last executing test programs:

668.657293ms ago: executing program 1 (id=244):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0)

608.39807ms ago: executing program 1 (id=247):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914)

509.851258ms ago: executing program 2 (id=249):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000002b00)="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", 0x8e1}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24008094)

509.782912ms ago: executing program 2 (id=250):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="a000ecf1965e241c", 0x8}, {0x0}], 0x2}}], 0x1, 0x8800)

457.76745ms ago: executing program 1 (id=251):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60000090}, 0x40090)

399.269741ms ago: executing program 1 (id=253):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x400000000000009)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4)

397.628722ms ago: executing program 2 (id=254):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
read(r0, &(0x7f0000000240)=""/36, 0x24)

330.189446ms ago: executing program 1 (id=256):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0)
close(0x4)
connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

330.073313ms ago: executing program 0 (id=257):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x1000097, @local, 0x4, 0x3}, 0x20)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000001c0)=""/77, &(0x7f0000000100)=0x4d)

237.934452ms ago: executing program 0 (id=258):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004000)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x0, @private}})

237.521261ms ago: executing program 2 (id=259):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100c20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x8}, 0x94)
sendmmsg(r1, &(0x7f00000002c0), 0x0, 0x44044)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}]}, 0x10)
socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x300, 0x0)

169.578096ms ago: executing program 1 (id=260):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x9}, 0x8)
sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c)
setsockopt(r0, 0x84, 0x82, 0x0, 0x0)

169.407065ms ago: executing program 0 (id=261):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)

89.766658ms ago: executing program 2 (id=262):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x2, 0x3}, 0x20)

89.605049ms ago: executing program 0 (id=263):
clock_gettime(0x2, &(0x7f0000001140))

73.670998ms ago: executing program 2 (id=264):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)

160.471µs ago: executing program 0 (id=265):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000170001030000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff7f000001ff01000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000f00000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x134}}, 0x0)

