last executing test programs:

1.671279599s ago: executing program 0 (id=682):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010102}}}, @ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0)

1.670014515s ago: executing program 0 (id=683):
r0 = socket(0x10, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
clock_gettime(0xa, 0x0)
listen(0xffffffffffffffff, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, 0x0, &(0x7f0000000340))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0)

799.946804ms ago: executing program 0 (id=711):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x1}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c}, 0x20)

740.908203ms ago: executing program 0 (id=712):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x18, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f00800fee0050000000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff23}, 0x2c)

690.951381ms ago: executing program 0 (id=715):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x4a7, 0x4, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

648.555756ms ago: executing program 0 (id=717):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r7, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r8}, 0x10)
ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r10, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10)
r11 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10)
connect$llc(r11, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)

550.865191ms ago: executing program 2 (id=719):
r0 = socket$inet6(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24)

477.103428ms ago: executing program 2 (id=720):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xa, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x3, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0x14, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, "8f81a8656329"}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008004}, 0x8014)

315.340784ms ago: executing program 1 (id=723):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x1c, 0x2b, 0xb, 0x70bd2a, 0x0, {0x5}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x5b}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40)

315.097361ms ago: executing program 2 (id=724):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

238.008754ms ago: executing program 1 (id=725):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0x1f, &(0x7f0000000800)=ANY=[@ANYBLOB="8520000002000000950000000000000018140000", @ANYRES32=r0, @ANYBLOB="000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085100000ffffffffb7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000a5000000181100"/28, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x40, r3, 0x1ff}, 0xc)

177.314742ms ago: executing program 2 (id=726):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x3f}, 0x28)

129.429912ms ago: executing program 1 (id=727):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3e, 0x1, 0x80000, 0x25dfdbfe, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@generic="ba72b2d8"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

129.051076ms ago: executing program 2 (id=728):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
unshare(0x20000400)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)

70.909052ms ago: executing program 2 (id=729):
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x2, 0x30}, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0)
r2 = socket(0x28, 0x5, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x5, 0xc, 0x7, 0x5}]})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r4)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000180)=',', 0x1)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f00000000c0)="1c721c3eba50892646093830c21739b7bd938217f7a227c397dda2", 0x1b)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r7, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4)
recvmmsg(r7, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x4}]}, 0x3c}}, 0x440088c4)

70.757022ms ago: executing program 1 (id=730):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(0x3)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', <r1=>0x0})
sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}], 0x20}}], 0x1, 0x0)

216.05µs ago: executing program 1 (id=731):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "4f2e6ba215a4803e00197689c61d80fd77082da016ed6f57e335e66d992ecc0b", "ec2515b759b3f5332ab4b469d66cbcc85b36df0ce1b01672f2ee843e2f878f46", "f3a20e5218b94366490ccbc409a5574b309e6fb6413ddb14e88ab477c18c9dec", "4dcb3dc94ee568b0d592043ac4a986a87af55cb7f7e6f6ed4a35537a28122aba", "74a475c88c7796c5b0a2782159038caa0c0ba9cd03a86df4e81c9532e116be11", "86f56374ac0b296e321a4281", 0x3, 0x6, 0x1, 0x6, 0x7fff}})

