? hsr_create_tagged_frame+0x449/0xc30
[   55.147847][  T790]  ? __asan_memmove+0x40/0x70
[   55.147854][  T790]  ? hsr_addr_subst_dest+0x307/0xac0
[   55.147864][  T790]  hsr_forward_skb+0x158b/0x2860
[   55.147872][  T790]  ? hsr_forward_skb+0x9e/0x2860
[   55.147878][  T790]  ? __pfx_hsr_forward_skb+0x10/0x10
[   55.147884][  T790]  ? do_raw_spin_lock+0x121/0x290
[   55.147893][  T790]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   55.147903][  T790]  ? hsr_dev_xmit+0x19a/0x220
[   55.147911][  T790]  hsr_dev_xmit+0x1a5/0x220
[   55.147920][  T790]  dev_hard_start_xmit+0x2d7/0x830
[   55.147929][  T790]  __dev_queue_xmit+0x1adf/0x3a70
[   55.147936][  T790]  ? __dev_queue_xmit+0x27e/0x3a70
[   55.147944][  T790]  ? __pfx___dev_queue_xmit+0x10/0x10
[   55.147951][  T790]  ? read_seqbegin+0x122/0x250
[   55.147959][  T790]  ? neigh_connected_output+0x1ea/0x460
[   55.147988][  T790]  ? lockdep_hardirqs_on+0x9c/0x150
[   55.147995][  T790]  ? read_seqbegin+0x1ac/0x250
[   55.148002][  T790]  ? __pfx_read_seqbegin+0x10/0x10
[   55.148010][  T790]  ? eth_header+0x11b/0x200
[   55.148021][  T790]  ? __asan_memcpy+0x40/0x70
[   55.148029][  T790]  ? eth_header+0x11b/0x200
[   55.148037][  T790]  ? __pfx_eth_header+0x10/0x10
[   55.148047][  T790]  ? neigh_connected_output+0x3b6/0x460
[   55.148057][  T790]  ip6_finish_output2+0x11fe/0x16a0
[   55.148068][  T790]  ? ip6_finish_output2+0x701/0x16a0
[   55.148077][  T790]  ? ip6_mtu+0x7d/0x3f0
[   55.148085][  T790]  ? __pfx_ip6_finish_output2+0x10/0x10
[   55.148094][  T790]  ? ip6_mtu+0x7d/0x3f0
[   55.148102][  T790]  ? ip6_mtu+0x321/0x3f0
[   55.148110][  T790]  ? ip6_finish_output+0x2ef/0x4e0
[   55.148118][  T790]  NF_HOOK+0x9e/0x380
[   55.148127][  T790]  ? NF_HOOK+0x101/0x380
[   55.148135][  T790]  ? __pfx_NF_HOOK+0x10/0x10
[   55.148144][  T790]  ? __pfx_dst_output+0x10/0x10
[   55.148152][  T790]  ? icmp6_dst_alloc+0x3a5/0x420
[   55.148160][  T790]  ? icmp6_dst_alloc+0x3a5/0x420
[   55.148169][  T790]  mld_sendpack+0x800/0xd80
[   55.148180][  T790]  ? mld_sendpack+0x1de/0xd80
[   55.148188][  T790]  ? __pfx_mld_sendpack+0x10/0x10
[   55.148199][  T790]  mld_ifc_work+0x835/0xde0
[   55.148209][  T790]  ? _raw_spin_unlock_irq+0x23/0x50
[   55.148218][  T790]  ? process_scheduled_works+0x9ef/0x17b0
[   55.148227][  T790]  process_scheduled_works+0xae1/0x17b0
[   55.148238][  T790]  ? __pfx_process_scheduled_works+0x10/0x10
[   55.148248][  T790]  worker_thread+0x8a0/0xda0
[   55.148256][  T790]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   55.148267][  T790]  ? __kthread_parkme+0x7b/0x200
[   55.148276][  T790]  kthread+0x711/0x8a0
[   55.148286][  T790]  ? __pfx_worker_thread+0x10/0x10
[   55.148293][  T790]  ? __pfx_kthread+0x10/0x10
[   55.148301][  T790]  ? _raw_spin_unlock_irq+0x23/0x50
[   55.148310][  T790]  ? lockdep_hardirqs_on+0x9c/0x150
[   55.148317][  T790]  ? __pfx_kthread+0x10/0x10
[   55.148325][  T790]  ret_from_fork+0x3fc/0x770
[   55.148334][  T790]  ? __pfx_ret_from_fork+0x10/0x10
[   55.148341][  T790]  ? __switch_to_asm+0x39/0x70
[   55.148349][  T790]  ? __switch_to_asm+0x33/0x70
[   55.148357][  T790]  ? __pfx_kthread+0x10/0x10
[   55.148365][  T790]  ret_from_fork_asm+0x1a/0x30
[   55.148376][  T790]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   55.740077][ T5867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.826804][ T5867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.857524][ T5867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.928454][ T5867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.990035][ T5867] hsr1: left allmulticast mode
[   55.991866][ T5867] dummy0: left allmulticast mode
[   55.993957][ T5867] team0: left allmulticast mode
[   55.996354][ T5867] team_slave_0: left allmulticast mode
[   55.998599][ T5867] team_slave_1: left allmulticast mode
[   56.000839][ T5867] hsr1: left promiscuous mode
[   56.002914][ T5867] bridge0: port 4(hsr1) entered disabled state
[   56.006837][ T5867] bond1: left allmulticast mode
[   56.008666][ T5867] bond1: left promiscuous mode
[   56.010544][ T5867] bridge0: port 3(bond1) entered disabled state
[   56.014334][ T5867] bridge_slave_1: left allmulticast mode
[   56.018139][ T5867] bridge_slave_1: left promiscuous mode
[   56.020242][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.023411][ T5867] bridge_slave_0: left allmulticast mode
[   56.025397][ T5867] bridge_slave_0: left promiscuous mode
[   56.027178][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.056174][ T5867] bridge0 (unregistering): left promiscuous mode
[   56.095426][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   56.099759][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   56.103642][ T5867] bond0 (unregistering): Released all slaves
[   56.148303][ T5867] bond1 (unregistering): Released all slaves
[   56.210444][ T5867] tipc: Left network mode
[   56.235993][ T5867] IPVS: stopping backup sync thread 5940 ...