0s ago: executing program 0 (id=266):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="1f18e395312d0af6d99feefe56956f0f", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x5)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:8073' (ED25519) to the list of known hosts.
syzkaller login: [   56.395538][ T5818] cgroup: Unknown subsys name 'net'
[   56.536813][ T5818] cgroup: Unknown subsys name 'cpuset'
[   56.542754][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.183825][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.086138][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.092887][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.096259][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.100306][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.104021][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.124849][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.128438][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.131637][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.135797][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.139129][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.156142][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.159810][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.164252][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.174054][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.177301][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.397358][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   64.443752][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   64.526263][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.528845][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.531800][ T5850] bridge_slave_0: entered allmulticast mode
[   64.536298][ T5850] bridge_slave_0: entered promiscuous mode
[   64.540649][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.543267][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.545873][ T5850] bridge_slave_1: entered allmulticast mode
[   64.548775][ T5850] bridge_slave_1: entered promiscuous mode
[   64.551440][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   64.617525][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.619789][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.622107][ T5856] bridge_slave_0: entered allmulticast mode
[   64.625989][ T5856] bridge_slave_0: entered promiscuous mode
[   64.629500][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.631731][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.634240][ T5856] bridge_slave_1: entered allmulticast mode
[   64.637112][ T5856] bridge_slave_1: entered promiscuous mode
[   64.641902][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.666851][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.710523][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.714968][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.717692][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.720375][ T5854] bridge_slave_0: entered allmulticast mode
[   64.724241][ T5854] bridge_slave_0: entered promiscuous mode
[   64.727625][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.729809][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.731987][ T5854] bridge_slave_1: entered allmulticast mode
[   64.736246][ T5854] bridge_slave_1: entered promiscuous mode
[   64.748840][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.780343][ T5850] team0: Port device team_slave_0 added
[   64.795236][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.799119][ T5850] team0: Port device team_slave_1 added
[   64.803252][ T5856] team0: Port device team_slave_0 added
[   64.807466][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.813860][ T5856] team0: Port device team_slave_1 added
[   64.864159][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.866301][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.874668][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.879627][ T5854] team0: Port device team_slave_0 added
[   64.891738][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.894986][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.904221][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.909034][ T5854] team0: Port device team_slave_1 added
[   64.911672][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.916339][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.924751][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.952446][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.955115][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.965307][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.991051][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.995074][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.003082][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.011074][ T5850] hsr_slave_0: entered promiscuous mode
[   65.014097][ T5850] hsr_slave_1: entered promiscuous mode
[   65.017415][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.020060][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.031022][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.081808][ T5856] hsr_slave_0: entered promiscuous mode
[   65.084594][ T5856] hsr_slave_1: entered promiscuous mode
[   65.086723][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   65.088547][ T5856] Cannot create hsr debugfs directory
[   65.114268][ T5854] hsr_slave_0: entered promiscuous mode
[   65.116555][ T5854] hsr_slave_1: entered promiscuous mode
[   65.118703][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   65.120485][ T5854] Cannot create hsr debugfs directory