0s ago: executing program 1 (id=732):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010024bd7000010000000f00000008003400a726000008000300", @ANYRES32=r1, @ANYBLOB="05003300fc"], 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x80)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59842' (ED25519) to the list of known hosts.
syzkaller login: [   48.759056][ T5772] cgroup: Unknown subsys name 'net'
[   48.882363][ T5772] cgroup: Unknown subsys name 'cpuset'
[   48.886314][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.869109][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.228805][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.232880][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.236377][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.240732][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.244828][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.265353][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.269263][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.273737][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.277945][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.281880][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.285741][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.290462][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.309293][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.314209][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.320500][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.615376][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   56.665141][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   56.739848][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   56.822924][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.825485][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.828815][ T5846] bridge_slave_0: entered allmulticast mode
[   56.833303][ T5846] bridge_slave_0: entered promiscuous mode
[   56.856061][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.859185][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.863097][ T5842] bridge_slave_0: entered allmulticast mode
[   56.867086][ T5842] bridge_slave_0: entered promiscuous mode
[   56.871511][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.874035][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.876847][ T5842] bridge_slave_1: entered allmulticast mode
[   56.880189][ T5842] bridge_slave_1: entered promiscuous mode
[   56.893059][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.896025][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.898981][ T5846] bridge_slave_1: entered allmulticast mode
[   56.905137][ T5846] bridge_slave_1: entered promiscuous mode
[   56.957189][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.969087][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.977040][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.983561][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.048257][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.051861][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.054790][ T5849] bridge_slave_0: entered allmulticast mode
[   57.058847][ T5849] bridge_slave_0: entered promiscuous mode
[   57.076213][ T5842] team0: Port device team_slave_0 added
[   57.080591][ T5846] team0: Port device team_slave_0 added
[   57.084347][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.087502][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.091166][ T5849] bridge_slave_1: entered allmulticast mode
[   57.095078][ T5849] bridge_slave_1: entered promiscuous mode
[   57.099965][ T5842] team0: Port device team_slave_1 added
[   57.103921][ T5846] team0: Port device team_slave_1 added
[   57.182485][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.185351][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.196416][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.204057][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.206967][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.217765][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.222868][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.225412][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.234979][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.240934][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.252246][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.254568][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.265912][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.270848][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.324011][ T5846] hsr_slave_0: entered promiscuous mode
[   57.326272][ T5846] hsr_slave_1: entered promiscuous mode
[   57.330854][ T5849] team0: Port device team_slave_0 added
[   57.345144][ T5842] hsr_slave_0: entered promiscuous mode
[   57.347941][ T5842] hsr_slave_1: entered promiscuous mode
[   57.350786][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   57.352759][ T5842] Cannot create hsr debugfs directory
[   57.372404][ T5849] team0: Port device team_slave_1 added
[   57.429405][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.432584][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.444874][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.472752][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.475745][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.486467][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.549400][ T5849] hsr_slave_0: entered promiscuous mode
[   57.553035][ T5849] hsr_slave_1: entered promiscuous mode
[   57.555842][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   57.557797][ T5849] Cannot create hsr debugfs directory
[   57.832514][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.840099][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.853609][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.863237][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.877130][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.886402][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.893417][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.904497][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.975122][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.991016][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.997295][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.006192][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.095042][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.112512][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.125929][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   58.137466][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   58.151465][  T172] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.155254][  T172] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.165647][  T518] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.168724][  T518] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.177071][  T172] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.179569][  T172] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.185556][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.191386][  T172] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.194204][  T172] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.221824][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   58.233588][  T172] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.236552][  T172] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.255180][  T518] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.258274][  T518] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.309043][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.331047][   T54] Bluetooth: hci2: command tx timeout
