last executing test programs:

329.874351ms ago: executing program 0 (id=1574):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r0, 0x8911, &(0x7f0000000000))

261.594002ms ago: executing program 1 (id=1575):
r0 = socket(0x40000000015, 0x5, 0x0)
sendto$l2tp6(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20)

261.444303ms ago: executing program 0 (id=1576):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/19, &(0x7f0000000ec0)=0x13)

261.270244ms ago: executing program 2 (id=1577):
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80)
r1 = socket$kcm(0x1e, 0x4, 0x0)
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef)

201.400016ms ago: executing program 0 (id=1578):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x8}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x800)

201.216726ms ago: executing program 1 (id=1579):
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f0000000c40)="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", 0xfc)

200.923753ms ago: executing program 0 (id=1580):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$inet(0x2, 0x3, 0x8)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x24000810)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240)
write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

200.734403ms ago: executing program 1 (id=1581):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
getsockopt$ax25_int(r0, 0x101, 0x4, 0x0, &(0x7f0000000400))

141.37045ms ago: executing program 2 (id=1582):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf253800000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)

141.064433ms ago: executing program 1 (id=1583):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0xc29, 0x70bd28, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044011}, 0x40010)

78.921474ms ago: executing program 2 (id=1584):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3eaa00000000000071109e00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

78.725105ms ago: executing program 1 (id=1585):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e367091fd0000000000006704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb027aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae105004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000694f540000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f72f3ced846891180604b6dd2499d16d7c9158ff1effff00000000ef069dc42749a89f854797fa9d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f440624aa70300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6df53cf95819079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca060000000000000008f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b5087880000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e98a224f97855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0f16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673c1079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb75b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695f0fe4a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604c9b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000249e00000000000083a5765d06da91165d24bc316607e1d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838e911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aaa2efa3a4f87fc14f180e353615b3cb925cf5ea843014a277c3694a5a83266f73ef039dd731187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ffe37d79f2614104e9a578aad05ce3ea8b0d66638d2f1fffc43b3bc56ac59389b4060b502557a598eef7bf5ddbfc9c503f2c6d8abe65cf98224b312dfb06ae1d8b1d9362f021f9a56b24f0b2a5ccb1c366235af5c6a548120437572bef6fe1fe75233cf3e8fc4c1c9d045ee8c8bbeecfc168b514e58f33696fce42b3d770c5ace395c3ec849ca4c25330b1e82c4be9cf00cbe449b70e2f26074d747d838f3ef56c82a10bca76a3f2368192edfc2d9e32dec544885a00645d106b0b4be9ce3d900febe533dfb05cdae58f573d045c609bb4e1542e48e25ed7b6a9c21fc1c8bc098ee6f65815b034cbff62976d0d1a20429b725d43fecd7da7fd4cf7c08fc9f8f23ae12b19694ef91e3eebbd613ba1ddc96042060cdb0cc48d363e0f8e9a559252fbdb354e8ba89df9ac02082040578966d73bf268d1c87f1518cb75057f1d4b174a1310f4c895e4970fc300afbfba7d3341c55eec92ffcb832fae7ba5deffd9d0bade63eaf59017a92a3e28a948f16cc8123c6727471ef0482563e3aa52d46f00000000421a8dcc04d69ea92f19782694bbf952342584bcad221001b4da955edab26045cb88ad6d519dff54f59b8a1f79eea20cf4f0f0e13761a352034a26cf14a5e78e45c69273e26630a3f00e92ae63eced3da5d66cedaf489def12baec4ed8f42b3d0e0f29a94b198062af5996e7f95f303da9b546ffe8c35ef25d5afaaca9a18bd7706db682ed59c3f2d1e98d6d71c50a732e02da361959a0917d50819e5260578b6f5779ea3c44ffaa0e20b9420b7f99c09057eb9aebb5cd482159b087f688ddbb7b9a03f96805a78be5581e9f516019d0a6df7dc4a2e03c29a8ecfba95f04c509315556254bcf350e3e77a845d1a4190ee536425ce0759ef54c2bdf"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x2000000, 0x24, 0x0, &(0x7f0000000080)="5cdd3086ddff006633c9bbac88a8861c00dffd0013dd00000000000000008100cfb3399d", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

78.558878ms ago: executing program 2 (id=1586):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0})

1.20672ms ago: executing program 0 (id=1587):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000300)="18", 0x1)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0xb, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4)

797.49µs ago: executing program 1 (id=1588):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @default, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0xfffbffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
listen(r0, 0x1ad72f7)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
close(0x4)

472.958µs ago: executing program 2 (id=1589):
syz_emit_ethernet(0x6e, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x6, 0x6, "d9387c", 0xfff7, 0x32, 0x0, @empty, @remote, [], "61a262c78fbe3455"}}}}}}}, 0x0)

257.903µs ago: executing program 0 (id=1590):
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x90001}, 0x0)