[   65.350531][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.357620][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.363094][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.375476][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.408800][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.411311][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.414144][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.416358][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.428065][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.437326][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.440865][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.455792][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.473021][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.487991][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.531026][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.536967][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.545041][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.553633][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.587975][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.610967][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   65.625154][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.627479][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.649698][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.651930][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.676679][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.685804][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.707607][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   65.716792][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   65.729977][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.732299][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.738690][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.741057][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.758561][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.760711][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.777919][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.780157][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.869256][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.877120][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.917558][ T5850] veth0_vlan: entered promiscuous mode
[   65.924204][ T5850] veth1_vlan: entered promiscuous mode
[   65.975178][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.978340][ T5850] veth0_macvtap: entered promiscuous mode
[   65.984425][ T5850] veth1_macvtap: entered promiscuous mode
[   66.010180][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.015770][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.035943][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.054771][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.069743][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.074173][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.084498][ T5856] veth0_vlan: entered promiscuous mode
[   66.086842][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.117298][ T5856] veth1_vlan: entered promiscuous mode
[   66.163784][   T55] Bluetooth: hci1: command tx timeout
[   66.165722][ T5853] Bluetooth: hci0: command tx timeout
[   66.189494][ T5854] veth0_vlan: entered promiscuous mode
[   66.199546][ T5854] veth1_vlan: entered promiscuous mode
[   66.205008][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.208402][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.208703][ T5856] veth0_macvtap: entered promiscuous mode
[   66.232781][ T5853] Bluetooth: hci2: command tx timeout
[   66.244175][ T5856] veth1_macvtap: entered promiscuous mode
[   66.249891][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.255048][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.282691][ T5854] veth0_macvtap: entered promiscuous mode
[   66.287687][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.299910][ T5854] veth1_macvtap: entered promiscuous mode
[   66.310361][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.320751][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.347295][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.354187][ T5878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.369798][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.377595][ T5878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.380904][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.402424][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.408973][ T5878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.418375][ T5861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.438009][ T5861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.452006][ T5861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.556695][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.559758][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.569513][ T5918] netlink: 'syz.2.4': attribute type 10 has an invalid length.
[   66.578779][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.582066][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.591688][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.594625][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.597565][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.600316][ T5918] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.608239][ T5918] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   66.612603][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.615329][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.684400][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.689538][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.695672][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.698703][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.824703][ T5930] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8'.
[   66.833803][ T5930] hsr_slave_0: left promiscuous mode
[   66.847964][ T5930] hsr_slave_1: left promiscuous mode
[   67.869393][ T5956] bridge1: entered promiscuous mode
[   67.871076][ T5956] bridge1: entered allmulticast mode
[   67.875137][ T5956] team0: Port device bridge1 added
[   68.020106][ T5964] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   68.028361][ T5964] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   68.233449][ T5853] Bluetooth: hci1: command tx timeout
[   68.243143][ T5853] Bluetooth: hci0: command tx timeout
[   68.322538][ T5853] Bluetooth: hci2: command tx timeout
[   68.423584][ T5994] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.429759][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'.
[   68.439904][ T5994] bond_slave_0: entered promiscuous mode
[   68.444861][ T5994] bond_slave_0: entered allmulticast mode
[   69.191407][ T6011] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   69.242790][ T6011] bond0: (slave bridge0): Releasing backup interface
[   69.248924][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.252140][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.266688][ T6011] bridge_slave_0: left allmulticast mode
[   69.268755][ T6011] bridge_slave_0: left promiscuous mode
[   69.270622][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.276508][ T6011] bridge_slave_1: left allmulticast mode
[   69.278251][ T6011] bridge_slave_1: left promiscuous mode