[   58.340133][   T54] Bluetooth: hci1: command tx timeout
[   58.340356][ T5852] Bluetooth: hci0: command tx timeout
[   58.366041][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.528378][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.538114][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.596592][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.607848][ T5846] veth0_vlan: entered promiscuous mode
[   58.624334][ T5842] veth0_vlan: entered promiscuous mode
[   58.629118][ T5846] veth1_vlan: entered promiscuous mode
[   58.641951][ T5842] veth1_vlan: entered promiscuous mode
[   58.677205][ T5846] veth0_macvtap: entered promiscuous mode
[   58.683858][ T5842] veth0_macvtap: entered promiscuous mode
[   58.688222][ T5842] veth1_macvtap: entered promiscuous mode
[   58.700647][ T5846] veth1_macvtap: entered promiscuous mode
[   58.709435][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.718285][ T5849] veth0_vlan: entered promiscuous mode
[   58.731456][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.735085][ T5849] veth1_vlan: entered promiscuous mode
[   58.753521][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.763701][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.779509][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.784748][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.796506][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.801213][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.834224][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.851702][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.856242][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.867382][ T5849] veth0_macvtap: entered promiscuous mode
[   58.877727][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.894204][ T5849] veth1_macvtap: entered promiscuous mode
[   58.938190][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.943047][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.947567][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.968120][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.988313][ T5714] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.992727][ T5714] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.996450][ T5714] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.014003][ T5714] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.019363][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.024145][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.062758][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.068550][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.107315][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.111125][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.149920][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.154811][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.186034][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.198836][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.208649][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.354487][ T5921] tipc: Started in network mode
[   59.360112][ T5921] tipc: Node identity 4, cluster identity 4711
[   59.362288][ T5921] tipc: Node number set to 4
[   60.094033][ T5969] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.21'.
[   60.411006][ T5852] Bluetooth: hci1: command tx timeout
[   60.411852][   T54] Bluetooth: hci2: command tx timeout
[   60.419805][   T54] Bluetooth: hci0: command tx timeout
[   60.527016][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'.
[   60.631008][ T5988] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.112836][ T6005] Zero length message leads to an empty skb
[   61.633380][    T9] IPVS: starting estimator thread 0...
[   61.729910][ T6028] IPVS: using max 51 ests per chain, 122400 per kthread
[   62.083531][ T6030] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.346483][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.350681][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.454067][ T6053] netlink: 'syz.0.56': attribute type 7 has an invalid length.
[   62.489808][   T54] Bluetooth: hci1: command tx timeout
[   62.500707][   T54] Bluetooth: hci0: command tx timeout
[   62.502854][   T54] Bluetooth: hci2: command tx timeout
[   63.665916][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'.
[   63.763219][ T6127] syz.2.85 uses obsolete (PF_INET,SOCK_PACKET)
[   64.013106][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.98'.
[   64.038704][ T6154] netdevsim0: mtu less than device minimum
[   64.205453][ T6166] netlink: 288 bytes leftover after parsing attributes in process `syz.2.106'.
[   64.236500][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'.
[   64.256306][ T6168] netlink: 23932 bytes leftover after parsing attributes in process `syz.2.107'.
[   64.572818][   T54] Bluetooth: hci0: command tx timeout
[   64.572884][ T5852] Bluetooth: hci2: command tx timeout
[   64.574731][   T54] Bluetooth: hci1: command tx timeout
[   64.647909][ T6200] netlink: 144 bytes leftover after parsing attributes in process `syz.2.119'.
[   64.795497][ T6216] bond0: entered promiscuous mode
[   64.797684][ T6216] bond_slave_0: entered promiscuous mode
[   64.802252][ T6216] bond_slave_1: entered promiscuous mode
[   64.809105][ T6216] batadv0: entered promiscuous mode
[   64.822175][ T6216] hsr1: entered allmulticast mode
[   64.824427][ T6216] bond0: entered allmulticast mode
[   64.831597][ T6216] bond_slave_0: entered allmulticast mode
[   64.834046][ T6216] bond_slave_1: entered allmulticast mode
[   64.836458][ T6216] batadv0: entered allmulticast mode
[   64.839137][ T6216] 8021q: adding VLAN 0 to HW filter on device hsr1
[   64.844833][ T6216] bond0: left promiscuous mode
[   64.846876][ T6216] bond_slave_0: left promiscuous mode
[   64.856154][ T6216] bond_slave_1: left promiscuous mode
[   64.860190][ T6216] batadv0: left promiscuous mode
[   64.888461][ T6222] vlan2: entered promiscuous mode
[   64.891276][ T6222] bond0: entered promiscuous mode
[   64.893475][ T6222] bond_slave_0: entered promiscuous mode
[   64.896187][ T6222] bond_slave_1: entered promiscuous mode
[   64.898914][ T6222] vlan2: entered allmulticast mode
[   64.903846][ T6222] bond0: entered allmulticast mode
[   64.906386][ T6222] bond_slave_0: entered allmulticast mode
[   64.908883][ T6222] bond_slave_1: entered allmulticast mode
[   64.921249][ T6218] tap0: tun_chr_ioctl cmd 35108
[   65.076317][ T6237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.138'.
[   65.342056][ T6259] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[   65.993161][ T6292] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.162'.
[   66.370684][ T6316] netlink: 'syz.0.172': attribute type 10 has an invalid length.
[   66.385468][ T6316] 8021q: adding VLAN 0 to HW filter on device team0
[   66.391787][ T6316] team0: entered promiscuous mode
[   66.394855][ T6316] team_slave_0: entered promiscuous mode
[   66.397189][ T6316] team_slave_1: entered promiscuous mode
[   66.405461][ T6316] team0: entered allmulticast mode
[   66.407640][ T6316] team_slave_0: entered allmulticast mode
[   66.413494][ T6316] team_slave_1: entered allmulticast mode
[   66.423522][ T6316] bond0: (slave team0): Enslaving as an active interface with an up link
[   66.446671][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'.
[   66.688579][ T6338] syzkaller0: entered promiscuous mode
[   66.691154][ T6338] syzkaller0: entered allmulticast mode
[   67.035443][ T6346] netlink: 'syz.2.184': attribute type 1 has an invalid length.