0s ago: executing program 2 (id=1591):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15644' (ED25519) to the list of known hosts.
syzkaller login: [   48.870461][ T5780] cgroup: Unknown subsys name 'net'
[   49.020639][ T5780] cgroup: Unknown subsys name 'cpuset'
[   49.024792][ T5780] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.379876][ T5780] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.636937][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.641507][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.645077][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.659554][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.663118][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.694458][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.697896][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.701208][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.705060][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.709024][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.732816][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.736159][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.740620][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.747201][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.751133][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.987013][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   55.070718][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   55.164970][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.169085][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.172340][ T5824] bridge_slave_0: entered allmulticast mode
[   55.176414][ T5824] bridge_slave_0: entered promiscuous mode
[   55.189837][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.192181][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.194518][ T5824] bridge_slave_1: entered allmulticast mode
[   55.197232][ T5824] bridge_slave_1: entered promiscuous mode
[   55.246405][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   55.270053][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.280854][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.284246][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.288119][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.291131][ T5828] bridge_slave_0: entered allmulticast mode
[   55.295018][ T5828] bridge_slave_0: entered promiscuous mode
[   55.321530][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.324635][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.328004][ T5828] bridge_slave_1: entered allmulticast mode
[   55.331887][ T5828] bridge_slave_1: entered promiscuous mode
[   55.354002][ T5824] team0: Port device team_slave_0 added
[   55.385115][ T5824] team0: Port device team_slave_1 added
[   55.401791][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.415667][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.454269][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.456608][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.465969][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.480828][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.483614][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.485957][ T5831] bridge_slave_0: entered allmulticast mode
[   55.489107][ T5831] bridge_slave_0: entered promiscuous mode
[   55.492702][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.494994][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.497261][ T5831] bridge_slave_1: entered allmulticast mode
[   55.500384][ T5831] bridge_slave_1: entered promiscuous mode
[   55.503022][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.505604][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.514646][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.525655][ T5828] team0: Port device team_slave_0 added
[   55.546306][ T5828] team0: Port device team_slave_1 added
[   55.586902][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.594338][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.631374][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.634286][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.644816][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.653571][ T5824] hsr_slave_0: entered promiscuous mode
[   55.656532][ T5824] hsr_slave_1: entered promiscuous mode
[   55.670871][ T5831] team0: Port device team_slave_0 added
[   55.673417][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.676283][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.687154][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.709747][ T5831] team0: Port device team_slave_1 added
[   55.796894][ T5828] hsr_slave_0: entered promiscuous mode
[   55.801411][ T5828] hsr_slave_1: entered promiscuous mode
[   55.804252][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.807778][ T5828] Cannot create hsr debugfs directory
[   55.810647][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.813477][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.824674][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.836897][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.839945][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.851242][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.975439][ T5831] hsr_slave_0: entered promiscuous mode
[   55.980587][ T5831] hsr_slave_1: entered promiscuous mode
[   55.983519][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.986716][ T5831] Cannot create hsr debugfs directory
[   56.222142][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.237073][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.259302][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.266303][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.317190][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.324026][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.336932][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.342244][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.398347][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.405039][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.412824][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.424467][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.499001][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.534859][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   56.544895][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.548054][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.559186][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.577296][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.580448][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.590788][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   56.600660][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.603032][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.636460][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.638849][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.649791][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.689076][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   56.706354][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.708861][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.723018][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.725420][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.728339][ T5827] Bluetooth: hci1: command tx timeout
[   56.728536][   T55] Bluetooth: hci0: command tx timeout
[   56.808202][   T55] Bluetooth: hci2: command tx timeout
[   56.844326][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.878758][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.893795][ T5824] veth0_vlan: entered promiscuous mode
[   56.921222][ T5824] veth1_vlan: entered promiscuous mode
[   56.931214][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.941951][ T5828] veth0_vlan: entered promiscuous mode
[   56.955539][ T5828] veth1_vlan: entered promiscuous mode
[   56.983500][ T5824] veth0_macvtap: entered promiscuous mode
[   56.995343][ T5824] veth1_macvtap: entered promiscuous mode
[   57.003160][ T5828] veth0_macvtap: entered promiscuous mode
[   57.019642][ T5831] veth0_vlan: entered promiscuous mode
[   57.022418][ T5828] veth1_macvtap: entered promiscuous mode
[   57.033116][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.041423][ T5831] veth1_vlan: entered promiscuous mode