[   56.367001][ T5867] batadv0: left promiscuous mode
[   56.369683][ T5867] dummy0: left promiscuous mode
[   56.372101][ T5867] team0: left promiscuous mode
[   56.373989][ T5867] team_slave_0: left promiscuous mode
[   56.377258][ T5867] team_slave_1: left promiscuous mode
[   56.385479][ T5867] hsr_slave_0: left promiscuous mode
[   56.387912][ T5867] hsr_slave_1: left promiscuous mode
[   56.390229][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.393052][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.397927][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.400741][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.409164][ T5867] veth1_macvtap: left promiscuous mode
[   56.411332][ T5867] veth0_macvtap: left promiscuous mode
[   56.413499][ T5867] veth1_vlan: left promiscuous mode
[   56.416797][ T5867] veth0_vlan: left promiscuous mode
[   56.517112][ T5867] team0 (unregistering): Port device team_slave_1 removed
[   56.528375][ T5867] team0 (unregistering): Port device team_slave_0 removed
[   56.822006][ T5867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.877019][ T5867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.908082][ T5867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.937618][ T5867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.011451][ T5867] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.065670][ T5867] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.093914][ T5867] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.128169][ T5867] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.176862][ T5867] bridge_slave_1: left allmulticast mode
[   57.178745][ T5867] bridge_slave_1: left promiscuous mode
[   57.181171][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.184511][ T5867] bridge_slave_0: left allmulticast mode
[   57.188048][ T5867] bridge_slave_0: left promiscuous mode
[   57.189914][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.288015][ T5867] bond0 (unregistering): Released all slaves
[   57.349431][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   57.353065][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   57.356468][ T5867] bond0 (unregistering): Released all slaves
[   57.416309][ T5867] tipc: Left network mode
[   57.428446][ T5867] tipc: Left network mode
[   57.634740][ T5867] hsr_slave_0: left promiscuous mode
[   57.646956][ T5867] hsr_slave_1: left promiscuous mode
[   57.653709][ T5867] hsr_slave_0: left promiscuous mode
[   57.659485][ T5867] hsr_slave_1: left promiscuous mode
[   57.662070][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.665200][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.668550][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.671491][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.677091][ T5867] veth1_macvtap: left promiscuous mode
[   57.678902][ T5867] veth0_macvtap: left promiscuous mode
[   57.680675][ T5867] veth1_vlan: left promiscuous mode
[   57.682349][ T5867] veth0_vlan: left promiscuous mode
[   57.684801][ T5867] veth1_macvtap: left promiscuous mode
[   57.686595][ T5867] veth0_macvtap: left promiscuous mode
[   57.688423][ T5867] veth1_vlan: left promiscuous mode
[   57.690162][ T5867] veth0_vlan: left promiscuous mode
[   57.929137][ T5867] team0 (unregistering): Port device team_slave_1 removed
[   57.940295][ T5867] team0 (unregistering): Port device team_slave_0 removed
[   58.419329][ T5867] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
17:57:36  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff8880203ea104 RCX=dffffc0000000000 RDX=ffffc90008469000
RSI=00000000000488a5 RDI=00000000000488a6 RBP=0000000000000000 RSP=ffffc90006b27820
R8 =ffffea0000f520f7 R9 =1ffffd40001ea41e R10=dffffc0000000000 R11=fffff940001ea41f
R12=ffffea0000f520c0 R13=ffffea0000f520c8 R14=ffffea0000f520c0 R15=0000000cd3155eec
RIP=ffffffff81a7e21a RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa9803946c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f87837d9fc8 CR3=000000003c2a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2b41c11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004e2d8b0
R8 =ffff888107f98237 R9 =1ffff11020ff3046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18b9 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555848ec808 CR3=000000003c8bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa97f611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