[   67.499419][ T6364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.598540][ T6368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.603938][ T6368] syzkaller0: entered promiscuous mode
[   67.606371][ T6368] syzkaller0: entered allmulticast mode
[   67.643429][ T6368] tipc: Resetting bearer <eth:syzkaller0>
[   67.650813][ T6367] tipc: Resetting bearer <eth:syzkaller0>
[   67.668288][ T6367] tipc: Disabling bearer <eth:syzkaller0>
[   68.212999][ T6401] netlink: 26 bytes leftover after parsing attributes in process `syz.0.207'.
[   68.296793][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'.
[   68.300835][ T6410] netlink: 'syz.2.211': attribute type 5 has an invalid length.
[   68.304267][ T6410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.211'.
[   68.316112][ T6410] geneve2: entered promiscuous mode
[   68.318494][ T6410] geneve2: entered allmulticast mode
[   68.323223][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   68.326884][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   68.332203][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   68.335833][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   68.510835][ T6424] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.219'.
[   68.514106][ T6424] netlink: zone id is out of range
[   68.516015][ T6424] netlink: zone id is out of range
[   68.517809][ T6424] netlink: zone id is out of range
[   68.519555][ T6424] netlink: zone id is out of range
[   68.522303][ T6424] netlink: zone id is out of range
[   68.524090][ T6424] netlink: zone id is out of range
[   68.526045][ T6424] netlink: zone id is out of range
[   68.527834][ T6424] netlink: zone id is out of range
[   68.844742][ T6449] lo: entered allmulticast mode
[   68.846556][ T6449] lo: left allmulticast mode
[   68.953787][ T6454] netlink: 17 bytes leftover after parsing attributes in process `syz.0.232'.
[   69.024796][ T6464] vlan0: entered promiscuous mode
[   69.188064][ T6474] netlink: 'syz.0.241': attribute type 10 has an invalid length.
[   69.251298][ T6478] tipc: Can't bind to reserved service type 2
[   69.359255][ T6488] Bluetooth: MGMT ver 1.23
[   69.423572][ T6494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.248'.
[   69.426870][ T6494] netlink: 245 bytes leftover after parsing attributes in process `syz.2.248'.
[   69.876127][ T6542] netlink: 32 bytes leftover after parsing attributes in process `syz.1.267'.
[   70.156512][ T6571] net_ratelimit: 5 callbacks suppressed
[   70.156528][ T6571] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   70.214073][ T6576] ipvlan2: entered promiscuous mode
[   70.396893][ T6591] can: request_module (can-proto-5) failed.
[   70.415957][ T6589] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   70.419357][   T47] IPVS: starting estimator thread 0...
[   70.520029][ T6594] IPVS: using max 49 ests per chain, 117600 per kthread
[   70.746208][ T6618] atomic_op ffff88801ed40998 conn xmit_atomic 0000000000000000
[   70.748640][ T6614] IPv6: sit1: Disabled Multicast RS
[   70.951847][ T6630] netlink: 'syz.0.304': attribute type 10 has an invalid length.
[   70.978108][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.981281][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.983266][ T6636] netlink: 'syz.2.307': attribute type 5 has an invalid length.
[   70.987575][ T6636] netlink: 'syz.2.307': attribute type 6 has an invalid length.
[   70.991394][ T6630] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   70.994763][ T6630] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   70.998291][ T6630] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   71.068796][ T6640] trusted_key: syz.1.310 sent an empty control message without MSG_MORE.
[   71.169916][ T6645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   71.174076][ T6647] IPv6: addrconf: prefix option has invalid lifetime
[   71.846650][ T6685] netlink: 'syz.2.330': attribute type 12 has an invalid length.
[   72.282950][ T6708] __nla_validate_parse: 5 callbacks suppressed
[   72.282959][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'.
[   73.172832][ T6745] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.177355][ T6745] syzkaller0: entered promiscuous mode
[   73.179324][ T6745] syzkaller0: entered allmulticast mode
[   73.199874][ T6745] tipc: Resetting bearer <eth:syzkaller0>
[   73.204085][ T6744] tipc: Resetting bearer <eth:syzkaller0>
[   73.211872][ T6744] tipc: Disabling bearer <eth:syzkaller0>
[   73.413755][ T6764] netlink: 'syz.0.366': attribute type 3 has an invalid length.
[   73.467921][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'.
[   73.581856][ T6776] netlink: 180 bytes leftover after parsing attributes in process `syz.0.369'.
[   73.841739][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   75.186804][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.190024][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.199107][ T6909] netlink: 'syz.0.389': attribute type 3 has an invalid length.
[   75.244603][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'.
[   75.316630][ T6902] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.327589][ T6902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.474974][ T6902] geneve2: left promiscuous mode
[   75.477201][ T6902] geneve2: left allmulticast mode
[   75.491253][ T6912] hsr_slave_0: left promiscuous mode
[   75.497057][ T6912] hsr_slave_1: left promiscuous mode
[   75.514573][ T5714] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.518710][ T5714] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[   75.523017][ T5714] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.527010][ T5714] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[   75.535155][ T5714] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.538452][ T5714] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[   75.541690][ T5714] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.545457][ T5714] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[   75.586750][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'.
[   75.777764][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'.
[   76.216340][ T6943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.402'.
[   76.226391][ T6946] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[   76.277047][ T6948] bond0: (slave team0): Releasing backup interface
[   76.282268][ T6948] team0: left promiscuous mode
[   76.284431][ T6948] team_slave_0: left promiscuous mode
[   76.286866][ T6948] team_slave_1: left promiscuous mode
[   76.289315][ T6948] team0: left allmulticast mode
[   76.293691][ T6948] team_slave_0: left allmulticast mode
[   76.296443][ T6948] team_slave_1: left allmulticast mode
[   76.305957][ T6948] bridge_slave_0: left allmulticast mode
[   76.308582][ T6948] bridge_slave_0: left promiscuous mode
[   76.312052][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.317671][ T6948] bridge_slave_1: left allmulticast mode
[   76.321379][ T6948] bridge_slave_1: left promiscuous mode
[   76.323921][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.335673][ T6948] bond0: (slave bond_slave_0): Releasing backup interface
[   76.339199][ T6948] bond_slave_0: left promiscuous mode
[   76.342910][ T6948] bond_slave_0: left allmulticast mode
[   76.347684][ T6948] bond0: (slave bond_slave_1): Releasing backup interface
[   76.356261][ T6948] bond_slave_1: left promiscuous mode
[   76.358746][ T6948] bond_slave_1: left allmulticast mode
[   76.367068][ T6948] team0: Port device team_slave_0 removed
[   76.376251][ T6948] team0: Port device team_slave_1 removed