[   57.046438][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.061413][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.064396][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.067827][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.070597][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.081548][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.093119][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.107121][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.110638][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.113558][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.116666][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.125879][ T5831] veth0_macvtap: entered promiscuous mode
[   57.153633][ T5831] veth1_macvtap: entered promiscuous mode
[   57.196230][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.216272][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.256346][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.262541][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.266221][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.271193][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.285681][  T279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.295102][  T279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.364196][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.372063][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.384073][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.388399][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.429371][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.442390][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.449062][  T279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.460475][  T279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.489245][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.491840][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.496522][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.602526][ T5894] IPv6: NLM_F_CREATE should be specified when creating new route
[   57.850270][ T5910] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8'.
[   57.856286][ T5906] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8'.
[   57.866195][ T5910] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003
[   57.872079][ T5910] Cannot find add_set index 3 as target
[   57.910539][ T5906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.933231][ T5915] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET)
[   58.045341][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'.
[   58.052164][ T5919] syz_tun: entered promiscuous mode
[   58.058493][ T5919] syz_tun: entered allmulticast mode
[   58.099200][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'.
[   58.559479][ T5939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21'.
[   58.625065][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'.
[   58.741376][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   58.811812][   T55] Bluetooth: hci1: command tx timeout
[   58.844019][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.31'.
[   58.861918][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.31'.
[   58.887721][   T55] Bluetooth: hci2: command tx timeout
[   59.059524][ T5971] syzkaller0: entered allmulticast mode
[   60.357929][ T6023] IPv6: addrconf: prefix option has invalid lifetime
[   60.502659][ T6029] xt_CT: You must specify a L4 protocol and not use inversions on it
[   60.582688][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'.
[   60.592584][ T6037] gtp0: entered promiscuous mode
[   60.594521][ T6037] gtp0: entered allmulticast mode
[   60.786015][ T6047] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   60.888765][   T55] Bluetooth: hci1: command tx timeout
[   60.968295][   T55] Bluetooth: hci2: command tx timeout
[   61.607715][ T6079] ip6tnl1: entered promiscuous mode
[   61.817295][ T6095] Cannot find add_set index 1 as target
[   61.852304][ T6095] netlink: 'syz.0.91': attribute type 10 has an invalid length.
[   61.855837][ T6095] bridge0: port 3(team0) entered blocking state
[   61.862547][ T6095] bridge0: port 3(team0) entered disabled state
[   61.867859][ T6095] team0: entered allmulticast mode
[   61.870041][ T6095] team_slave_0: entered allmulticast mode
[   61.872030][ T6095] team_slave_1: entered allmulticast mode
[   61.892766][ T6095] team0: entered promiscuous mode
[   61.894911][ T6095] team_slave_0: entered promiscuous mode
[   61.898383][ T6095] team_slave_1: entered promiscuous mode
[   61.901262][ T6095] bridge0: port 3(team0) entered blocking state
[   61.904411][ T6095] bridge0: port 3(team0) entered forwarding state
[   62.714516][ T6145] batadv_slave_1: entered promiscuous mode
[   62.722513][ T6144] batadv_slave_1: left promiscuous mode
[   62.961531][ T6162] Bluetooth: MGMT ver 1.23
[   62.979040][   T55] Bluetooth: hci1: command tx timeout
[   63.057938][   T55] Bluetooth: hci2: command tx timeout
[   63.118881][ T6171] __nla_validate_parse: 7 callbacks suppressed
[   63.118898][ T6171] netlink: 140 bytes leftover after parsing attributes in process `syz.0.129'.
[   63.223640][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'.
[   63.395498][ T6197] netlink: 'syz.0.134': attribute type 13 has an invalid length.
[   63.399750][ T6197] netlink: 'syz.0.134': attribute type 17 has an invalid length.
[   63.419087][ T6197] syz_tun: left promiscuous mode
[   63.420851][ T6197] syz_tun: left allmulticast mode
[   63.463138][ T6197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.505218][ T6203] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.139'.
[   63.582231][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.140'.
[   63.619766][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'.
[   63.637531][ T6183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.686791][ T6205] syz.2.140 (6205) used greatest stack depth: 20192 bytes left
[   63.705206][ T6183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.772465][ T6183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.202438][ T6230] xt_CT: You must specify a L4 protocol and not use inversions on it
[   64.320081][ T6240] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   64.708822][ T6261] netlink: 84 bytes leftover after parsing attributes in process `syz.2.166'.
[   64.727864][ T6261] netlink: 84 bytes leftover after parsing attributes in process `syz.2.166'.
[   64.951281][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'.
[   66.361923][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.194'.
[   67.329092][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'.
[   67.480251][ T6396] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.780846][ T6413] nbd: must specify a device to reconfigure
[   68.314033][ T6434] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   68.451816][ T6441] __nla_validate_parse: 1 callbacks suppressed
[   68.451834][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.247'.
[   68.552670][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'.
[   68.877208][ T6466] netlink: 'syz.1.254': attribute type 15 has an invalid length.
[   68.886627][ T6466] netlink: 666 bytes leftover after parsing attributes in process `syz.1.254'.
[   69.036967][ T6479] netlink: 44 bytes leftover after parsing attributes in process `syz.1.260'.
[   69.155001][ T6492] bridge_slave_0: left allmulticast mode
[   69.158047][ T6492] bridge_slave_0: left promiscuous mode
[   69.160888][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.167166][ T6492] bridge_slave_1: left allmulticast mode
[   69.170352][ T6492] bridge_slave_1: left promiscuous mode
[   69.172411][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.181349][ T6492] bond0: (slave bond_slave_0): Releasing backup interface
[   69.189909][ T6492] bond0: (slave bond_slave_1): Releasing backup interface
[   69.215270][ T6492] team0: Port device team_slave_0 removed
[   69.226881][ T6492] team0: Port device team_slave_1 removed
[   69.229643][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.232248][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.237935][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.240601][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.785055][ T6539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.285'.
[   69.912359][ T6556] netlink: 'syz.2.291': attribute type 4 has an invalid length.
[   70.973585][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.976120][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.361570][ T6627] netlink: 'syz.2.321': attribute type 3 has an invalid length.
[   71.406333][ T6630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.322'.
