last executing test programs:

1.880605277s ago: executing program 2 (id=285):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.758288171s ago: executing program 2 (id=287):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90)

1.689565665s ago: executing program 2 (id=289):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d", 0x7a}, {&(0x7f0000000680)="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", 0x13a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a8685", 0x1e}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b", 0x52}], 0x2}}], 0x2, 0x4000014)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0xfffffffffffffffa, 0x0, 0x0, 0x0)

819.837464ms ago: executing program 2 (id=312):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xe, r1, 0x4}, 0x38)

700.73999ms ago: executing program 2 (id=314):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, 0x0, &(0x7f0000000140)=""/158}, 0x20)

628.751975ms ago: executing program 2 (id=317):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0)
preadv(r3, &(0x7f00000004c0), 0x0, 0x4, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xfffffffc)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aaa02035b39b7e115ec3c05b8f2b28bc10846686ee1d44d0b0ed8f3b578a87317c2bbd55bb9489"], 0x28}}, 0x0)

470.631841ms ago: executing program 1 (id=323):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e1a, @rand_addr=0x64010104}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x84, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)

369.807841ms ago: executing program 0 (id=325):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f00)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0)

319.507928ms ago: executing program 0 (id=326):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b80), r0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000bc0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0)

319.025962ms ago: executing program 0 (id=327):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0x1000}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90)

300.755829ms ago: executing program 1 (id=328):
r0 = socket(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0)

220.264115ms ago: executing program 0 (id=329):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x2a0, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'netdevsim0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x2}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}, [@common=@inet=@recent1={{}, {0x60, 0x3, 0x1, 0x1, 'syz0\x00', 0x9, [0xffffff00, 0xff, 0x0, 0xff]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{}, {0x3, 0xe8}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x2000}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffffd8)
r0 = socket$inet6(0xa, 0x80001, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x94, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x6f63fe4a4d3f2aa0}, @TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x2, 0xffff7a73, 0x3}}, @TCA_NETEM_LOSS={0x58, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x4, 0x2, 0x7ffffffd, 0x5ba4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x744e, 0x9, 0x0, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x2, 0x10000, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3ff, 0x9c20, 0x7, 0x200}}]}]}}}]}, 0xc4}}, 0x0)
shutdown(r1, 0x2)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000780)=0x587, 0x4)
pipe(&(0x7f00000004c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x38, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r6, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x2)
socket$nl_route(0x10, 0x3, 0x0)

219.44597ms ago: executing program 1 (id=330):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001800c00028005d7160a880000001400018008000100640101"], 0x80}}, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10001)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde4", 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542", 0x5b}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700b", 0x13}], 0x2}}], 0x2, 0x4004894)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000004980)={'syztnl0\x00', &(0x7f0000004900)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x1, 0x1, {{0x8, 0x4, 0x2, 0x3a, 0x20, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0xa, 0x1, [{0x2, 0x2}, {0x0, 0x2}]}]}}}}})
sendmmsg$inet(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="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", 0xdd1}], 0x1}}], 0x1, 0x80)

120.460629ms ago: executing program 1 (id=331):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0)

69.780822ms ago: executing program 1 (id=332):
syz_emit_ethernet(0x76, &(0x7f0000000680)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x29, 0x0, 0x6, 0x1, 0x0, 0x6, 0x67}], "d3897b1f4edff52d"}}}}}}}, 0x0)

50.360138ms ago: executing program 0 (id=333):
syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)

496.127µs ago: executing program 1 (id=334):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60)

