last executing test programs:

1.398388686s ago: executing program 2 (id=165):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000d0927bd7000ffdbdf2500000000", @ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30)
sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000580)=""/154, 0x9a}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000005}}], 0x48, 0x8004}, 0x0)

1.30946872s ago: executing program 0 (id=167):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb)
sendto$inet(r0, 0x0, 0x0, 0x24000001, 0x0, 0x0)

1.308815345s ago: executing program 2 (id=169):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000), 0x4)
sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f00000003c0)="d682f39c86fed22b0fb1e398412d7958da07dc0f18de72076fdbd11017c1a40f6f56bd41d59dcbabc1440634b9c7d6c12128a25de47cd5f85b9eecdacf10621e9dafb7a304208d2a10a3c99837", 0x4d}}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002e09000018000180140002006261746164765f736c617665"], 0x2c}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, r6}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r7, 0xc, 0x1, 0x2, &(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000700)=[0x0, 0x0], <r9=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback=r8, r7, 0x6, 0x0, 0x0, @void, @value=r8, @void, @void, r9}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback, r4, 0x29, 0x20, 0x0, @void, @void, @void, @value, r9}, 0x20)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xfc}, 0x2)

970.538735ms ago: executing program 1 (id=173):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
getpeername$packet(r0, 0x0, &(0x7f0000000280))

970.304182ms ago: executing program 1 (id=174):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061136c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48)

910.440118ms ago: executing program 1 (id=175):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
close(0x3)

910.018175ms ago: executing program 1 (id=176):
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r0, 0x80)
accept$netrom(r0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f00000045c0))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40))
socket(0x10, 0x2, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0)

579.631217ms ago: executing program 2 (id=177):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x4, 0x12b, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0)

450.317998ms ago: executing program 0 (id=178):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

450.087612ms ago: executing program 0 (id=179):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

449.68104ms ago: executing program 0 (id=180):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f0, 0x308, 0x1f8, 0x110, 0x308, 0x1f8, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffff00, 0x13, 0x0, {@mac=@remote, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0xfe01, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@local, @remote, 0xffffffff, 0x0, 0x0, 0x9, {@mac}, {@mac=@random="7c3a86e2977f", {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffff, 'veth0_to_bond\x00', 'geneve1\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440)

350.511994ms ago: executing program 0 (id=181):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000340)={0x10003, {{0x2, 0x800, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0xa9)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)

350.308995ms ago: executing program 0 (id=182):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)

139.901798ms ago: executing program 2 (id=183):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94)

139.701484ms ago: executing program 2 (id=184):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x15, 0x8, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

80.069455ms ago: executing program 2 (id=185):
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xcd, 0x0, 0x5c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)
sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x20, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x5104eec89c600d4b)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "e9c9cf623465aab2"}, 0x28)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x90)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)

282.164µs ago: executing program 1 (id=186):
syz_emit_ethernet(0x27, &(0x7f0000000000)={@multicast, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x3}}, {@generic={0x88ca, "c82bfb8f5713876856022cd264abbe4b98"}}}, 0x0)