[   69.280476][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.290685][ T6011] bond0: (slave bond_slave_0): Releasing backup interface
[   69.297013][ T6011] bond0: (slave bond_slave_1): Releasing backup interface
[   69.308487][ T6011] team0: Port device team_slave_0 removed
[   69.315659][ T6011] team0: Port device team_slave_1 removed
[   69.318178][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.320673][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.323576][ T6022] netlink: 'syz.2.41': attribute type 10 has an invalid length.
[   69.328175][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.330602][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.343796][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'.
[   69.379473][ T6022] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   69.386411][ T6022] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   69.855259][ T6041] sctp: [Deprecated]: syz.1.49 (pid 6041) Use of int in max_burst socket option.
[   69.855259][ T6041] Use struct sctp_assoc_value instead
[   69.983455][   T10] cfg80211: failed to load regulatory.db
[   69.997749][ T6011] syz.2.41 (6011) used greatest stack depth: 19864 bytes left
[   70.323070][ T5853] Bluetooth: hci0: command tx timeout
[   70.324731][ T5853] Bluetooth: hci1: command tx timeout
[   70.393211][   T55] Bluetooth: hci2: command tx timeout
[   70.598144][ T6071] netlink: 'syz.1.61': attribute type 12 has an invalid length.
[   70.692790][ T6077] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   70.694888][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'.
[   70.699514][ T6075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.63'.
[   70.715080][ T6075] gretap1: entered promiscuous mode
[   71.276263][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.279034][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.361637][ T6098] tipc: Started in network mode
[   71.364797][ T6098] tipc: Node identity d6a52523d3e9, cluster identity 4711
[   71.370234][ T6098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.374616][ T6098] syzkaller0: entered promiscuous mode
[   71.376781][ T6098] syzkaller0: entered allmulticast mode
[   71.413940][ T6098] tipc: Resetting bearer <eth:syzkaller0>
[   71.433528][ T6097] tipc: Resetting bearer <eth:syzkaller0>
[   71.446334][ T6097] tipc: Disabling bearer <eth:syzkaller0>
[   71.616357][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.77'.
[   72.412584][   T55] Bluetooth: hci1: command tx timeout
[   72.414730][   T55] Bluetooth: hci0: command tx timeout
[   72.474147][   T55] Bluetooth: hci2: command tx timeout
[   73.167005][ T6032] Set syz1 is full, maxelem 65536 reached
[   73.306503][ T6155] syz.2.97 uses obsolete (PF_INET,SOCK_PACKET)
[   73.333898][ T6155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.97'.
[   74.115379][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'.
[   74.185577][ T6226] netlink: 'syz.1.130': attribute type 1 has an invalid length.
[   74.188770][ T6226] netlink: 600 bytes leftover after parsing attributes in process `syz.1.130'.
[   74.377702][ T6237] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   74.381043][ T6237] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   74.503171][ T6244] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.566222][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'.
[   74.585319][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'.
[   74.900269][ T6259] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   75.055197][ T6277] netlink: 'syz.2.149': attribute type 1 has an invalid length.
[   75.137628][ T6282] netlink: 'syz.2.151': attribute type 2 has an invalid length.
[   75.145963][ T6282] netlink: 52 bytes leftover after parsing attributes in process `syz.2.151'.
[   75.579770][ T6313] netlink: 'syz.0.165': attribute type 7 has an invalid length.
[   75.696116][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'.
[   75.829334][ T6332] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.175'.
[   76.923521][ T6415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.206'.
[   76.928511][ T6415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.206'.
[   78.158013][ T6499] IPVS: length: 209 != 24
[   78.244941][ T6504] netlink: 'syz.2.246': attribute type 29 has an invalid length.
[   78.255591][ T6504] netlink: 'syz.2.246': attribute type 29 has an invalid length.
[   78.798174][ T6546] __nla_validate_parse: 2 callbacks suppressed
[   78.798188][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.264'.
[   78.823950][   T12] ------------[ cut here ]------------
[   78.826312][   T12] RTNL: assertion failed at ./include/net/netdev_lock.h (72)
[   78.831603][   T12] WARNING: CPU: 0 PID: 12 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350
[   78.836107][   T12] Modules linked in:
[   78.837821][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   78.843649][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   78.847500][   T12] Workqueue: bond0 bond_mii_monitor
[   78.849216][   T12] RIP: 0010:__linkwatch_sync_dev+0x303/0x350
[   78.851226][   T12] Code: 7c fe ff ff e8 be 23 55 f8 c6 05 66 b7 22 06 01 90 48 c7 c7 20 a7 94 8c 48 c7 c6 2c ba 9f 8d ba 48 00 00 00 e8 1e c2 18 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff
[   78.858524][   T12] RSP: 0018:ffffc900000f7670 EFLAGS: 00010246
[   78.860902][   T12] RAX: 92c4f4611d566200 RBX: ffff888027f7c000 RCX: ffff88801ba8d640
[   78.864064][   T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[   78.867079][   T12] RBP: 0000000000000000 R08: ffff88804b024253 R09: 1ffff1100960484a
[   78.870149][   T12] R10: dffffc0000000000 R11: ffffed100960484b R12: 1ffff11004fef85d
[   78.873701][   T12] R13: dffffc0000000000 R14: ffffffff8cb04e68 R15: 0000000000000000
[   78.876820][   T12] FS:  0000000000000000(0000) GS:ffff8880b8624000(0000) knlGS:0000000000000000
[   78.880183][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   78.882856][   T12] CR2: 00007fe8762e56c0 CR3: 0000000027062000 CR4: 00000000000006f0
[   78.885985][   T12] Call Trace:
[   78.887362][   T12]  <TASK>
[   78.888716][   T12]  ? ethtool_op_get_link+0xd/0x70
[   78.890759][   T12]  ethtool_op_get_link+0x15/0x70
[   78.892913][   T12]  bond_check_dev_link+0x447/0x6c0
[   78.894905][   T12]  ? __pfx_bond_check_dev_link+0x10/0x10
[   78.897010][   T12]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[   78.899415][   T12]  bond_mii_monitor+0x428/0x2e00
[   78.901314][   T12]  ? bond_mii_monitor+0x153/0x2e00