0s ago: executing program 0 (id=335):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x3c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1916}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x54}}, 0x40001)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local, 0x6}, 0x1c)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000004010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095c3ce26d4646cee88b211e723d1beb86b0ababdf4928f7bf4b7a8aa3883fc8659a98c66f16c02c527b5d07779eda69d90da87004d4332768ce2aa6ed0c0202a289be3c4cc4c7526c3d355b65fcd2540"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000800}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r8)
ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'dvmrp0\x00', @remote})
setsockopt$X25_QBITINCL(r6, 0x106, 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36278' (ED25519) to the list of known hosts.
syzkaller login: [   56.887232][ T5785] cgroup: Unknown subsys name 'net'
[   56.997712][ T5785] cgroup: Unknown subsys name 'cpuset'
[   57.004207][ T5785] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.094926][ T5785] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.710905][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.724483][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.735053][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.739154][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.741925][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.741954][ T5221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.746111][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.750848][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.754009][ T5221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.765133][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.791681][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.795293][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.798784][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.802320][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.807213][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.117473][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   64.201371][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   64.281513][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.284914][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.288185][ T5832] bridge_slave_0: entered allmulticast mode
[   64.292163][ T5832] bridge_slave_0: entered promiscuous mode
[   64.298987][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.301957][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.305459][ T5832] bridge_slave_1: entered allmulticast mode
[   64.309517][ T5832] bridge_slave_1: entered promiscuous mode
[   64.389540][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.401630][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   64.407860][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.410290][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.413624][ T5833] bridge_slave_0: entered allmulticast mode
[   64.416789][ T5833] bridge_slave_0: entered promiscuous mode
[   64.421425][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.439920][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.442314][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.446684][ T5833] bridge_slave_1: entered allmulticast mode
[   64.450594][ T5833] bridge_slave_1: entered promiscuous mode
[   64.522640][ T5832] team0: Port device team_slave_0 added
[   64.545373][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.554743][ T5832] team0: Port device team_slave_1 added
[   64.559124][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.651159][ T5833] team0: Port device team_slave_0 added
[   64.655542][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.658355][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.661214][ T5843] bridge_slave_0: entered allmulticast mode
[   64.666117][ T5843] bridge_slave_0: entered promiscuous mode
[   64.670612][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.675288][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.684128][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.691509][ T5833] team0: Port device team_slave_1 added
[   64.695349][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.697764][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.700076][ T5843] bridge_slave_1: entered allmulticast mode
[   64.703124][ T5843] bridge_slave_1: entered promiscuous mode
[   64.706338][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.708906][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.719912][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.784303][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.787086][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.796592][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.815062][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.836217][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.839040][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.849879][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.865465][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.876578][ T5832] hsr_slave_0: entered promiscuous mode
[   64.880582][ T5832] hsr_slave_1: entered promiscuous mode
[   64.926686][ T5843] team0: Port device team_slave_0 added
[   64.952620][ T5843] team0: Port device team_slave_1 added
[   64.960413][ T5833] hsr_slave_0: entered promiscuous mode
[   64.963914][ T5833] hsr_slave_1: entered promiscuous mode