0s ago: executing program 1 (id=187):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31813' (ED25519) to the list of known hosts.
syzkaller login: [   48.585541][ T5763] cgroup: Unknown subsys name 'net'
[   48.720855][ T5763] cgroup: Unknown subsys name 'cpuset'
[   48.724993][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.452521][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.754299][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.757499][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.760207][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.763822][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.767221][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.784278][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.796114][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.800929][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.805243][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.816658][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.833476][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.837711][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.841071][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.845089][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.848717][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.991891][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   55.141390][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   55.146506][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.149527][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.152717][ T5831] bridge_slave_0: entered allmulticast mode
[   55.157182][ T5831] bridge_slave_0: entered promiscuous mode
[   55.164270][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.167800][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.170838][ T5831] bridge_slave_1: entered allmulticast mode
[   55.174687][ T5831] bridge_slave_1: entered promiscuous mode
[   55.227139][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.238102][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.245215][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   55.295299][ T5831] team0: Port device team_slave_0 added
[   55.327286][ T5831] team0: Port device team_slave_1 added
[   55.329649][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.332486][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.335220][ T5835] bridge_slave_0: entered allmulticast mode
[   55.339504][ T5835] bridge_slave_0: entered promiscuous mode
[   55.371035][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.373638][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.376392][ T5835] bridge_slave_1: entered allmulticast mode
[   55.379263][ T5835] bridge_slave_1: entered promiscuous mode
[   55.394775][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.397996][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.408658][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.436729][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.439735][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.450341][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.468985][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.471592][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.473892][ T5838] bridge_slave_0: entered allmulticast mode
[   55.477156][ T5838] bridge_slave_0: entered promiscuous mode
[   55.494675][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.504942][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.508278][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.510600][ T5838] bridge_slave_1: entered allmulticast mode
[   55.513405][ T5838] bridge_slave_1: entered promiscuous mode
[   55.519793][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.592684][ T5831] hsr_slave_0: entered promiscuous mode
[   55.596475][ T5831] hsr_slave_1: entered promiscuous mode
[   55.602236][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.609398][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.614570][ T5835] team0: Port device team_slave_0 added
[   55.618933][ T5835] team0: Port device team_slave_1 added
[   55.672219][ T5838] team0: Port device team_slave_0 added
[   55.676234][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.679186][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.691028][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.700941][ T5838] team0: Port device team_slave_1 added
[   55.704209][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.708879][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.719175][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.769804][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.772073][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.781269][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.787480][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.789717][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.798640][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.850913][ T5835] hsr_slave_0: entered promiscuous mode
[   55.854038][ T5835] hsr_slave_1: entered promiscuous mode
[   55.857251][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.860572][ T5835] Cannot create hsr debugfs directory
[   55.898561][ T5838] hsr_slave_0: entered promiscuous mode
[   55.901265][ T5838] hsr_slave_1: entered promiscuous mode
[   55.903643][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.906738][ T5838] Cannot create hsr debugfs directory