[   76.379273][ T6948] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.382417][ T6948] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.387697][ T6948] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.393105][ T6948] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.405612][ T6948] bond0: (slave netdevsim0): Releasing backup interface
[   76.411148][ T6948] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   76.414390][ T6948] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[   76.424279][ T6953] team0: Port device vlan0 added
[   76.675309][ T6968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.413'.
[   76.690954][ T6968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.413'.
[   77.348638][ T6958] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   77.571428][   T12] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[   78.124922][ T7027] IPVS: persistence engine module ip_vs_pe_ not found
[   78.487482][ T7064] netlink: 96 bytes leftover after parsing attributes in process `syz.0.455'.
[   78.503308][ T7065] netlink: 'syz.1.457': attribute type 10 has an invalid length.
[   78.555857][ T7070] netlink: 'syz.0.459': attribute type 1 has an invalid length.
[   78.575016][ T5845] Bluetooth: hci0: command 0x0c20 tx timeout
[   78.579958][ T7070] netlink: 228 bytes leftover after parsing attributes in process `syz.0.459'.
[   78.618636][ T7076] Driver unsupported XDP return value 0 on prog  (id 65) dev N/A, expect packet loss!
[   78.996440][ T7098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.074049][ T7105] netlink: 6 bytes leftover after parsing attributes in process `syz.1.475'.
[   79.123496][ T7107] syzkaller1: entered promiscuous mode
[   79.126055][ T7107] syzkaller1: entered allmulticast mode
[   79.782096][ T7117] macsec1: entered allmulticast mode
[   79.784725][ T7117] ip6gretap0: entered allmulticast mode
[   79.863965][ T7117] ip6gretap0: left allmulticast mode
[   80.269931][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'.
[   80.285450][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.485'.
[   80.287332][ T7121] netlink: 'syz.0.482': attribute type 13 has an invalid length.
[   80.293042][ T7121] netlink: 'syz.0.482': attribute type 17 has an invalid length.
[   80.357754][ T7121] 8021q: adding VLAN 0 to HW filter on device team0
[   80.364426][ T7121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.430358][ T7121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.192438][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'.
[   81.453624][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.501'.
[   81.563945][ T7179] netlink: 'syz.0.504': attribute type 16 has an invalid length.
[   81.567328][ T7179] netlink: 'syz.0.504': attribute type 17 has an invalid length.
[   81.668441][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'.
[   81.796988][ T7187] bridge1: entered promiscuous mode
[   81.799414][ T7187] bridge1: entered allmulticast mode
[   81.805493][ T7187] team0: Port device bridge1 added
[   81.811260][ T5714] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.815095][ T5714] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.818543][ T5714] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.823714][ T5714] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.934606][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'.
[   82.225945][ T7210] netlink: 44 bytes leftover after parsing attributes in process `syz.2.518'.
[   82.307965][ T7214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.467455][   T33] audit: type=1800 audit(1756437544.595:2): pid=7278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.549" name="blkio.bfq.time_recursive" dev="tmpfs" ino=930 res=0 errno=0
[   83.477237][   T33] audit: type=1800 audit(1756437544.605:3): pid=7278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.549" name="blkio.bfq.time_recursive" dev="tmpfs" ino=930 res=0 errno=0
[   83.626630][ T7286] __nla_validate_parse: 4 callbacks suppressed
[   83.626643][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'.
[   83.905458][ T7310] netlink: 'syz.1.565': attribute type 1 has an invalid length.
[   83.908370][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'.
[   83.915008][ T7310] netlink: 32 bytes leftover after parsing attributes in process `syz.1.565'.
[   83.927443][ T7310] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   83.938476][ T7310] gretap1: entered promiscuous mode
[   83.942809][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'.
[   83.971022][ T7318] netlink: 'syz.1.569': attribute type 29 has an invalid length.
[   83.976654][ T7318] netlink: 'syz.1.569': attribute type 29 has an invalid length.
[   83.983141][ T7318] netlink: 488 bytes leftover after parsing attributes in process `syz.1.569'.
[   83.986697][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'.
[   84.012182][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'.
[   84.059096][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'.
[   84.174233][ T7329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.574'.
[   85.877056][ T7418] netlink: 'syz.0.614': attribute type 1 has an invalid length.
[   85.891755][ T7418] netlink: 'syz.0.614': attribute type 2 has an invalid length.
[   85.894826][ T7418] netlink: 'syz.0.614': attribute type 1 has an invalid length.
[   85.897856][ T7418] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.614'.
[   86.340103][   T10] cfg80211: failed to load regulatory.db
[   86.360112][ T7456] netlink: 'syz.1.633': attribute type 6 has an invalid length.
[   86.364400][ T7456] netlink: 'syz.1.633': attribute type 5 has an invalid length.
[   86.377770][ T7454] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[   86.580330][ T7413] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   86.639992][ T7470] tipc: Trying to set illegal importance in message
[   87.277145][ T7494] nbd0: detected capacity change from 0 to 127
[   87.283649][ T7505] block nbd0: Receive control failed (result -32)
[   87.285742][ T6069] block nbd0: Send control failed (result -32)
[   87.286635][   T56] block nbd0: Receive control failed (result -32)
[   87.291533][ T6069] block nbd0: Request send failed, requeueing
[   87.300618][  T126] block nbd0: Dead connection, failed to find a fallback
[   87.304449][  T126] block nbd0: shutting down sockets
[   87.307136][  T126] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.311707][  T126] Buffer I/O error on dev nbd0, logical block 0, async page read
[   87.315332][ T6069] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.325284][ T6069] Buffer I/O error on dev nbd0, logical block 1, async page read
[   87.328483][ T6069] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.335075][ T6069] Buffer I/O error on dev nbd0, logical block 2, async page read
[   87.338673][ T6069] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.343052][ T6069] Buffer I/O error on dev nbd0, logical block 3, async page read
[   87.346513][ T6069] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.360571][ T6069] Buffer I/O error on dev nbd0, logical block 0, async page read
[   87.370791][ T6069] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.376366][ T6069] Buffer I/O error on dev nbd0, logical block 1, async page read
[   87.385985][ T6069] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.393721][ T6069] Buffer I/O error on dev nbd0, logical block 2, async page read
[   87.396946][ T6069] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.401575][ T6069] Buffer I/O error on dev nbd0, logical block 3, async page read
[   87.407635][ T6069] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.414185][ T6069] Buffer I/O error on dev nbd0, logical block 0, async page read