[   64.966300][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.968942][ T5833] Cannot create hsr debugfs directory
[   65.039333][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.041964][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.050845][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.069029][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.072465][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.086117][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.221889][ T5843] hsr_slave_0: entered promiscuous mode
[   65.228253][ T5843] hsr_slave_1: entered promiscuous mode
[   65.231552][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.236769][ T5843] Cannot create hsr debugfs directory
[   65.415835][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.427448][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.447453][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.476075][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.537299][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.553643][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.570871][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.577001][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.649586][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.659828][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.668071][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.684558][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.794026][ T5837] Bluetooth: hci1: command tx timeout
[   65.794220][ T5841] Bluetooth: hci0: command tx timeout
[   65.800404][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.845501][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   65.857090][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.874808][ T5841] Bluetooth: hci2: command tx timeout
[   65.891870][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   65.899313][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.902828][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.920839][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.923971][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.942570][ T3038] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.945737][ T3038] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.979992][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.985776][ T3038] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.988663][ T3038] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.048146][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   66.085166][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.088523][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.121228][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.124456][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.285777][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.317496][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.359696][ T5832] veth0_vlan: entered promiscuous mode
[   66.375691][ T5832] veth1_vlan: entered promiscuous mode
[   66.389696][ T5833] veth0_vlan: entered promiscuous mode
[   66.409665][ T5833] veth1_vlan: entered promiscuous mode
[   66.466545][ T5832] veth0_macvtap: entered promiscuous mode
[   66.477041][ T5832] veth1_macvtap: entered promiscuous mode
[   66.485285][ T5833] veth0_macvtap: entered promiscuous mode
[   66.492231][ T5833] veth1_macvtap: entered promiscuous mode
[   66.506611][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.535592][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.554832][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.568109][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.586714][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.601919][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.608546][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.612516][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.617091][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.626860][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.630669][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.635704][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.639409][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.696970][ T5843] veth0_vlan: entered promiscuous mode
[   66.736532][ T5843] veth1_vlan: entered promiscuous mode
[   66.858553][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.861911][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.880203][ T5843] veth0_macvtap: entered promiscuous mode
[   66.898893][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.902095][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.917540][ T5843] veth1_macvtap: entered promiscuous mode
[   66.963583][ T3038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.967298][ T3038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.990184][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.998736][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.007490][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.029245][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.038906][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.042760][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.048603][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.052199][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.094506][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.174094][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.176699][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.256690][ T3578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.259214][ T3578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.262682][ T5904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'.