[   56.090982][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.108452][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.115686][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.127025][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.160229][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.167727][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.175145][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.182411][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.242369][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.250144][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.254249][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.270623][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.354175][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.370264][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.389550][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   56.404633][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.409158][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   56.425114][  T189] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.427954][  T189] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.432091][  T189] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.434438][  T189] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.439906][  T189] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.442159][  T189] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.455199][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   56.459544][  T189] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.461857][  T189] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.485374][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.488548][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.494545][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.497647][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.515079][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.519052][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.754146][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.791495][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.809591][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.857886][ T5834] Bluetooth: hci0: command tx timeout
[   56.857889][   T54] Bluetooth: hci2: command tx timeout
[   56.862762][ T5836] Bluetooth: hci1: command tx timeout
[   56.870189][ T5835] veth0_vlan: entered promiscuous mode
[   56.885258][ T5835] veth1_vlan: entered promiscuous mode
[   56.909437][ T5838] veth0_vlan: entered promiscuous mode
[   56.918789][ T5831] veth0_vlan: entered promiscuous mode
[   56.927935][ T5831] veth1_vlan: entered promiscuous mode
[   56.941891][ T5838] veth1_vlan: entered promiscuous mode
[   56.990100][ T5831] veth0_macvtap: entered promiscuous mode
[   57.002961][ T5831] veth1_macvtap: entered promiscuous mode
[   57.010897][ T5835] veth0_macvtap: entered promiscuous mode
[   57.027572][ T5835] veth1_macvtap: entered promiscuous mode
[   57.031447][ T5838] veth0_macvtap: entered promiscuous mode
[   57.038929][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.049701][ T5838] veth1_macvtap: entered promiscuous mode
[   57.054072][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.067716][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.070505][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.073190][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.076169][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.087230][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.094566][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.103635][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.114773][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.122599][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.125398][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.130025][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.133207][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.150062][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.153067][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.158165][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.161871][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.242404][  T189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.245263][  T189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.248612][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.251399][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.286116][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.290576][  T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.293577][  T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.300836][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.332702][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.341722][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.361470][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.364097][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.371930][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.690084][ T5923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   57.692643][ T5923] IPv6: NLM_F_CREATE should be set when creating new route
[   57.694964][ T5923] IPv6: NLM_F_CREATE should be set when creating new route
[   57.776212][ T5929] Zero length message leads to an empty skb
[   57.840537][ T5935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20'.
[   57.844591][ T5933] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.849168][ T5935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20'.
[   58.006122][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'.
[   58.021253][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'.
[   58.025531][ T5945] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   58.032691][ T5945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.191918][ T5961] netlink: 'syz.0.33': attribute type 23 has an invalid length.
[   58.527743][ T5995] warning: `syz.2.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.682077][ T6006] netlink: 'syz.2.51': attribute type 1 has an invalid length.
[   58.728090][ T6011] syz.2.53 uses obsolete (PF_INET,SOCK_PACKET)
[   58.936523][ T5836] Bluetooth: hci1: command tx timeout
[   58.938839][   T54] Bluetooth: hci0: command tx timeout
[   58.938920][ T5834] Bluetooth: hci2: command tx timeout