[   71.893728][ T6646] netlink: 'syz.2.330': attribute type 1 has an invalid length.
[   71.896981][ T6646] netlink: 224 bytes leftover after parsing attributes in process `syz.2.330'.
[   72.015155][ T6655] xt_bpf: check failed: parse error
[   72.069123][ T6659] netlink: 'syz.0.336': attribute type 1 has an invalid length.
[   72.093948][ T6659] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.104589][ T6659] bond1: (slave gretap1): making interface the new active one
[   72.108803][ T6659] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   72.131126][ T6659] syz.0.336 (6659) used greatest stack depth: 20040 bytes left
[   72.539642][ T6703] macvlan2: entered allmulticast mode
[   72.542086][ T6703] veth1_vlan: entered allmulticast mode
[   72.548774][ T6703] veth1_vlan: left allmulticast mode
[   72.748630][ T6718] bridge_slave_0: left allmulticast mode
[   72.750977][ T6718] bridge_slave_0: left promiscuous mode
[   72.759462][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.767059][ T6718] bridge_slave_1: left allmulticast mode
[   72.770268][ T6718] bridge_slave_1: left promiscuous mode
[   72.772809][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.930955][ T6724] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.359'.
[   72.938577][ T6718] bond0: (slave bond_slave_0): Releasing backup interface
[   72.952947][ T6718] bond0: (slave bond_slave_1): Releasing backup interface
[   73.063498][ T6718] team0: Port device team_slave_0 removed
[   73.074900][ T6718] team0: Port device team_slave_1 removed
[   73.078321][ T6718] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.081635][ T6718] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.089804][ T6720] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.096049][ T6718] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.099591][ T6718] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.221858][ T6731] tipc: Started in network mode
[   73.224068][ T6731] tipc: Node identity b227b11b505a, cluster identity 4711
[   73.228453][ T6731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.273913][ T6731] syzkaller0: entered promiscuous mode
[   73.276357][ T6731] syzkaller0: entered allmulticast mode
[   73.284008][ T6731] tipc: Resetting bearer <eth:syzkaller0>
[   73.306026][ T6730] tipc: Resetting bearer <eth:syzkaller0>
[   73.527038][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'.
[   74.117947][ T6730] tipc: Disabling bearer <eth:syzkaller0>
[   74.280909][ T6747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.373'.
[   74.285380][ T6747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.373'.
[   75.832180][ T6752] team0: left allmulticast mode
[   75.833899][ T6752] team_slave_0: left allmulticast mode
[   75.835774][ T6752] team_slave_1: left allmulticast mode
[   75.838537][ T6752] team0: left promiscuous mode
[   75.840406][ T6752] team_slave_0: left promiscuous mode
[   75.844413][ T6752] team_slave_1: left promiscuous mode
[   75.846983][ T6752] bridge0: port 3(team0) entered disabled state
[   75.854564][ T6752] bridge_slave_0: left allmulticast mode
[   75.856920][ T6752] bridge_slave_0: left promiscuous mode
[   75.872717][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.904576][ T6752] bridge_slave_1: left allmulticast mode
[   75.906970][ T6752] bridge_slave_1: left promiscuous mode
[   75.911507][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.924563][ T6752] bond0: (slave bond_slave_0): Releasing backup interface
[   75.946834][ T6752] bond0: (slave bond_slave_1): Releasing backup interface
[   76.003529][ T6752] team0: Port device team_slave_0 removed
[   76.015519][ T6752] team0: Port device team_slave_1 removed
[   76.022554][ T6752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.030964][ T6752] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.036806][ T6752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.041574][ T6752] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.060965][ T6752] bond1: (slave gretap1): Releasing active interface
[   76.082661][ T6766] syzkaller1: entered promiscuous mode
[   76.084740][ T6766] syzkaller1: entered allmulticast mode
[   76.235639][ T6783] lo speed is unknown, defaulting to 1000
[   76.239362][ T6783] lo speed is unknown, defaulting to 1000
[   76.244099][ T6783] lo speed is unknown, defaulting to 1000
[   76.258648][ T6783] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.273127][ T6783] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   76.301920][ T6783] lo speed is unknown, defaulting to 1000
[   76.306561][ T6783] lo speed is unknown, defaulting to 1000
[   76.312373][ T6783] lo speed is unknown, defaulting to 1000
[   76.365108][ T6793] xt_hashlimit: size too large, truncated to 1048576
[   76.372973][ T6795] netlink: 'syz.0.386': attribute type 1 has an invalid length.
[   76.376089][ T6795] netlink: 228 bytes leftover after parsing attributes in process `syz.0.386'.
[   76.438156][ T6785] netlink: 14 bytes leftover after parsing attributes in process `syz.1.383'.
[   76.518844][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'.
[   76.595038][ T6785] bond0 (unregistering): Released all slaves
[   77.032883][ T6833] lo speed is unknown, defaulting to 1000
[   77.759607][ T6859] veth3: entered promiscuous mode
[   77.796136][ T6859] warning: `syz.2.412' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.071714][ T6884] netlink: 236 bytes leftover after parsing attributes in process `syz.1.425'.
[   78.184426][ T6900] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   78.285290][ T6905] tipc: Started in network mode
[   78.287096][ T6905] tipc: Node identity a2a4fde3c7fb, cluster identity 4711
[   78.290290][ T6905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.294712][ T6905] syzkaller0: entered promiscuous mode
[   78.307548][ T6905] syzkaller0: entered allmulticast mode
[   78.326930][ T6905] tipc: Resetting bearer <eth:syzkaller0>
[   78.334120][ T6904] tipc: Resetting bearer <eth:syzkaller0>
[   78.346496][ T6904] tipc: Disabling bearer <eth:syzkaller0>
[   78.703131][ T6927] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.707225][ T6927] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.714811][ T6927] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.719171][ T6927] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.809747][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[   78.823866][ T6940] netlink: 128 bytes leftover after parsing attributes in process `syz.0.451'.
[   78.827791][ T6940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.451'.
[   79.010681][ T6962] Driver unsupported XDP return value 0 on prog  (id 72) dev N/A, expect packet loss!
[   79.180645][ T6982] netlink: 'syz.2.470': attribute type 29 has an invalid length.
[   79.183661][ T6982] netlink: 'syz.2.470': attribute type 29 has an invalid length.
[   79.186640][ T6982] netlink: 52 bytes leftover after parsing attributes in process `syz.2.470'.
[   79.259261][ T6992] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.475'.
[   79.265216][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'.
[   79.268801][ T6994] netlink: 48 bytes leftover after parsing attributes in process `syz.0.476'.
[   79.422193][ T7012] netlink: 'syz.0.483': attribute type 58 has an invalid length.
[   79.424949][ T7012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.483'.
[   79.610769][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'.
[   79.994855][ T7059] lo speed is unknown, defaulting to 1000
[   80.385977][ T7073] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   80.698773][ T7111] netlink: 'syz.0.529': attribute type 5 has an invalid length.
[   80.732535][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'.
[   80.737486][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'.
[   80.762848][ T7117] syzkaller1: entered promiscuous mode
[   80.765119][ T7117] syzkaller1: entered allmulticast mode
[   81.195187][ T7156] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[   81.229506][  T972] cfg80211: failed to load regulatory.db
[   81.231082][ T7158] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   81.293901][ T7162] netlink: 'syz.1.553': attribute type 1 has an invalid length.
[   81.310761][ T7164] erspan0: entered promiscuous mode
[   81.313129][ T7164] gretap0: entered promiscuous mode
[   81.578439][ T7184] Cannot find del_set index 286 as target
[   82.675426][ T7279] netlink: 'syz.1.574': attribute type 4 has an invalid length.
[   82.815317][ T7293] netlink: 'syz.1.580': attribute type 1 has an invalid length.