[   67.367968][ T5906] tipc: Started in network mode
[   67.369786][ T5906] tipc: Node identity 4, cluster identity 4711
[   67.371845][ T5906] tipc: Node number set to 4
[   67.398777][ T5909] wg2: entered promiscuous mode
[   67.492584][ T5914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8'.
[   67.631377][ T5925] delete_channel: no stack
[   67.874153][ T5841] Bluetooth: hci0: command tx timeout
[   67.875654][ T5837] Bluetooth: hci1: command tx timeout
[   67.953545][ T5837] Bluetooth: hci2: command tx timeout
[   68.971605][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'.
[   68.987287][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25'.
[   69.266203][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   69.269429][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   69.293607][ T5838] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   69.363325][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   69.566324][ T6057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.693771][ T6063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.733163][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   69.921939][ T6079] warning: `syz.1.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.953077][ T5837] Bluetooth: hci0: command tx timeout
[   69.965444][ T5837] Bluetooth: hci1: command tx timeout
[   69.975015][ T6081] syz.0.56 uses obsolete (PF_INET,SOCK_PACKET)
[   70.044833][ T5837] Bluetooth: hci2: command tx timeout
[   70.267281][ T5838] IPVS: starting estimator thread 0...
[   70.353852][ T6105] IPVS: using max 62 ests per chain, 148800 per kthread
[   70.410103][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'.
[   70.461658][ T6123] netlink: 'syz.0.73': attribute type 1 has an invalid length.
[   70.465292][ T6123] netlink: 224 bytes leftover after parsing attributes in process `syz.0.73'.
[   70.676153][ T6138] netlink: 'syz.1.79': attribute type 142 has an invalid length.
[   70.990105][ T6157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.87'.
[   71.007266][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.010568][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.188854][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'.
[   71.199369][ T6166] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.204950][ T6166] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.211313][ T6166] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.220194][ T6166] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.258080][ T6171] Cannot find add_set index 0 as target
[   71.354402][ T6175] netlink: 'syz.2.97': attribute type 11 has an invalid length.
[   71.493099][ T6183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'.
[   71.570110][ T6186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.102'.
[   72.035106][ T5837] Bluetooth: hci1: command tx timeout
[   72.036806][ T5841] Bluetooth: hci0: command tx timeout
[   72.051388][ T6218] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   72.123070][ T5841] Bluetooth: hci2: command tx timeout
[   72.206177][ T6226] trusted_key: syz.2.120 sent an empty control message without MSG_MORE.
[   72.262565][ T6232] syz.1.124 uses old SIOCAX25GETINFO
[   72.329731][ T6230] ipt_rpfilter: unknown options
[   72.526409][ T6247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.131'.
[   72.699595][ T6257] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   73.079393][ T6270] syzkaller1: entered promiscuous mode
[   73.081175][ T6270] syzkaller1: entered allmulticast mode
[   73.154523][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   73.166688][ T6272] netlink: 'syz.2.141': attribute type 21 has an invalid length.
[   73.169360][ T6272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.141'.
[   73.205179][    C1] Unknown status report in ack skb
[   73.229597][ T6276] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   73.754581][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.758521][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.820926][ T6309] wg2: left promiscuous mode
[   73.962523][ T6309] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.966315][ T6309] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.969510][ T6309] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.973948][ T6309] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.152776][ T6339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.285438][ T6348] netlink: 'syz.1.172': attribute type 4 has an invalid length.
[   74.348886][ T6354] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.542259][ T6364] netlink: 224 bytes leftover after parsing attributes in process `syz.0.181'.
[   74.584968][ T6364] netlink: 'syz.0.181': attribute type 1 has an invalid length.
[   74.624677][ T6364] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.664703][ T6364] bond1: (slave gretap1): making interface the new active one
[   74.679634][ T6364] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   74.726246][ T6364] syz.0.181 (6364) used greatest stack depth: 20136 bytes left
[   74.841801][ T6377] netlink: 'syz.0.186': attribute type 39 has an invalid length.
[   74.882545][ T5865] bond0: (slave bond_slave_0): interface is now down
[   74.891754][ T6382] bond0: option arp_validate: invalid value (18446744073491447809)
[   74.894629][ T5865] bond0: (slave bond_slave_1): interface is now down
[   74.913901][ T5849] bond0: (slave bond_slave_0): interface is now down