[   78.903409][   T12]  ? rcu_is_watching+0x15/0xb0
[   78.905258][   T12]  ? __pfx_bond_mii_monitor+0x10/0x10
[   78.907349][   T12]  ? register_lock_class+0x51/0x320
[   78.909364][   T12]  ? __lock_acquire+0xab9/0xd20
[   78.911305][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   78.913628][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   78.915611][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   78.917824][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   78.920049][   T12]  process_scheduled_works+0xae1/0x17b0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   78.922348][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[   78.924814][   T12]  worker_thread+0x8a0/0xda0
[   78.926634][   T12]  kthread+0x711/0x8a0
[   78.928253][   T12]  ? __pfx_worker_thread+0x10/0x10
[   78.930269][   T12]  ? __pfx_kthread+0x10/0x10
[   78.932614][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   78.934645][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[   78.936699][   T12]  ? __pfx_kthread+0x10/0x10
[   78.938524][   T12]  ret_from_fork+0x3fc/0x770
[   78.940335][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[   78.942428][   T12]  ? __switch_to_asm+0x39/0x70
[   78.944297][   T12]  ? __switch_to_asm+0x33/0x70
[   78.946131][   T12]  ? __pfx_kthread+0x10/0x10
[   78.947937][   T12]  ret_from_fork_asm+0x1a/0x30
[   78.949841][   T12]  </TASK>
[   78.951073][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   78.953950][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   78.958529][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   78.962391][   T12] Workqueue: bond0 bond_mii_monitor
[   78.964433][   T12] Call Trace:
[   78.965761][   T12]  <TASK>
[   78.966945][   T12]  dump_stack_lvl+0x99/0x250
[   78.968808][   T12]  ? __asan_memcpy+0x40/0x70
[   78.970685][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[   78.972710][   T12]  ? __pfx__printk+0x10/0x10
[   78.974565][   T12]  vpanic+0x281/0x750
[   78.976168][   T12]  ? __pfx__printk+0x10/0x10
[   78.978004][   T12]  ? __pfx_vpanic+0x10/0x10
[   78.979803][   T12]  ? is_bpf_text_address+0x292/0x2b0
[   78.981893][   T12]  panic+0xb9/0xc0
[   78.983379][   T12]  ? __pfx_panic+0x10/0x10
[   78.985135][   T12]  __warn+0x31b/0x4b0
[   78.986739][   T12]  ? __linkwatch_sync_dev+0x303/0x350
[   78.988890][   T12]  ? __linkwatch_sync_dev+0x303/0x350
[   78.990964][   T12]  report_bug+0x2be/0x4f0
[   78.992639][   T12]  ? __linkwatch_sync_dev+0x303/0x350
[   78.994718][   T12]  ? __linkwatch_sync_dev+0x303/0x350
[   78.996764][   T12]  ? __linkwatch_sync_dev+0x305/0x350
[   78.998876][   T12]  handle_bug+0x84/0x160
[   79.000566][   T12]  exc_invalid_op+0x1a/0x50
[   79.002377][   T12]  asm_exc_invalid_op+0x1a/0x20
[   79.004258][   T12] RIP: 0010:__linkwatch_sync_dev+0x303/0x350
[   79.006570][   T12] Code: 7c fe ff ff e8 be 23 55 f8 c6 05 66 b7 22 06 01 90 48 c7 c7 20 a7 94 8c 48 c7 c6 2c ba 9f 8d ba 48 00 00 00 e8 1e c2 18 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff
[   79.013951][   T12] RSP: 0018:ffffc900000f7670 EFLAGS: 00010246
[   79.016314][   T12] RAX: 92c4f4611d566200 RBX: ffff888027f7c000 RCX: ffff88801ba8d640
[   79.019406][   T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[   79.022430][   T12] RBP: 0000000000000000 R08: ffff88804b024253 R09: 1ffff1100960484a
[   79.025432][   T12] R10: dffffc0000000000 R11: ffffed100960484b R12: 1ffff11004fef85d
[   79.028533][   T12] R13: dffffc0000000000 R14: ffffffff8cb04e68 R15: 0000000000000000
[   79.031720][   T12]  ? ethtool_op_get_link+0xd/0x70
[   79.033694][   T12]  ethtool_op_get_link+0x15/0x70
[   79.035655][   T12]  bond_check_dev_link+0x447/0x6c0
[   79.037610][   T12]  ? __pfx_bond_check_dev_link+0x10/0x10
[   79.039819][   T12]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[   79.042312][   T12]  bond_mii_monitor+0x428/0x2e00
[   79.044244][   T12]  ? bond_mii_monitor+0x153/0x2e00
[   79.046240][   T12]  ? rcu_is_watching+0x15/0xb0
[   79.048124][   T12]  ? __pfx_bond_mii_monitor+0x10/0x10
[   79.050236][   T12]  ? register_lock_class+0x51/0x320
[   79.052158][   T12]  ? __lock_acquire+0xab9/0xd20
[   79.054105][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   79.056313][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   79.058320][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   79.060505][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   79.062701][   T12]  process_scheduled_works+0xae1/0x17b0
[   79.064854][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[   79.067229][   T12]  worker_thread+0x8a0/0xda0
[   79.069042][   T12]  kthread+0x711/0x8a0
[   79.070671][   T12]  ? __pfx_worker_thread+0x10/0x10
[   79.072699][   T12]  ? __pfx_kthread+0x10/0x10
[   79.074529][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   79.076556][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.078596][   T12]  ? __pfx_kthread+0x10/0x10
[   79.080095][   T12]  ret_from_fork+0x3fc/0x770
[   79.081508][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[   79.083044][   T12]  ? __switch_to_asm+0x39/0x70
[   79.084719][   T12]  ? __switch_to_asm+0x33/0x70
[   79.086569][   T12]  ? __pfx_kthread+0x10/0x10
[   79.087970][   T12]  ret_from_fork_asm+0x1a/0x30
[   79.089745][   T12]  </TASK>
[   79.091700][   T12] Kernel Offset: disabled
[   79.093444][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:26:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f6e10
R8 =ffff888020970237 R9 =1ffff1100412e046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18dc R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe8762e56c0 CR3=0000000027062000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007faa36387498 00007faa36387470 XMM03=00007faa363874a8 00007faa363874a0
XMM04=00007faa36eed100 00007faa36387460 XMM05=00007faa36387478 00007faa363874c0
XMM06=00007faa363874b8 00007faa363874b0 XMM07=00007faa363874a8 00007faa363874a0
XMM08=0000000000000000 00007faa36212ee7 XMM09=0000000000000000 00007faa36212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44d6b RBX=1ffff11009608341 RCX=ffff888106b15640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000325f6c0 RSP=ffffc9000325f540
R8 =ffffffff8fa34237 R9 =1ffffffff1f46846 R10=dffffc0000000000 R11=fffffbfff1f46847
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d53 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555843b500 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a0ff59b000 CR3=000000010f63c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