[   59.064596][ T6017] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   59.231585][ T6023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.58'.
[   59.383369][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.488773][ T6036] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   59.611158][ T6046] netlink: 'syz.1.67': attribute type 1 has an invalid length.
[   59.678858][ T6046] veth3: entered promiscuous mode
[   59.714640][ T6049] erspan0: entered allmulticast mode
[   60.543383][ T6071] Illegal XDP return value 4294967274 on prog  (id 14) dev N/A, expect packet loss!
[   60.551417][ T6070] netlink: 'syz.0.75': attribute type 13 has an invalid length.
[   60.554801][ T6070] netlink: 'syz.0.75': attribute type 17 has an invalid length.
[   60.595041][ T6070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.769379][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.772268][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.889357][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.897058][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.961350][ T6075] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.968689][ T6075] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.971691][ T6075] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.975626][ T6075] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.015927][ T5834] Bluetooth: hci0: command tx timeout
[   61.018155][ T5834] Bluetooth: hci1: command tx timeout
[   61.019858][   T54] Bluetooth: hci2: command tx timeout
[   61.067183][ T6081] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   61.277884][ T6111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.92'.
[   61.279601][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'.
[   61.281577][ T6111] netlink: 152 bytes leftover after parsing attributes in process `syz.0.92'.
[   62.196394][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'.
[   62.396578][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'.
[   62.400224][ T6139] bridge_slave_1: left allmulticast mode
[   62.402408][ T6139] bridge_slave_1: left promiscuous mode
[   62.404733][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.422479][ T6139] bridge_slave_0: left allmulticast mode
[   62.425646][ T6139] bridge_slave_0: left promiscuous mode
[   62.432667][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.891315][ T6183] __nla_validate_parse: 2 callbacks suppressed
[   62.891325][ T6183] netlink: 1 bytes leftover after parsing attributes in process `syz.0.127'.
[   62.983439][ T6192] netlink: 108 bytes leftover after parsing attributes in process `syz.1.130'.
[   63.096689][ T5836] Bluetooth: hci1: command tx timeout
[   63.096734][ T5834] Bluetooth: hci0: command tx timeout
[   63.107732][ T5834] Bluetooth: hci2: command tx timeout
[   63.143395][ T6202] trusted_key: syz.1.135 sent an empty control message without MSG_MORE.
[   63.531721][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.142'.
[   63.534716][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'.
[   63.569146][ T6220] netlink: 'syz.2.142': attribute type 10 has an invalid length.
[   63.572400][ T6220] bridge0: port 1(team0) entered blocking state
[   63.574981][ T6220] bridge0: port 1(team0) entered disabled state
[   63.578377][ T6220] team0: entered allmulticast mode
[   63.580591][ T6220] team_slave_0: entered allmulticast mode
[   63.582867][ T6220] team_slave_1: entered allmulticast mode
[   63.588220][ T6220] team_slave_0: entered promiscuous mode
[   63.590605][ T6220] team_slave_1: entered promiscuous mode
[   63.594630][ T6220] bridge0: port 1(team0) entered blocking state
[   63.597742][ T6220] bridge0: port 1(team0) entered forwarding state
[   64.303674][ T6246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.815920][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.165'.
[   65.179997][ T5834] Bluetooth: hci2: command 0x0405 tx timeout
[   66.238265][ T6318] 
[   66.239428][ T6318] =============================
[   66.241419][ T6318] WARNING: suspicious RCU usage
[   66.243025][ T6318] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[   66.246679][ T6318] -----------------------------
[   66.248256][ T6318] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[   66.251122][ T6318] 
[   66.251122][ T6318] other info that might help us debug this:
[   66.251122][ T6318] 
[   66.254752][ T6318] 
[   66.254752][ T6318] rcu_scheduler_active = 2, debug_locks = 1
[   66.257504][ T6318] 1 lock held by syz.1.187/6318:
[   66.259575][ T6318]  #0: ffffffff8e13f340 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[   66.263680][ T6318] 
[   66.263680][ T6318] stack backtrace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   66.266268][ T6318] CPU: 1 UID: 0 PID: 6318 Comm: syz.1.187 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   66.266310][ T6318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   66.266320][ T6318] Call Trace:
[   66.266326][ T6318]  <TASK>
[   66.266336][ T6318]  dump_stack_lvl+0x189/0x250
[   66.266360][ T6318]  ? __pfx_dump_stack_lvl+0x10/0x10
[   66.266376][ T6318]  ? __pfx__printk+0x10/0x10
[   66.266396][ T6318]  ? print_lock_name+0xde/0x100
[   66.266419][ T6318]  lockdep_rcu_suspicious+0x140/0x1d0
[   66.266438][ T6318]  task_cls_state+0x1a5/0x1d0
[   66.266456][ T6318]  bpf_get_cgroup_classid_curr+0x18/0x60
[   66.266470][ T6318]  bpf_prog_841aec7193f618b3+0x1b/0x21
[   66.266482][ T6318]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[   66.266501][ T6318]  bpf_prog_test_run_syscall+0x312/0x4b0
[   66.266519][ T6318]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   66.266534][ T6318]  ? __fget_files+0x2a/0x420
[   66.266554][ T6318]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   66.266570][ T6318]  bpf_prog_test_run+0x2c7/0x340
[   66.266585][ T6318]  __sys_bpf+0x4a4/0x860
[   66.266598][ T6318]  ? __pfx___sys_bpf+0x10/0x10
[   66.266619][ T6318]  ? exc_page_fault+0x76/0xf0
[   66.266640][ T6318]  ? rcu_is_watching+0x15/0xb0