[   74.916165][ T5849] bond0: (slave bond_slave_1): interface is now down
[   74.921056][ T5849] bond0: now running without any active interface!
[   75.024088][ T5849] nci: nci_ntf_packet: unknown ntf opcode 0x206
[   75.195493][ T6398] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.195'.
[   75.779290][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'.
[   75.844624][ T6417] netlink: 32 bytes leftover after parsing attributes in process `syz.1.204'.
[   76.184851][ T6431] x_tables: unsorted underflow at hook 3
[   76.432800][ T6437] xt_CT: You must specify a L4 protocol and not use inversions on it
[   76.521038][ T6440] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   76.680923][ T6447] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.912426][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'.
[   77.088730][ T6465] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   77.187814][ T6469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.225'.
[   77.387037][ T6482] tipc: Started in network mode
[   77.388791][ T6482] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   77.398818][ T6482] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   77.725799][ T6502] tc_dump_action: action bad kind
[   77.906709][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'.
[   78.213911][ T6520] netlink: 'syz.2.247': attribute type 13 has an invalid length.
[   78.233163][ T6520] netlink: 'syz.2.247': attribute type 17 has an invalid length.
[   78.287465][ T6520] gretap0: refused to change device tx_queue_len
[   78.290297][ T6520] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   78.707347][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'.
[   79.047401][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'.
[   79.100567][ T6574] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.115955][ T6574] bond0: (slave bond1): Enslaving as an active interface with a down link
[   79.206422][ T6580] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   79.995490][ T6615] netem: incorrect gi model size
[   79.998042][ T6615] netem: change failed
[   80.099710][ T6620] netlink: 'syz.0.292': attribute type 39 has an invalid length.
[   80.579694][ T6647] x_tables: duplicate underflow at hook 2
[   81.107551][ T6681] Zero length message leads to an empty skb
[   81.196684][ T6686] syzkaller1: entered promiscuous mode
[   81.202326][ T6686] syzkaller1: entered allmulticast mode
[   81.212294][ T6688] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   81.427025][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'.
[   81.714282][ T6714] 
[   81.715136][ T6714] ======================================================
[   81.717450][ T6714] WARNING: possible circular locking dependency detected
[   81.719957][ T6714] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[   81.724236][ T6714] ------------------------------------------------------
[   81.727732][ T6714] syz.0.335/6714 is trying to acquire lock:
[   81.730139][ T6714] ffff8880223c0188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   81.734460][ T6714] 
[   81.734460][ T6714] but task is already holding lock:
[   81.737566][ T6714] ffff8880223c0230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[   81.741668][ T6714] 
[   81.741668][ T6714] which lock already depends on the new lock.
[   81.741668][ T6714] 
[   81.745923][ T6714] 
[   81.745923][ T6714] the existing dependency chain (in reverse order) is:
[   81.749612][ T6714] 
[   81.749612][ T6714] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[   81.753113][ T6714]        lock_acquire+0x120/0x360
[   81.755379][ T6714]        __mutex_lock+0x182/0xe80
[   81.757565][ T6714]        refcount_dec_and_mutex_lock+0x30/0xa0
[   81.760085][ T6714]        nbd_config_put+0x2c/0x790
[   81.762216][ T6714]        nbd_release+0xfe/0x140
[   81.764309][ T6714]        bdev_release+0x536/0x650
[   81.766597][ T6714]        blkdev_release+0x15/0x20
[   81.768914][ T6714]        __fput+0x44c/0xa70
[   81.770910][ T6714]        fput_close_sync+0x119/0x200
[   81.773139][ T6714]        __x64_sys_close+0x7f/0x110
[   81.775419][ T6714]        do_syscall_64+0xfa/0x3b0
[   81.777539][ T6714]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.780485][ T6714] 
[   81.780485][ T6714] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[   81.784031][ T6714]        lock_acquire+0x120/0x360
[   81.786341][ T6714]        __mutex_lock+0x182/0xe80
[   81.788621][ T6714]        __del_gendisk+0x129/0x9e0
[   81.790814][ T6714]        del_gendisk+0xe8/0x160
[   81.792836][ T6714]        nbd_dev_remove_work+0x47/0xe0
[   81.795005][ T6714]        process_scheduled_works+0xae1/0x17b0
[   81.797621][ T6714]        worker_thread+0x8a0/0xda0
[   81.799943][ T6714]        kthread+0x711/0x8a0
[   81.802048][ T6714]        ret_from_fork+0x3fc/0x770
[   81.804190][ T6714]        ret_from_fork_asm+0x1a/0x30
[   81.806317][ T6714] 
[   81.806317][ T6714] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[   81.809751][ T6714]        validate_chain+0xb9b/0x2140
[   81.811904][ T6714]        __lock_acquire+0xab9/0xd20
[   81.814024][ T6714]        lock_acquire+0x120/0x360
[   81.816094][ T6714]        down_write+0x96/0x1f0
[   81.818224][ T6714]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   81.821202][ T6714]        nbd_start_device+0x16c/0xac0
[   81.823520][ T6714]        nbd_genl_connect+0x1250/0x1930
[   81.825774][ T6714]        genl_family_rcv_msg_doit+0x215/0x300
[   81.828272][ T6714]        genl_rcv_msg+0x60e/0x790
[   81.830283][ T6714]        netlink_rcv_skb+0x208/0x470