[   83.149015][ T7313] trusted_key: syz.2.588 sent an empty control message without MSG_MORE.
[   83.321639][ T7335] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   83.326086][ T7333] netlink: 'syz.2.597': attribute type 11 has an invalid length.
[   83.810575][ T7373] netlink: 'syz.1.613': attribute type 3 has an invalid length.
[   83.999642][ T7390] netlink: 'syz.1.621': attribute type 4 has an invalid length.
[   84.324259][ T7394] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.327927][ T7394] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.331007][ T7394] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.334120][ T7394] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.367167][ T7394] veth3: left promiscuous mode
[   84.372041][    T9] lo speed is unknown, defaulting to 1000
[   84.374885][    T9] syz2: Port: 1 Link DOWN
[   84.395728][ T7396] lo speed is unknown, defaulting to 1000
[   84.721326][ T7424] lo speed is unknown, defaulting to 1000
[   84.881551][ T7434] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[   85.113858][ T7443] Zero length message leads to an empty skb
[   85.203700][ T7454] __nla_validate_parse: 11 callbacks suppressed
[   85.203718][ T7454] netlink: 14 bytes leftover after parsing attributes in process `syz.0.647'.
[   85.350746][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'.
[   85.354090][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'.
[   85.665531][ T7497] set match dimension is over the limit!
[   85.877272][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[   85.907346][ T7514] netlink: 'syz.2.677': attribute type 29 has an invalid length.
[   85.917572][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'.
[   86.010127][ T7518] lo speed is unknown, defaulting to 1000
[   86.160027][ T7539] netlink: 32 bytes leftover after parsing attributes in process `syz.1.688'.
[   86.191180][ T7535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.207611][ T7535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.211152][ T7535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.214657][ T7535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.255619][ T7545] netlink: 404 bytes leftover after parsing attributes in process `syz.1.691'.
[   86.259967][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.691'.
[   86.263383][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.691'.
[   86.266913][ T7545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.691'.
[   86.406838][ T7558] netlink: 'syz.2.697': attribute type 10 has an invalid length.
[   86.411139][ T7558] batadv0: entered promiscuous mode
[   86.415213][ T7558] bridge0: port 1(batadv0) entered blocking state
[   86.418362][ T7558] bridge0: port 1(batadv0) entered disabled state
[   86.421295][ T7558] batadv0: entered allmulticast mode
[   86.691195][ T7583] xt_TPROXY: Can be used only with -p tcp or -p udp
[   86.779483][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   86.779524][ T7587] pimreg3: entered allmulticast mode
[   86.783627][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   87.001559][ T7596] lo speed is unknown, defaulting to 1000
[   87.145780][ T7612] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   87.302775][ T7620] netlink: 'syz.2.722': attribute type 21 has an invalid length.
[   87.490439][ T7636] netlink: 'syz.0.730': attribute type 11 has an invalid length.
[   87.695680][ T7651] lo speed is unknown, defaulting to 1000
[   87.699605][ T7651] lo speed is unknown, defaulting to 1000
[   87.702648][ T7651] lo speed is unknown, defaulting to 1000
[   87.865643][ T7651] infiniband syz0: set down
[   87.868069][ T7651] infiniband syz0: added lo
[   87.876916][  T791] lo speed is unknown, defaulting to 1000
[   87.910870][ T7651] RDS/IB: syz0: added
[   87.913393][ T7651] smc: adding ib device syz0 with port count 1
[   87.916318][ T7651] smc:    ib device syz0 port 1 has pnetid 
[   87.925465][  T791] lo speed is unknown, defaulting to 1000
[   87.929116][ T7651] lo speed is unknown, defaulting to 1000
[   88.020768][ T7676] lo speed is unknown, defaulting to 1000
[   88.110847][ T7651] lo speed is unknown, defaulting to 1000
[   88.339571][ T7676] lo speed is unknown, defaulting to 1000
[   88.370636][ T7696] syzkaller0: entered allmulticast mode
[   88.487531][ T7651] lo speed is unknown, defaulting to 1000
[   88.491687][ T7698] netlink: 'syz.1.752': attribute type 1 has an invalid length.
[   89.133156][ T7739] tipc: Started in network mode
[   89.135106][ T7739] tipc: Node identity 7, cluster identity 4711
[   89.138277][ T7739] tipc: Node number set to 7
[   89.846761][ T7784] x_tables: duplicate underflow at hook 4
[   89.857124][ T7784] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.860311][ T7784] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.863094][ T7784] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.865863][ T7784] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.273662][ T7818] __nla_validate_parse: 8 callbacks suppressed
[   90.273681][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'.
[   90.279879][ T7818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.804'.
[   90.767043][ T7862] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.175761][ T7888] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.186618][ T7888] syzkaller0: entered promiscuous mode
[   91.188980][ T7888] syzkaller0: entered allmulticast mode
[   91.197912][ T7890] netlink: 'syz.2.838': attribute type 58 has an invalid length.
[   91.202911][ T7890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.838'.
[   91.212340][ T7888] tipc: Resetting bearer <eth:syzkaller0>
[   91.221774][ T7887] tipc: Resetting bearer <eth:syzkaller0>
[   91.239676][ T7887] tipc: Disabling bearer <eth:syzkaller0>
[   91.435162][ T7905] lo speed is unknown, defaulting to 1000
[   91.439792][ T7905] lo speed is unknown, defaulting to 1000
[   91.964956][ T7932] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.858'.
[   92.570566][ T7993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.892'.
[   93.373394][ T7999] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.377152][ T7999] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.380449][ T7999] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.384058][ T7999] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.894418][ T8030] netlink: 'syz.0.903': attribute type 1 has an invalid length.
[   94.435216][ T8066] netlink: 'syz.2.920': attribute type 2 has an invalid length.
[   94.526966][ T8074] macsec1: entered promiscuous mode
[   94.537715][ T8074] macsec1: entered allmulticast mode
[   94.742227][   T33] audit: type=1800 audit(1752280834.742:2): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.923" name="cgroup.controllers" dev="tmpfs" ino=1731 res=0 errno=0
[   95.067542][ T8109] netlink: 56 bytes leftover after parsing attributes in process `syz.2.941'.
[   95.073491][ T8106] lo speed is unknown, defaulting to 1000
[   95.080637][ T8106] lo speed is unknown, defaulting to 1000
[   95.225047][ T8116] lo speed is unknown, defaulting to 1000
[   95.452777][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'.
[   95.488484][ T8117] netlink: 'syz.2.941': attribute type 4 has an invalid length.
[   95.500579][    T9] lo speed is unknown, defaulting to 1000
[   95.504958][    T9] syz0: Port: 1 Link ACTIVE
[   95.507152][    T9] lo speed is unknown, defaulting to 1000
[   95.576143][ T8112] lo speed is unknown, defaulting to 1000
[   95.639909][ T8116] lo speed is unknown, defaulting to 1000
[   95.945600][ T8112] lo speed is unknown, defaulting to 1000
[   96.027080][ T8129] IPv6: sit1: Disabled Multicast RS
[   97.336807][ T8165] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   97.339926][    T9] IPVS: starting estimator thread 0...
[   97.427654][ T8171] IPVS: using max 45 ests per chain, 108000 per kthread
[   97.581995][ T8191] netlink: 'syz.1.974': attribute type 21 has an invalid length.
[   97.584918][ T8191] netlink: 156 bytes leftover after parsing attributes in process `syz.1.974'.
[   97.830756][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'.
[   97.974554][ T8221] syzkaller0: entered promiscuous mode
[   97.977081][ T8221] syzkaller0: entered allmulticast mode
[   98.332614][ T8233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'.
[   98.395993][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.992'.
[   98.399944][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'.