[   87.417850][ T6069] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.422713][ T6069] Buffer I/O error on dev nbd0, logical block 1, async page read
[   87.437106][ T6069] ldm_validate_partition_table(): Disk read failed.
[   87.445300][ T6069] Dev nbd0: unable to read RDB block 0
[   87.449174][ T6069]  nbd0: unable to read partition table
[   87.463358][ T6069] ldm_validate_partition_table(): Disk read failed.
[   87.488027][ T6069] Dev nbd0: unable to read RDB block 0
[   87.491641][ T6069]  nbd0: unable to read partition table
[   87.696582][ T7541] syzkaller1: entered promiscuous mode
[   87.698504][ T7541] syzkaller1: entered allmulticast mode
[   87.720735][ T7543] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.747930][ T7543] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   87.830195][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   87.924678][ T7558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.928093][ T7558] syzkaller0: entered promiscuous mode
[   87.931045][ T7558] syzkaller0: entered allmulticast mode
[   87.944881][ T7558] tipc: Resetting bearer <eth:syzkaller0>
[   87.947292][ T7560] netlink: 'syz.2.676': attribute type 32 has an invalid length.
[   87.950767][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   87.956112][ T7557] tipc: Resetting bearer <eth:syzkaller0>
[   87.966783][ T7557] tipc: Disabling bearer <eth:syzkaller0>
[   88.134553][ T7568] syz_tun: entered promiscuous mode
[   88.139429][ T7568] batadv_slave_0: entered promiscuous mode
[   88.144558][ T7568] debugfs: 'hsr0' already exists in 'hsr'
[   88.146990][ T7568] Cannot create hsr debugfs directory
[   88.149355][ T7568] hsr0: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[   88.154156][ T7568] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.159219][ T7568] hsr0: entered allmulticast mode
[   88.163059][ T7568] syz_tun: entered allmulticast mode
[   88.165535][ T7568] batadv_slave_0: entered allmulticast mode
[   88.474478][ T7597] netlink: 'syz.2.692': attribute type 21 has an invalid length.
[   89.017572][ T7633] validate_nla: 3 callbacks suppressed
[   89.017585][ T7633] netlink: 'syz.2.709': attribute type 8 has an invalid length.
[   89.210254][ T7651] bridge0: port 3(erspan0) entered blocking state
[   89.214901][ T7651] bridge0: port 3(erspan0) entered disabled state
[   89.217949][ T7651] erspan0: entered allmulticast mode
[   89.222503][ T7651] erspan0: entered promiscuous mode
[   89.555921][ T7667] __nla_validate_parse: 13 callbacks suppressed
[   89.555935][ T7667] netlink: 192 bytes leftover after parsing attributes in process `syz.2.724'.
[   89.636793][ T7669] team_slave_0: entered promiscuous mode
[   89.639176][ T7669] team_slave_1: entered promiscuous mode
[   89.646597][ T7669] macsec1: entered promiscuous mode
[   89.649729][ T7669] team0: entered promiscuous mode
[   89.709201][ T7673] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   89.844315][ T7677] block nbd1: server does not support multiple connections per device.
[   89.854280][ T7677] 
[   89.855281][ T7677] ======================================================
[   89.857862][ T7677] WARNING: possible circular locking dependency detected
[   89.860155][ T7677] syzkaller #0 Not tainted
[   89.862495][ T7677] ------------------------------------------------------
[   89.865095][ T7677] syz.2.729/7677 is trying to acquire lock:
[   89.867150][ T7677] ffff8880317d0258 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_shutdown+0x67/0x2a0
[   89.870280][ T7677] 
[   89.870280][ T7677] but task is already holding lock:
[   89.872783][ T7677] ffff88813652af70 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260
[   89.875934][ T7677] 
[   89.875934][ T7677] which lock already depends on the new lock.
[   89.875934][ T7677] 
[   89.879464][ T7677] 
[   89.879464][ T7677] the existing dependency chain (in reverse order) is:
[   89.882484][ T7677] 
[   89.882484][ T7677] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[   89.885037][ T7677]        lock_acquire+0x120/0x360
[   89.886759][ T7677]        __mutex_lock+0x187/0x1350
[   89.888489][ T7677]        nbd_queue_rq+0x257/0xf10
[   89.890206][ T7677]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[   89.892305][ T7677]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[   89.895038][ T7677]        blk_mq_sched_dispatch_requests+0xd7/0x190
[   89.897709][ T7677]        blk_mq_run_hw_queue+0x348/0x4f0
[   89.899796][ T7677]        blk_mq_dispatch_list+0xd0c/0xe00
[   89.901763][ T7677]        blk_mq_flush_plug_list+0x469/0x550
[   89.903968][ T7677]        __blk_flush_plug+0x3d3/0x4b0
[   89.906194][ T7677]        __submit_bio+0x2d3/0x5a0
[   89.908199][ T7677]        submit_bio_noacct_nocheck+0x4ab/0xb50
[   89.910688][ T7677]        block_read_full_folio+0x599/0x830
[   89.913112][ T7677]        filemap_read_folio+0x117/0x380
[   89.915473][ T7677]        do_read_cache_folio+0x350/0x590
[   89.917809][ T7677]        read_part_sector+0xb6/0x2b0
[   89.920039][ T7677]        adfspart_check_ICS+0xa4/0xa50
[   89.921987][ T7677]        bdev_disk_changed+0x75f/0x14b0
[   89.923951][ T7677]        blkdev_get_whole+0x380/0x510
[   89.926076][ T7677]        bdev_open+0x31e/0xd30
[   89.927851][ T7677]        blkdev_open+0x3a8/0x510
[   89.929759][ T7677]        do_dentry_open+0x953/0x13f0
[   89.931762][ T7677]        vfs_open+0x3b/0x340
[   89.933356][ T7677]        path_openat+0x2ee5/0x3830
[   89.935209][ T7677]        do_filp_open+0x1fa/0x410
[   89.937378][ T7677]        do_sys_openat2+0x121/0x1c0
[   89.939639][ T7677]        __x64_sys_openat+0x138/0x170
[   89.941976][ T7677]        do_syscall_64+0xfa/0x3b0
[   89.944147][ T7677]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.946782][ T7677] 
[   89.946782][ T7677] -> #5 (&cmd->lock){+.+.}-{4:4}:
[   89.949864][ T7677]        lock_acquire+0x120/0x360
[   89.952026][ T7677]        __mutex_lock+0x187/0x1350
[   89.953830][ T7677]        nbd_queue_rq+0xc8/0xf10
[   89.955522][ T7677]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[   89.957552][ T7677]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[   89.959820][ T7677]        blk_mq_sched_dispatch_requests+0xd7/0x190
[   89.962274][ T7677]        blk_mq_run_hw_queue+0x348/0x4f0
[   89.964692][ T7677]        blk_mq_dispatch_list+0xd0c/0xe00
[   89.967144][ T7677]        blk_mq_flush_plug_list+0x469/0x550
[   89.969561][ T7677]        __blk_flush_plug+0x3d3/0x4b0
[   89.971460][ T7677]        __submit_bio+0x2d3/0x5a0
[   89.973620][ T7677]        submit_bio_noacct_nocheck+0x4ab/0xb50
[   89.976238][ T7677]        block_read_full_folio+0x599/0x830
[   89.978691][ T7677]        filemap_read_folio+0x117/0x380
[   89.981012][ T7677]        do_read_cache_folio+0x350/0x590
[   89.983291][ T7677]        read_part_sector+0xb6/0x2b0
[   89.985465][ T7677]        adfspart_check_ICS+0xa4/0xa50
[   89.987777][ T7677]        bdev_disk_changed+0x75f/0x14b0
[   89.990144][ T7677]        blkdev_get_whole+0x380/0x510
[   89.992420][ T7677]        bdev_open+0x31e/0xd30
[   89.994457][ T7677]        blkdev_open+0x3a8/0x510
[   89.996525][ T7677]        do_dentry_open+0x953/0x13f0
[   89.998785][ T7677]        vfs_open+0x3b/0x340
[   90.000773][ T7677]        path_openat+0x2ee5/0x3830
[   90.002978][ T7677]        do_filp_open+0x1fa/0x410
[   90.005123][ T7677]        do_sys_openat2+0x121/0x1c0
[   90.007337][ T7677]        __x64_sys_openat+0x138/0x170
[   90.009615][ T7677]        do_syscall_64+0xfa/0x3b0
[   90.011757][ T7677]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.013930][ T7677] 
[   90.013930][ T7677] -> #4 (set->srcu){.+.+}-{0:0}:
[   90.016189][ T7677]        lock_sync+0xba/0x160
[   90.017717][ T7677]        __synchronize_srcu+0x96/0x3a0
[   90.019517][ T7677]        elevator_switch+0x12b/0x640
[   90.021274][ T7677]        elevator_change+0x2d4/0x450
[   90.023461][ T7677]        elevator_set_default+0x186/0x260
[   90.025913][ T7677]        blk_register_queue+0x34e/0x3f0
[   90.028325][ T7677]        __add_disk+0x677/0xd50
[   90.030421][ T7677]        add_disk_fwnode+0xfc/0x480
[   90.032716][ T7677]        nbd_dev_add+0x717/0xae0
[   90.034870][ T7677]        nbd_init+0x168/0x1f0
[   90.036863][ T7677]        do_one_initcall+0x236/0x820
[   90.039052][ T7677]        do_initcall_level+0x104/0x190
[   90.041343][ T7677]        do_initcalls+0x59/0xa0
[   90.043360][ T7677]        kernel_init_freeable+0x334/0x4b0
[   90.045675][ T7677]        kernel_init+0x1d/0x1d0
[   90.047611][ T7677]        ret_from_fork+0x3fc/0x770
[   90.049678][ T7677]        ret_from_fork_asm+0x1a/0x30
[   90.051886][ T7677] 
[   90.051886][ T7677] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[   90.055125][ T7677]        lock_acquire+0x120/0x360
[   90.057117][ T7677]        __mutex_lock+0x187/0x1350
[   90.059148][ T7677]        elevator_change+0x19b/0x450
[   90.061266][ T7677]        elevator_set_none+0x42/0xb0
[   90.063224][ T7677]        blk_mq_update_nr_hw_queues+0x598/0x1aa0
[   90.065277][ T7677]        nbd_start_device+0x17f/0xb10
[   90.067057][ T7677]        nbd_genl_connect+0x135b/0x18f0
[   90.068851][ T7677]        genl_family_rcv_msg_doit+0x215/0x300
[   90.070836][ T7677]        genl_rcv_msg+0x60e/0x790
[   90.072460][ T7677]        netlink_rcv_skb+0x208/0x470
[   90.074636][ T7677]        genl_rcv+0x28/0x40
[   90.076482][ T7677]        netlink_unicast+0x82f/0x9e0
[   90.078797][ T7677]        netlink_sendmsg+0x805/0xb30
[   90.081042][ T7677]        __sock_sendmsg+0x21c/0x270
[   90.083183][ T7677]        ____sys_sendmsg+0x505/0x830
[   90.085458][ T7677]        ___sys_sendmsg+0x21f/0x2a0
[   90.087691][ T7677]        __x64_sys_sendmsg+0x19b/0x260
[   90.089903][ T7677]        do_syscall_64+0xfa/0x3b0
[   90.091714][ T7677]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.094338][ T7677] 
[   90.094338][ T7677] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[   90.097936][ T7677]        lock_acquire+0x120/0x360
[   90.099584][ T7677]        blk_alloc_queue+0x538/0x620
[   90.101344][ T7677]        __blk_mq_alloc_disk+0x15c/0x340
[   90.103222][ T7677]        nbd_dev_add+0x46c/0xae0
[   90.104883][ T7677]        nbd_init+0x168/0x1f0
[   90.106468][ T7677]        do_one_initcall+0x236/0x820
[   90.108222][ T7677]        do_initcall_level+0x104/0x190
[   90.110186][ T7677]        do_initcalls+0x59/0xa0
[   90.111892][ T7677]        kernel_init_freeable+0x334/0x4b0
[   90.113988][ T7677]        kernel_init+0x1d/0x1d0
[   90.115774][ T7677]        ret_from_fork+0x3fc/0x770
[   90.117603][ T7677]        ret_from_fork_asm+0x1a/0x30
[   90.119357][ T7677] 
[   90.119357][ T7677] -> #1 (fs_reclaim){+.+.}-{0:0}:
[   90.121846][ T7677]        lock_acquire+0x120/0x360
[   90.123548][ T7677]        fs_reclaim_acquire+0x72/0x100
[   90.125591][ T7677]        __kmalloc_cache_noprof+0x41/0x3d0
[   90.127646][ T7677]        virtio_transport_do_socket_init+0x57/0x2f0
[   90.129961][ T7677]        vsock_assign_transport+0x5ae/0x770
[   90.132242][ T7677]        vsock_connect+0x5ab/0xe20
[   90.134214][ T7677]        __sys_connect+0x316/0x440
[   90.136104][ T7677]        __x64_sys_connect+0x7a/0x90
[   90.137843][ T7677]        do_syscall_64+0xfa/0x3b0
[   90.139567][ T7677]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.141617][ T7677] 
[   90.141617][ T7677] -> #0 (sk_lock-AF_VSOCK){+.+.}-{0:0}:
[   90.143984][ T7677]        validate_chain+0xb9b/0x2140
[   90.145662][ T7677]        __lock_acquire+0xab9/0xd20
[   90.147395][ T7677]        lock_acquire+0x120/0x360
[   90.149093][ T7677]        lock_sock_nested+0x48/0x100
[   90.150790][ T7677]        vsock_shutdown+0x67/0x2a0
[   90.152454][ T7677]        nbd_mark_nsock_dead+0x2e9/0x560
[   90.154427][ T7677]        sock_shutdown+0x15e/0x260
[   90.156176][ T7677]        nbd_config_put+0x342/0x790
[   90.158246][ T7677]        nbd_genl_connect+0x167c/0x18f0
[   90.160111][ T7677]        genl_family_rcv_msg_doit+0x215/0x300
[   90.162149][ T7677]        genl_rcv_msg+0x60e/0x790
[   90.163859][ T7677]        netlink_rcv_skb+0x208/0x470
[   90.165802][ T7677]        genl_rcv+0x28/0x40
[   90.167307][ T7677]        netlink_unicast+0x82f/0x9e0
[   90.169086][ T7677]        netlink_sendmsg+0x805/0xb30
[   90.170915][ T7677]        __sock_sendmsg+0x21c/0x270
[   90.173052][ T7677]        ____sys_sendmsg+0x505/0x830
[   90.174924][ T7677]        ___sys_sendmsg+0x21f/0x2a0
[   90.176656][ T7677]        __x64_sys_sendmsg+0x19b/0x260
[   90.178453][ T7677]        do_syscall_64+0xfa/0x3b0
[   90.180110][ T7677]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.182253][ T7677] 
[   90.182253][ T7677] other info that might help us debug this:
[   90.182253][ T7677] 
[   90.185935][ T7677] Chain exists of:
[   90.185935][ T7677]   sk_lock-AF_VSOCK --> &cmd->lock --> &nsock->tx_lock
[   90.185935][ T7677] 
[   90.190298][ T7677]  Possible unsafe locking scenario:
[   90.190298][ T7677] 
[   90.192974][ T7677]        CPU0                    CPU1
[   90.194888][ T7677]        ----                    ----
[   90.196878][ T7677]   lock(&nsock->tx_lock);
[   90.198633][ T7677]                                lock(&cmd->lock);
[   90.200780][ T7677]                                lock(&nsock->tx_lock);
[   90.203300][ T7677]   lock(sk_lock-AF_VSOCK);
[   90.204999][ T7677] 
[   90.204999][ T7677]  *** DEADLOCK ***
[   90.204999][ T7677] 
[   90.207732][ T7677] 4 locks held by syz.2.729/7677:
[   90.209402][ T7677]  #0: ffffffff8f59deb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[   90.212269][ T7677]  #1: ffffffff8f59dcc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[   90.215314][ T7677]  #2: ffff8880200eda30 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0
[   90.218793][ T7677]  #3: ffff88813652af70 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260
[   90.221886][ T7677] 
[   90.221886][ T7677] stack backtrace:
[   90.223841][ T7677] CPU: 1 UID: 0 PID: 7677 Comm: syz.2.729 Not tainted syzkaller #0 PREEMPT(full) 
[   90.223850][ T7677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   90.223855][ T7677] Call Trace:
[   90.223859][ T7677]  <TASK>
[   90.223863][ T7677]  dump_stack_lvl+0x189/0x250
[   90.223874][ T7677]  ? __pfx_dump_stack_lvl+0x10/0x10
[   90.223881][ T7677]  ? __pfx__printk+0x10/0x10
[   90.223891][ T7677]  ? print_lock_name+0xde/0x100
[   90.223901][ T7677]  print_circular_bug+0x2ee/0x310
[   90.223909][ T7677]  check_noncircular+0x134/0x160
[   90.223917][ T7677]  validate_chain+0xb9b/0x2140
[   90.223924][ T7677]  ? __lock_acquire+0xab9/0xd20
[   90.223935][ T7677]  ? __mutex_trylock_common+0x153/0x260
[   90.223942][ T7677]  ? look_up_lock_class+0x74/0x170
[   90.223951][ T7677]  ? register_lock_class+0x51/0x320
[   90.223961][ T7677]  __lock_acquire+0xab9/0xd20
[   90.223970][ T7677]  ? vsock_shutdown+0x67/0x2a0
[   90.223978][ T7677]  lock_acquire+0x120/0x360
[   90.223987][ T7677]  ? vsock_shutdown+0x67/0x2a0
[   90.223996][ T7677]  lock_sock_nested+0x48/0x100
[   90.224010][ T7677]  ? vsock_shutdown+0x67/0x2a0
[   90.224017][ T7677]  vsock_shutdown+0x67/0x2a0
[   90.224026][ T7677]  nbd_mark_nsock_dead+0x2e9/0x560
[   90.224033][ T7677]  sock_shutdown+0x15e/0x260
[   90.224044][ T7677]  nbd_config_put+0x342/0x790
[   90.224054][ T7677]  ? device_create_file+0xf4/0x1c0