[   81.832196][ T6714]        genl_rcv+0x28/0x40
[   81.834101][ T6714]        netlink_unicast+0x75c/0x8e0
[   81.835772][ T6714]        netlink_sendmsg+0x805/0xb30
[   81.837557][ T6714]        __sock_sendmsg+0x21c/0x270
[   81.839342][ T6714]        ____sys_sendmsg+0x505/0x830
[   81.841254][ T6714]        ___sys_sendmsg+0x21f/0x2a0
[   81.843722][ T6714]        __x64_sys_sendmsg+0x19b/0x260
[   81.846046][ T6714]        do_syscall_64+0xfa/0x3b0
[   81.848141][ T6714]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.850828][ T6714] 
[   81.850828][ T6714] other info that might help us debug this:
[   81.850828][ T6714] 
[   81.854942][ T6714] Chain exists of:
[   81.854942][ T6714]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[   81.854942][ T6714] 
[   81.861313][ T6714]  Possible unsafe locking scenario:
[   81.861313][ T6714] 
[   81.864593][ T6714]        CPU0                    CPU1
[   81.866787][ T6714]        ----                    ----
[   81.868880][ T6714]   lock(&nbd->config_lock);
[   81.870806][ T6714]                                lock(&disk->open_mutex);
[   81.873719][ T6714]                                lock(&nbd->config_lock);
[   81.876631][ T6714]   lock(&set->update_nr_hwq_lock);
[   81.878956][ T6714] 
[   81.878956][ T6714]  *** DEADLOCK ***
[   81.878956][ T6714] 
[   81.882735][ T6714] 3 locks held by syz.0.335/6714:
[   81.885024][ T6714]  #0: ffffffff8f583df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[   81.888314][ T6714]  #1: ffffffff8f583c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[   81.891938][ T6714]  #2: ffff8880223c0230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[   81.895998][ T6714] 
[   81.895998][ T6714] stack backtrace:
[   81.898748][ T6714] CPU: 0 UID: 0 PID: 6714 Comm: syz.0.335 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   81.898780][ T6714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.898792][ T6714] Call Trace:
[   81.898804][ T6714]  <TASK>
[   81.898815][ T6714]  dump_stack_lvl+0x189/0x250
[   81.898860][ T6714]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.898877][ T6714]  ? __pfx__printk+0x10/0x10
[   81.898900][ T6714]  ? print_lock_name+0xde/0x100
[   81.898921][ T6714]  print_circular_bug+0x2ee/0x310
[   81.898944][ T6714]  check_noncircular+0x134/0x160
[   81.898967][ T6714]  validate_chain+0xb9b/0x2140
[   81.898994][ T6714]  __lock_acquire+0xab9/0xd20
[   81.899012][ T6714]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   81.899032][ T6714]  lock_acquire+0x120/0x360
[   81.899047][ T6714]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   81.899063][ T6714]  ? __mutex_unlock_slowpath+0x1cd/0x700
[   81.899081][ T6714]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   81.899107][ T6714]  down_write+0x96/0x1f0
[   81.899125][ T6714]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   81.899142][ T6714]  ? __pfx_down_write+0x10/0x10
[   81.899161][ T6714]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   81.899180][ T6714]  ? nbd_add_socket+0x688/0x9a0
[   81.899201][ T6714]  ? nbd_add_socket+0x688/0x9a0
[   81.899219][ T6714]  nbd_start_device+0x16c/0xac0
[   81.899238][ T6714]  ? __nla_parse+0x40/0x60
[   81.899256][ T6714]  nbd_genl_connect+0x1250/0x1930
[   81.899276][ T6714]  ? __pfx_nbd_genl_connect+0x10/0x10
[   81.899297][ T6714]  ? __nla_parse+0x40/0x60
[   81.899315][ T6714]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   81.899345][ T6714]  genl_family_rcv_msg_doit+0x215/0x300
[   81.899374][ T6714]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   81.899406][ T6714]  genl_rcv_msg+0x60e/0x790
[   81.899432][ T6714]  ? __pfx_genl_rcv_msg+0x10/0x10
[   81.899454][ T6714]  ? __pfx_nbd_genl_connect+0x10/0x10
[   81.899475][ T6714]  netlink_rcv_skb+0x208/0x470
[   81.899495][ T6714]  ? __pfx_genl_rcv_msg+0x10/0x10
[   81.899517][ T6714]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   81.899540][ T6714]  ? down_read+0x1ad/0x2e0
[   81.899556][ T6714]  genl_rcv+0x28/0x40
[   81.899577][ T6714]  netlink_unicast+0x75c/0x8e0
[   81.899597][ T6714]  netlink_sendmsg+0x805/0xb30
[   81.899618][ T6714]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.899637][ T6714]  ? aa_sock_msg_perm+0x94/0x160
[   81.899659][ T6714]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   81.899726][ T6714]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.899747][ T6714]  __sock_sendmsg+0x21c/0x270
[   81.899773][ T6714]  ____sys_sendmsg+0x505/0x830
[   81.899795][ T6714]  ? __pfx_____sys_sendmsg+0x10/0x10
[   81.899818][ T6714]  ? import_iovec+0x74/0xa0
[   81.899837][ T6714]  ___sys_sendmsg+0x21f/0x2a0
[   81.899856][ T6714]  ? __pfx____sys_sendmsg+0x10/0x10
[   81.899887][ T6714]  ? __fget_files+0x2a/0x420
[   81.899906][ T6714]  ? __fget_files+0x3a0/0x420
[   81.899930][ T6714]  __x64_sys_sendmsg+0x19b/0x260
[   81.899950][ T6714]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   81.899973][ T6714]  ? rcu_is_watching+0x15/0xb0
[   81.899993][ T6714]  ? do_syscall_64+0xbe/0x3b0
[   81.900011][ T6714]  do_syscall_64+0xfa/0x3b0
[   81.900027][ T6714]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.900054][ T6714]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.900071][ T6714]  ? exc_page_fault+0x9f/0xf0
[   81.900095][ T6714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.900112][ T6714] RIP: 0033:0x7f04d018e929
[   81.900131][ T6714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.900147][ T6714] RSP: 002b:00007f04d0f2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   81.900167][ T6714] RAX: ffffffffffffffda RBX: 00007f04d03b5fa0 RCX: 00007f04d018e929