[   98.410676][ T8237] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   98.709314][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'.
[   98.713437][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'.
[   99.527902][ T8277] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1007'.
[   99.683496][ T8269] syzkaller0: entered promiscuous mode
[   99.686830][ T8269] syzkaller0: entered allmulticast mode
[   99.692690][ T8273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.707344][ T8265] tipc: Resetting bearer <eth:syzkaller0>
[   99.729957][ T8265] tipc: Disabling bearer <eth:syzkaller0>
[   99.804573][ T8289] Bluetooth: MGMT ver 1.23
[   99.977174][ T8306] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  100.321859][ T8331] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1033'.
[  100.559775][ T8348] netlink: 'syz.2.1039': attribute type 10 has an invalid length.
[  100.578851][ T8348] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  100.688766][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'.
[  100.811633][ T8366] xt_SECMARK: invalid mode: 0
[  101.936280][ T8422] netlink: 'syz.0.1074': attribute type 13 has an invalid length.
[  101.991583][ T8428] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1076'.
[  101.995586][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'.
[  102.005792][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'.
[  102.010348][ T8427] netlink: 'syz.0.1075': attribute type 13 has an invalid length.
[  102.013513][ T8427] netlink: 'syz.0.1075': attribute type 11 has an invalid length.
[  102.206424][ T8447] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1084'.
[  102.846324][ T8480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.869682][ T8482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1100'.
[  102.877183][ T8482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1100'.
[  102.915403][ T8484] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  102.945326][ T8486] netlink: 'syz.0.1102': attribute type 1 has an invalid length.
[  102.949057][ T8486] NCSI netlink: No device for ifindex 0
[  103.003104][ T8490] openvswitch: netlink: IP tunnel dst address not specified
[  103.146207][ T8501] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.156871][ T8501] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.161151][ T8501] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.164835][ T8501] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.173014][  T972] lo speed is unknown, defaulting to 1000
[  103.173276][ T8502] netlink: 'syz.1.1110': attribute type 1 has an invalid length.
[  103.175425][  T972] syz0: Port: 1 Link DOWN
[  103.188142][  T972] lo speed is unknown, defaulting to 1000
[  103.300319][ T8514] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1116'.
[  103.343954][ T8516] dvmrp0: entered allmulticast mode
[  103.423699][ T8521] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1119'.
[  104.027357][ T8560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.031683][ T8560] syzkaller0: entered promiscuous mode
[  104.033850][ T8560] syzkaller0: entered allmulticast mode
[  104.047309][ T8560] tipc: Resetting bearer <eth:syzkaller0>
[  104.052925][ T8559] tipc: Resetting bearer <eth:syzkaller0>
[  104.063738][ T8559] tipc: Disabling bearer <eth:syzkaller0>
[  104.712495][ T8608] netlink: 'syz.1.1158': attribute type 4 has an invalid length.
[  104.722823][ T8608] netlink: 'syz.1.1158': attribute type 4 has an invalid length.
[  105.273696][ T8659] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1182'.
[  105.785967][ T8678] netlink: 'syz.0.1190': attribute type 1 has an invalid length.
[  105.790641][ T8678] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1190'.
[  105.875201][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'.
[  105.886756][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'.
[  105.893189][ T8691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1194'.
[  106.162824][ T8721] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1211'.
[  106.166808][ T8721] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1211'.
[  106.174113][ T8721] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1211'.
[  106.223066][ T8729] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1215'.
[  106.311847][ T8734] xt_hashlimit: size too large, truncated to 1048576
[  106.799907][ T8769] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  106.885704][ T8775] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  107.152119][ T8800] syzkaller0: entered promiscuous mode
[  107.153900][ T8800] syzkaller0: entered allmulticast mode
[  108.233469][ T8819] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xf
[  108.388162][ T8832] Bluetooth: hci1: Opcode 0x080f failed: -4
[  108.482445][ T8840] bridge3: the hash_elasticity option has been deprecated and is always 16
[  108.485976][ T8840] bridge3: entered allmulticast mode
[  108.613879][ T8856] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1265'.
[  108.759375][ T8874] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  108.788168][ T8867] nbd0: detected capacity change from 0 to 127
[  108.809704][   T56] block nbd0: Receive control failed (result -32)
[  108.814874][ T8529] block nbd0: Dead connection, failed to find a fallback
[  108.829038][ T8529] block nbd0: shutting down sockets
[  108.834198][ T8529] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.844404][ T8529] Buffer I/O error on dev nbd0, logical block 0, async page read
[  108.849942][ T8529] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.853684][ T8529] Buffer I/O error on dev nbd0, logical block 1, async page read
[  108.856992][ T8529] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.863259][ T8529] Buffer I/O error on dev nbd0, logical block 2, async page read
[  108.866630][ T8529] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.871857][ T8529] Buffer I/O error on dev nbd0, logical block 3, async page read
[  108.875176][ T8529] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.879238][ T8529] Buffer I/O error on dev nbd0, logical block 0, async page read
[  108.882749][ T8529] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.886019][ T8529] Buffer I/O error on dev nbd0, logical block 1, async page read
[  108.892178][ T8529] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.897590][ T8529] Buffer I/O error on dev nbd0, logical block 2, async page read
[  108.900918][ T8529] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.902744][ T8884] netlink: 'syz.0.1278': attribute type 5 has an invalid length.
[  108.904536][ T8529] Buffer I/O error on dev nbd0, logical block 3, async page read
[  108.904686][ T8529] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.918233][ T8529] Buffer I/O error on dev nbd0, logical block 0, async page read
[  108.921448][ T8529] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  108.924681][ T8529] Buffer I/O error on dev nbd0, logical block 1, async page read
[  108.926771][ T8886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1277'.
[  108.929898][ T8529] ldm_validate_partition_table(): Disk read failed.
[  108.933296][ T8529] Dev nbd0: unable to read RDB block 0
[  108.935970][ T8529]  nbd0: unable to read partition table
[  108.948995][ T8529] ldm_validate_partition_table(): Disk read failed.
[  108.951987][ T8529] Dev nbd0: unable to read RDB block 0
[  108.955249][ T8529]  nbd0: unable to read partition table
[  109.302252][ T8927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.338731][ T8931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.417699][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  110.422702][ T8964] syzkaller0: entered promiscuous mode
[  110.424736][ T8964] syzkaller0: entered allmulticast mode
[  111.426576][ T8985] netlink: 'syz.1.1327': attribute type 11 has an invalid length.
[  111.908146][ T9028] __nla_validate_parse: 4 callbacks suppressed
[  111.908159][ T9028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1347'.
[  111.913313][ T9031] sctp: [Deprecated]: syz.1.1348 (pid 9031) Use of int in maxseg socket option.
[  111.913313][ T9031] Use struct sctp_assoc_value instead
[  111.963902][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'.
[  111.988880][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1351'.
[  112.210456][ T9063] atomic_op ffff88803ce70998 conn xmit_atomic 0000000000000000
[  112.240559][ T9068] netlink: 'syz.2.1366': attribute type 18 has an invalid length.
[  112.308658][ T9075] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.1369'.