[   90.224060][ T7677]  nbd_genl_connect+0x167c/0x18f0
[   90.224071][ T7677]  ? __pfx_nbd_genl_connect+0x10/0x10
[   90.224082][ T7677]  ? __nla_parse+0x40/0x60
[   90.224092][ T7677]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   90.224101][ T7677]  genl_family_rcv_msg_doit+0x215/0x300
[   90.224110][ T7677]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   90.224119][ T7677]  ? stack_trace_save+0x9c/0xe0
[   90.224127][ T7677]  genl_rcv_msg+0x60e/0x790
[   90.224135][ T7677]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.224142][ T7677]  ? __pfx_nbd_genl_connect+0x10/0x10
[   90.224152][ T7677]  netlink_rcv_skb+0x208/0x470
[   90.224161][ T7677]  ? __lock_acquire+0xab9/0xd20
[   90.224170][ T7677]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.224177][ T7677]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   90.224188][ T7677]  ? down_read+0x1ad/0x2e0
[   90.224197][ T7677]  genl_rcv+0x28/0x40
[   90.224204][ T7677]  netlink_unicast+0x82f/0x9e0
[   90.224213][ T7677]  ? __pfx_netlink_unicast+0x10/0x10
[   90.224221][ T7677]  ? netlink_sendmsg+0x642/0xb30
[   90.224230][ T7677]  ? skb_put+0x11b/0x210
[   90.224236][ T7677]  netlink_sendmsg+0x805/0xb30
[   90.224247][ T7677]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.224258][ T7677]  ? aa_sock_msg_perm+0xf1/0x1d0
[   90.224264][ T7677]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   90.224271][ T7677]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.224280][ T7677]  __sock_sendmsg+0x21c/0x270
[   90.224289][ T7677]  ____sys_sendmsg+0x505/0x830
[   90.224296][ T7677]  ? __pfx_____sys_sendmsg+0x10/0x10
[   90.224304][ T7677]  ? import_iovec+0x74/0xa0
[   90.224311][ T7677]  ___sys_sendmsg+0x21f/0x2a0
[   90.224318][ T7677]  ? __pfx____sys_sendmsg+0x10/0x10
[   90.224329][ T7677]  ? __fget_files+0x2a/0x420
[   90.224338][ T7677]  ? __fget_files+0x3a0/0x420
[   90.224348][ T7677]  __x64_sys_sendmsg+0x19b/0x260
[   90.224355][ T7677]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   90.224363][ T7677]  ? rcu_is_watching+0x15/0xb0
[   90.224370][ T7677]  ? do_syscall_64+0xbe/0x3b0
[   90.224379][ T7677]  do_syscall_64+0xfa/0x3b0
[   90.224387][ T7677]  ? lockdep_hardirqs_on+0x9c/0x150
[   90.224394][ T7677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.224400][ T7677]  ? exc_page_fault+0x9f/0xf0
[   90.224408][ T7677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.224415][ T7677] RIP: 0033:0x7f455f18ebe9
[   90.224422][ T7677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.224428][ T7677] RSP: 002b:00007f456009d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.224466][ T7677] RAX: ffffffffffffffda RBX: 00007f455f3b5fa0 RCX: 00007f455f18ebe9
[   90.224472][ T7677] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000008
[   90.224476][ T7677] RBP: 00007f455f211e19 R08: 0000000000000000 R09: 0000000000000000
[   90.224480][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.224484][ T7677] R13: 00007f455f3b6038 R14: 00007f455f3b5fa0 R15: 00007ffebe2be848
[   90.224493][ T7677]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   90.408935][ T7677] block nbd1: shutting down sockets
[   90.565958][ T7677] syz_tun (unregistering): left promiscuous mode
[   90.743658][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.804080][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.854003][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.894604][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.118748][   T13] bridge_slave_1: left allmulticast mode
[   91.124312][   T13] bridge_slave_1: left promiscuous mode
[   91.126875][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.131694][   T13] bridge_slave_0: left allmulticast mode
[   91.134120][   T13] bridge_slave_0: left promiscuous mode
[   91.136617][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.143502][   T13] erspan0: left allmulticast mode
[   91.145713][   T13] erspan0: left promiscuous mode
[   91.147956][   T13] bridge0: port 3(erspan0) entered disabled state
[   91.152056][   T13] bridge_slave_1: left allmulticast mode
[   91.154460][   T13] bridge_slave_1: left promiscuous mode
[   91.156450][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.160816][   T13] bridge_slave_0: left allmulticast mode
[   91.162952][   T13] bridge_slave_0: left promiscuous mode
[   91.164808][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.275854][   T13] team0: Port device bridge1 removed
[   91.313769][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.318576][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.323097][   T13] bond0 (unregistering): Released all slaves
[   91.565965][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.568771][   T13] bond_slave_0: left allmulticast mode
[   91.571080][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.574031][   T13] bond_slave_1: left allmulticast mode
[   91.575925][   T13] bond0 (unregistering): Released all slaves
[   91.662798][   T13] IPVS: stopping backup sync thread 6946 ...
[   91.832687][   T13] hsr_slave_0: left promiscuous mode
[   91.835366][   T13] hsr_slave_1: left promiscuous mode
[   91.837949][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.841524][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.845064][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.847798][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.853285][   T13] batadv_slave_0: left promiscuous mode
[   91.857886][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.861576][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.866997][   T13] team0: left promiscuous mode
[   91.869251][   T13] team_slave_0: left promiscuous mode
[   91.871620][   T13] team_slave_1: left promiscuous mode
[   91.878720][   T13] veth1_macvtap: left promiscuous mode
[   91.881188][   T13] veth0_macvtap: left promiscuous mode
[   91.883581][   T13] veth1_vlan: left promiscuous mode
[   91.885777][   T13] veth0_vlan: left promiscuous mode
[   92.002899][   T13] team0 (unregistering): Port device team_slave_1 removed
[   92.016160][   T13] team0 (unregistering): Port device team_slave_0 removed
[   92.265678][   T13] team0 (unregistering): Port device team_slave_1 removed
[   92.284074][   T13] team0 (unregistering): Port device team_slave_0 removed
[   92.898057][   T13] IPVS: stop unused estimator thread 0...
[   92.901468][   T13] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
03:19:11  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000000f6 RBX=0000000000000200 RCX=000000000000083f RDX=0000000000000000
RSI=00000000000000f6 RDI=000000000000083f RBP=ffffc9000461f610 RSP=ffffc9000461f548
R8 =ffffc9000461f5a7 R9 =1ffff920008c3eb4 R10=dffffc0000000000 R11=fffff520008c3eb5
R12=ffffc90007bd9001 R13=0000000000000000 R14=0000000000000000 R15=ffff88804b0314b0
RIP=ffffffff81716179 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff7d9821270 CR3=0000000027520000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001efa RDI=0000000000001efb RBP=00000000000003f8 RSP=ffffc900046ee710
R8 =ffff88801f8e0237 R9 =1ffff11003f1c046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa8c1 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f456009d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32314ff8 CR3=00000001124bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000ff00 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 000055006b736964 XMM03=0000000000000000 0000000000000000
XMM04=ffffff0000000000 0000000000ff0000 XMM05=0000000000000021 000000000057641f
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=0000000000000021 000000000062642e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