[   81.900179][ T6714] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005
[   81.900190][ T6714] RBP: 00007f04d0210b39 R08: 0000000000000000 R09: 0000000000000000
[   81.900201][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.900212][ T6714] R13: 0000000000000000 R14: 00007f04d03b5fa0 R15: 00007fff905ef5e8
[   81.900230][ T6714]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   82.195298][ T6714] nbd0: detected capacity change from 0 to 127
[   82.366297][   T55] block nbd0: Receive control failed (result -104)
[   82.391059][ T5849] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.439249][ T5849] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.527575][ T5849] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.588959][ T5849] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.685837][ T5849] bridge_slave_1: left allmulticast mode
[   82.688822][ T5849] bridge_slave_1: left promiscuous mode
[   82.691243][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.696449][ T5849] bridge_slave_0: left allmulticast mode
[   82.698973][ T5849] bridge_slave_0: left promiscuous mode
[   82.701407][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.008788][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.014484][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.019929][ T5849] bond0 (unregistering): (slave bond1): Releasing backup interface
[   83.024245][ T5849] bond0 (unregistering): Released all slaves
[   83.114437][ T5849] bond1 (unregistering): Released all slaves
[   83.318344][ T5849] hsr_slave_0: left promiscuous mode
[   83.320439][ T5849] hsr_slave_1: left promiscuous mode
[   83.322388][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.327983][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.330974][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.334017][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.338603][ T5849] veth1_macvtap: left promiscuous mode
[   83.340509][ T5849] veth0_macvtap: left promiscuous mode
[   83.342402][ T5849] veth1_vlan: left promiscuous mode
[   83.345970][ T5849] veth0_vlan: left promiscuous mode
[   83.453125][ T5849] team0 (unregistering): Port device team_slave_1 removed
[   83.469387][ T5849] team0 (unregistering): Port device team_slave_0 removed
[   83.847561][ T5849] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.890800][ T5849] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.938802][ T5849] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.967730][ T5849] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.045518][ T5849] bridge_slave_1: left allmulticast mode
[   84.047878][ T5849] bridge_slave_1: left promiscuous mode
[   84.049858][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.054204][ T5849] bridge_slave_0: left allmulticast mode
[   84.056055][ T5849] bridge_slave_0: left promiscuous mode
[   84.057994][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.138291][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.142325][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.146512][ T5849] bond0 (unregistering): Released all slaves
[   84.207138][ T5849] tipc: Left network mode
[   84.306191][ T5849] hsr_slave_0: left promiscuous mode
[   84.309203][ T5849] hsr_slave_1: left promiscuous mode
[   84.311915][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.317096][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.320493][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.325831][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.332207][ T5849] veth1_macvtap: left promiscuous mode
[   84.335002][ T5849] veth0_macvtap: left promiscuous mode
[   84.337453][ T5849] veth1_vlan: left promiscuous mode
[   84.339657][ T5849] veth0_vlan: left promiscuous mode
[   84.470342][ T5849] team0 (unregistering): Port device team_slave_1 removed
[   84.489367][ T5849] team0 (unregistering): Port device team_slave_0 removed
[   84.757225][ T5849] IPVS: stop unused estimator thread 0...
[   86.353529][   T10] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
00:11:07  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012f3 RDI=00000000000012f4 RBP=00000000000003f8 RSP=ffffc90002c76710
R8 =ffff888106110237 R9 =1ffff11020c22046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98c0 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f04d0f2c6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c29be15 CR3=000000002355e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=14ac000300080000 0002000100068001
XMM02=282b8f5bc0c35e11 7e9bb33520a0aa14 XMM03=878a573b8fedb0d0 441dee86668410bc
XMM04=8994bb55bd2b7c31 878a573b8fedb0d0 XMM05=441dee86668410bc 282b8f5bc0c35e11
XMM06=7e9bb33520a0aa14 14ac000300080000 XMM07=0002000100068001 0014000000020000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fde2e211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=31ba96c28252ae00 RBX=ffffffff81976c78 RCX=31ba96c28252ae00 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f5f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b6f44d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f891817f2d8 CR3=000000002a83e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=14ac000300080000 0002000100068001
XMM02=282b8f5bc0c35e11 7e9bb33520a0aa14 XMM03=878a573b8fedb0d0 441dee86668410bc
XMM04=8994bb55bd2b7c31 878a573b8fedb0d0 XMM05=441dee86668410bc 282b8f5bc0c35e11
XMM06=7e9bb33520a0aa14 14ac000300080000 XMM07=0002000100068001 0014000000020000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fde2e211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