[   66.266659][ T6318]  __x64_sys_bpf+0x7c/0x90
[   66.266678][ T6318]  do_syscall_64+0xfa/0x3b0
[   66.266689][ T6318]  ? lockdep_hardirqs_on+0x9c/0x150
[   66.266707][ T6318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.266720][ T6318]  ? exc_page_fault+0x9f/0xf0
[   66.266739][ T6318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.266750][ T6318] RIP: 0033:0x7f630c38e929
[   66.266762][ T6318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   66.266773][ T6318] RSP: 002b:00007f630d169038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   66.266786][ T6318] RAX: ffffffffffffffda RBX: 00007f630c5b5fa0 RCX: 00007f630c38e929
[   66.266794][ T6318] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[   66.266802][ T6318] RBP: 00007f630c410b39 R08: 0000000000000000 R09: 0000000000000000
[   66.266809][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   66.266816][ T6318] R13: 0000000000000000 R14: 00007f630c5b5fa0 R15: 00007ffe49654ae8
[   66.266836][ T6318]  </TASK>
[   66.931956][ T5698] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.987808][ T5698] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.027318][ T5698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.068794][ T5698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.181892][ T5698] bridge_slave_1: left allmulticast mode
[   67.184434][ T5698] bridge_slave_1: left promiscuous mode
[   67.188054][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.194156][ T5698] bridge_slave_0: left allmulticast mode
[   67.197220][ T5698] bridge_slave_0: left promiscuous mode
[   67.200090][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.461221][ T5698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.468583][ T5698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.473581][ T5698] bond0 (unregistering): Released all slaves
[   67.709733][ T5698] hsr_slave_0: left promiscuous mode
[   67.712676][ T5698] hsr_slave_1: left promiscuous mode
[   67.715459][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.718810][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.723046][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.732138][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.746466][ T5698] veth1_macvtap: left promiscuous mode
[   67.748978][ T5698] veth0_macvtap: left promiscuous mode
[   67.751818][ T5698] veth1_vlan: left promiscuous mode
[   67.754161][ T5698] veth0_vlan: left promiscuous mode
[   68.098113][ T5698] team0 (unregistering): Port device team_slave_1 removed
[   68.123267][ T5698] team0 (unregistering): Port device team_slave_0 removed
[   68.736577][ T5698] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.791905][ T5698] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.850191][ T5698] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.909326][ T5698] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.032099][ T5698] team0: left allmulticast mode
[   69.033929][ T5698] team_slave_0: left allmulticast mode
[   69.036943][ T5698] team_slave_1: left allmulticast mode
[   69.038976][ T5698] team_slave_0: left promiscuous mode
[   69.041447][ T5698] team_slave_1: left promiscuous mode
[   69.043799][ T5698] bridge0: port 1(team0) entered disabled state
[   69.263823][ T5698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.269065][ T5698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.272635][ T5698] bond0 (unregistering): Released all slaves
[   69.483494][ T5698] hsr_slave_0: left promiscuous mode
[   69.486846][ T5698] hsr_slave_1: left promiscuous mode
[   69.489611][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.492787][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.500542][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.503532][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.515355][ T5698] veth1_macvtap: left promiscuous mode
[   69.518102][ T5698] veth0_macvtap: left promiscuous mode
[   69.519984][ T5698] veth1_vlan: left promiscuous mode
[   69.521774][ T5698] veth0_vlan: left promiscuous mode
[   69.738395][ T5698] team0 (unregistering): Port device team_slave_1 removed
[   69.755355][ T5698] team0 (unregistering): Port device team_slave_0 removed
[   71.101117][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.103597][ T1360] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
11:53:32  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822d17f9 RBX=ffff88801c6641c8 RCX=ffff888025e03980 RDX=0000000000000002
RSI=0000000000000009 RDI=ffffffffffffffff RBP=ffff88801c6641c0 RSP=ffffc90007666f38
R8 =0000000000000000 R9 =ffffffff822d159a R10=ffff888025e04240 R11=ffffffff81ad03a0
R12=0000000000000000 R13=0000000000000000 R14=0000000000000009 R15=0000000000000000
RIP=ffffffff81c03b61 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb792ebc6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f630c5b7bac CR3=0000000111d32000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f630c585478 00007f630c585450 XMM03=00007f630c585488 00007f630c585480
XMM04=00007f630d0ed100 00007f630c585440 XMM05=00007f630c585458 00007f630c5854a0
XMM06=00007f630c585498 00007f630c585490 XMM07=00007f630c585488 00007f630c585480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f630c411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f97 RDI=0000000000000f98 RBP=00000000000003f8 RSP=ffffc900076ff550
R8 =ffff888107b30237 R9 =1ffff11020f66046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98c1 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f630d1696c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3051fffc CR3=000000010a7ee000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f630c585478 00007f630c585450 XMM03=00007f630c585488 00007f630c585480
XMM04=00007f630d0ed100 00007f630c585440 XMM05=00007f630c585458 00007f630c5854a0
XMM06=00007f630c585498 00007f630c585490 XMM07=00007f630c585488 00007f630c585480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f630c411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