[  112.507689][ T9088] netlink: 'syz.0.1375': attribute type 6 has an invalid length.
[  112.732268][ T9101] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  112.804787][ T9111] netlink: 'syz.0.1385': attribute type 1 has an invalid length.
[  112.807231][ T9111] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1385'.
[  112.811736][ T9111] netlink: 'syz.0.1385': attribute type 1 has an invalid length.
[  113.732525][ T9143] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1399'.
[  113.894206][ T9155] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  113.899497][ T9164] netlink: 'syz.2.1408': attribute type 83 has an invalid length.
[  113.907668][    T9] IPVS: starting estimator thread 0...
[  113.930345][ T9155] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  113.998333][ T9163] IPVS: using max 80 ests per chain, 192000 per kthread
[  114.313363][ T9183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1416'.
[  114.317825][ T9183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1416'.
[  114.515978][ T9187] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1418'.
[  114.970614][ T9214] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1432'.
[  115.034927][ T9222] @: renamed from bond_slave_0
[  115.315395][ T9256] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  115.325690][ T9258] netlink: 'syz.1.1453': attribute type 10 has an invalid length.
[  115.332490][ T9258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.335779][ T9258] bridge0: port 1(batadv0) entered blocking state
[  115.340871][ T9258] bridge0: port 1(batadv0) entered disabled state
[  115.354661][ T9258] batadv0: entered allmulticast mode
[  115.357617][ T9258] batadv0: entered promiscuous mode
[  115.518407][ T5835] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  115.521268][ T5835] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  115.685873][ T9287] vlan2: entered promiscuous mode
[  115.692500][ T9287] vlan2: entered allmulticast mode
[  115.694885][ T9287] hsr_slave_1: entered allmulticast mode
[  116.042048][ T9301] nbd: couldn't find device at index 536870912
[  116.345257][ T9319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.476403][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.480080][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.545226][ T9328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.819688][ T9348] sock: sock_set_timeout: `syz.2.1491' (pid 9348) tries to set negative timeout
[  116.905016][ T9352] openvswitch: netlink: IPv4 tun info is not correct
[  117.391878][ T9388] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.394614][ T9388] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.397355][ T9388] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.401426][ T9388] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.404069][ T9388] geneve2: entered promiscuous mode
[  117.522497][   T33] audit: type=1800 audit(1752280857.522:3): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1520" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2643 res=0 errno=0
[  117.544198][   T33] audit: type=1800 audit(1752280857.542:4): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1520" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2643 res=0 errno=0
[  117.813221][ T9438] __nla_validate_parse: 78 callbacks suppressed
[  117.813237][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1533'.
[  118.384790][ T9503] 8021q: adding VLAN 0 to HW filter on device bond1
[  118.394088][ T9503] bond0: (slave bond1): Enslaving as an active interface with a down link
[  118.452667][   T55] Bluetooth: hci2: link tx timeout
[  118.455445][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.461524][   T55] Bluetooth: hci2: link tx timeout
[  118.463731][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.607017][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'.
[  118.726240][ T9542] netlink: 'syz.1.1559': attribute type 1 has an invalid length.
[  119.171026][ T9584] netlink: 'syz.1.1579': attribute type 12 has an invalid length.
[  119.249346][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1582'.
[  119.256631][ T9590] xt_CT: No such helper "syz0"
[  119.430637][ T9611] netlink: 'syz.2.1591': attribute type 10 has an invalid length.
[  119.439953][ T9612] netlink: 'syz.1.1588': attribute type 10 has an invalid length.
[  119.442607][ T9611] team0: Port device dummy0 added
[  119.448663][ T9611] netlink: 'syz.2.1591': attribute type 10 has an invalid length.
[  119.457095][ T9612] team0: Port device dummy0 added
[  119.460259][ T9611] 
[  119.461344][ T9611] ======================================================
[  119.464216][ T9611] WARNING: possible circular locking dependency detected
[  119.467081][ T9611] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  119.471266][ T9611] ------------------------------------------------------
[  119.474172][ T9611] syz.2.1591/9611 is trying to acquire lock:
[  119.476622][ T9611] ffff888118584e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[  119.480662][ T9611] 
[  119.480662][ T9611] but task is already holding lock:
[  119.483686][ T9611] ffff8880118a0d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  119.487633][ T9611] 
[  119.487633][ T9611] which lock already depends on the new lock.
[  119.487633][ T9611] 
[  119.491801][ T9611] 
[  119.491801][ T9611] the existing dependency chain (in reverse order) is:
[  119.495600][ T9611] 
[  119.495600][ T9611] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  119.499133][ T9611]        lock_acquire+0x120/0x360
[  119.501245][ T9611]        __mutex_lock+0x182/0xe80
[  119.503308][ T9611]        dev_set_mtu+0x10e/0x260
[  119.505327][ T9611]        team_add_slave+0x8b8/0x2840
[  119.507519][ T9611]        do_set_master+0x533/0x6d0
[  119.509635][ T9611]        do_setlink+0xcf0/0x41c0
[  119.511612][ T9611]        rtnl_newlink+0x160b/0x1c70
[  119.513861][ T9611]        rtnetlink_rcv_msg+0x7cf/0xb70
[  119.516196][ T9611]        netlink_rcv_skb+0x208/0x470
[  119.518445][ T9611]        netlink_unicast+0x75c/0x8e0
[  119.520651][ T9611]        netlink_sendmsg+0x805/0xb30
[  119.522779][ T9611]        __sock_sendmsg+0x21c/0x270
[  119.524888][ T9611]        ____sys_sendmsg+0x505/0x830
[  119.527126][ T9611]        ___sys_sendmsg+0x21f/0x2a0
[  119.529236][ T9611]        __x64_sys_sendmsg+0x19b/0x260
[  119.531452][ T9611]        do_syscall_64+0xfa/0x3b0
[  119.533494][ T9611]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.536040][ T9611] 
[  119.536040][ T9611] -> #0 (team->team_lock_key#2){+.+.}-{4:4}:
[  119.539367][ T9611]        validate_chain+0xb9b/0x2140
[  119.541571][ T9611]        __lock_acquire+0xab9/0xd20
[  119.543698][ T9611]        lock_acquire+0x120/0x360
[  119.545868][ T9611]        __mutex_lock+0x182/0xe80
[  119.547987][ T9611]        team_device_event+0x182/0xa20
[  119.550249][ T9611]        notifier_call_chain+0x1b6/0x3e0
[  119.552650][ T9611]        __dev_notify_flags+0x18d/0x2e0
[  119.554919][ T9611]        netif_change_flags+0xe8/0x1a0
[  119.557203][ T9611]        do_setlink+0xc55/0x41c0
[  119.559354][ T9611]        rtnl_newlink+0x160b/0x1c70
[  119.561600][ T9611]        rtnetlink_rcv_msg+0x7cf/0xb70
[  119.563872][ T9611]        netlink_rcv_skb+0x208/0x470
[  119.566115][ T9611]        netlink_unicast+0x75c/0x8e0
[  119.568377][ T9611]        netlink_sendmsg+0x805/0xb30
[  119.570624][ T9611]        __sock_sendmsg+0x21c/0x270
[  119.572818][ T9611]        ____sys_sendmsg+0x505/0x830
[  119.575052][ T9611]        ___sys_sendmsg+0x21f/0x2a0
[  119.577188][ T9611]        __x64_sys_sendmsg+0x19b/0x260
[  119.579440][ T9611]        do_syscall_64+0xfa/0x3b0
[  119.581464][ T9611]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.584056][ T9611] 
[  119.584056][ T9611] other info that might help us debug this:
[  119.584056][ T9611] 
[  119.588154][ T9611]  Possible unsafe locking scenario:
[  119.588154][ T9611] 
[  119.591223][ T9611]        CPU0                    CPU1
[  119.593512][ T9611]        ----                    ----
[  119.595796][ T9611]   lock(&dev_instance_lock_key#3);
[  119.598091][ T9611]                                lock(team->team_lock_key#2);
[  119.601189][ T9611]                                lock(&dev_instance_lock_key#3);
[  119.604443][ T9611]   lock(team->team_lock_key#2);
[  119.606351][ T9611] 
[  119.606351][ T9611]  *** DEADLOCK ***
[  119.606351][ T9611] 
[  119.609269][ T9611] 2 locks held by syz.2.1591/9611:
[  119.611249][ T9611]  #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  119.614205][ T9611]  #1: ffff8880118a0d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  119.617859][ T9611] 
[  119.617859][ T9611] stack backtrace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  119.620382][ T9611] CPU: 0 UID: 0 PID: 9611 Comm: syz.2.1591 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  119.620400][ T9611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.620409][ T9611] Call Trace:
[  119.620416][ T9611]  <TASK>
[  119.620422][ T9611]  dump_stack_lvl+0x189/0x250
[  119.620443][ T9611]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.620458][ T9611]  ? __pfx__printk+0x10/0x10
[  119.620477][ T9611]  ? print_lock_name+0xde/0x100
[  119.620495][ T9611]  print_circular_bug+0x2ee/0x310
[  119.620513][ T9611]  check_noncircular+0x134/0x160
[  119.620532][ T9611]  validate_chain+0xb9b/0x2140
[  119.620550][ T9611]  ? __lock_acquire+0xab9/0xd20
[  119.620565][ T9611]  __lock_acquire+0xab9/0xd20
[  119.620579][ T9611]  ? team_device_event+0x182/0xa20
[  119.620596][ T9611]  lock_acquire+0x120/0x360
[  119.620607][ T9611]  ? team_device_event+0x182/0xa20
[  119.620624][ T9611]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  119.620644][ T9611]  __mutex_lock+0x182/0xe80
[  119.620655][ T9611]  ? team_device_event+0x182/0xa20
[  119.620675][ T9611]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  119.620694][ T9611]  ? team_device_event+0x182/0xa20
[  119.620710][ T9611]  ? __pfx___mutex_lock+0x10/0x10
[  119.620721][ T9611]  ? __timer_delete_sync+0x218/0x2d0
[  119.620743][ T9611]  team_device_event+0x182/0xa20
[  119.620762][ T9611]  notifier_call_chain+0x1b6/0x3e0
[  119.620779][ T9611]  __dev_notify_flags+0x18d/0x2e0
[  119.620795][ T9611]  ? __pfx___dev_notify_flags+0x10/0x10
[  119.620809][ T9611]  ? __dev_change_flags+0x4cc/0x6d0
[  119.620825][ T9611]  ? __pfx___dev_change_flags+0x10/0x10
[  119.620842][ T9611]  netif_change_flags+0xe8/0x1a0
[  119.620858][ T9611]  do_setlink+0xc55/0x41c0
[  119.620874][ T9611]  ? trace_sched_exit_tp+0x38/0x120
[  119.620887][ T9611]  ? __pfx_do_setlink+0x10/0x10
[  119.620901][ T9611]  ? __lock_acquire+0xab9/0xd20
[  119.620914][ T9611]  ? do_raw_spin_lock+0x121/0x290
[  119.620932][ T9611]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  119.620955][ T9611]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.620974][ T9611]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  119.620993][ T9611]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  119.621014][ T9611]  ? rcu_is_watching+0x15/0xb0
[  119.621032][ T9611]  ? __mutex_lock+0xa6d/0xe80
[  119.621044][ T9611]  ? __mutex_lock+0x51b/0xe80
[  119.621059][ T9611]  ? rtnl_newlink+0x8db/0x1c70
[  119.621074][ T9611]  ? __pfx___mutex_lock+0x10/0x10
[  119.621088][ T9611]  ? ns_capable+0x8a/0xf0
[  119.621102][ T9611]  ? rtnl_link_get_net_capable+0x16a/0x350
[  119.621119][ T9611]  rtnl_newlink+0x160b/0x1c70
[  119.621136][ T9611]  ? __pfx_rtnl_newlink+0x10/0x10
[  119.621151][ T9611]  ? __lock_acquire+0xab9/0xd20
[  119.621166][ T9611]  ? __lock_acquire+0xab9/0xd20
[  119.621183][ T9611]  ? is_bpf_text_address+0x26/0x2b0
[  119.621197][ T9611]  ? is_bpf_text_address+0x292/0x2b0
[  119.621209][ T9611]  ? is_bpf_text_address+0x26/0x2b0
[  119.621222][ T9611]  ? kernel_text_address+0xa5/0xe0
[  119.621236][ T9611]  ? __lock_acquire+0xab9/0xd20
[  119.621254][ T9611]  ? __pfx_rtnl_newlink+0x10/0x10
[  119.621266][ T9611]  rtnetlink_rcv_msg+0x7cf/0xb70
[  119.621308][ T9611]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  119.621322][ T9611]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  119.621340][ T9611]  netlink_rcv_skb+0x208/0x470
[  119.621355][ T9611]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  119.621369][ T9611]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  119.621386][ T9611]  ? netlink_deliver_tap+0x2e/0x1b0
[  119.621401][ T9611]  ? netlink_deliver_tap+0x2e/0x1b0
[  119.621417][ T9611]  netlink_unicast+0x75c/0x8e0
[  119.621434][ T9611]  netlink_sendmsg+0x805/0xb30
[  119.621452][ T9611]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.621470][ T9611]  ? aa_sock_msg_perm+0x94/0x160
[  119.621488][ T9611]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  119.621506][ T9611]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.621520][ T9611]  __sock_sendmsg+0x21c/0x270
[  119.621533][ T9611]  ____sys_sendmsg+0x505/0x830
[  119.621549][ T9611]  ? __pfx_____sys_sendmsg+0x10/0x10
[  119.621567][ T9611]  ? import_iovec+0x74/0xa0
[  119.621582][ T9611]  ___sys_sendmsg+0x21f/0x2a0
[  119.621597][ T9611]  ? __pfx____sys_sendmsg+0x10/0x10
[  119.621619][ T9611]  ? __fget_files+0x2a/0x420
[  119.621634][ T9611]  ? __fget_files+0x3a0/0x420
[  119.621651][ T9611]  __x64_sys_sendmsg+0x19b/0x260
[  119.621667][ T9611]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  119.621685][ T9611]  ? rcu_is_watching+0x15/0xb0
[  119.621699][ T9611]  ? do_syscall_64+0xbe/0x3b0
[  119.621712][ T9611]  do_syscall_64+0xfa/0x3b0
[  119.621723][ T9611]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.621741][ T9611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.621753][ T9611]  ? exc_page_fault+0x9f/0xf0
[  119.621770][ T9611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.621782][ T9611] RIP: 0033:0x7f5e53b8e929
[  119.621795][ T9611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.621806][ T9611] RSP: 002b:00007f5e54a5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  119.621820][ T9611] RAX: ffffffffffffffda RBX: 00007f5e53db5fa0 RCX: 00007f5e53b8e929
[  119.621828][ T9611] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004
[  119.621836][ T9611] RBP: 00007f5e53c10b39 R08: 0000000000000000 R09: 0000000000000000
[  119.621844][ T9611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.621852][ T9611] R13: 0000000000000000 R14: 00007f5e53db5fa0 R15: 00007ffe96b39808
[  119.621866][ T9611]  </TASK>
[  119.856001][ T9611] team0: Port device dummy0 removed
[  119.861017][ T9611] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  120.358750][   T13] batadv0: left allmulticast mode
[  120.361108][   T13] bridge0: port 1(batadv0) entered disabled state
[  120.412601][   T13] erspan0 (unregistering): left promiscuous mode
[  120.423769][   T13] gretap0 (unregistering): left promiscuous mode
[  120.445573][   T13] dvmrp0 (unregistering): left allmulticast mode
[  120.473166][   T13] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  120.476585][   T13] bond0 (unregistering): (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  120.487627][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  120.734477][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  120.739338][   T13] bond0 (unregistering): Released all slaves
[  120.745095][   T13] bond1 (unregistering): Released all slaves
[  120.810985][   T13] tipc: Left network mode
[  121.015318][   T13] hsr_slave_0: left promiscuous mode
[  121.017942][   T13] hsr_slave_1: left promiscuous mode
[  121.407331][   T36] smc: removing ib device syz0
[  121.692182][   T13] IPVS: stop unused estimator thread 0...
[  121.793560][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.852045][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.910773][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.958518][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.266630][   T13] bond0 (unregistering): Released all slaves
[  122.325032][   T13] bond1 (unregistering): Released all slaves
[  122.386992][   T13] tipc: Left network mode
[  122.438441][   T13] IPVS: stopping backup sync thread 9101 ...
[  122.555292][   T13] hsr_slave_0: left promiscuous mode
[  122.560310][   T13] veth1_macvtap: left promiscuous mode
[  122.562550][   T13] veth0_macvtap: left promiscuous mode
[  122.564842][   T13] veth1_vlan: left promiscuous mode
[  122.567114][   T13] veth0_vlan: left promiscuous mode
[  122.612846][   T13] pimreg3 (unregistering): left allmulticast mode

VM DIAGNOSIS:
00:40:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000297e RDI=000000000000297f RBP=00000000000003f8 RSP=ffffc90001b9df10
R8 =ffff8881072d8237 R9 =1ffff11020e5b046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98ab R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5e54a5b6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3abeca CR3=000000002381e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f5e53c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff888106da1cc0 RBX=dffffc0000000000 RCX=ffffffff819db754 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8e1f80a0 RBP=ffffc9000306fa10 RSP=ffffc9000306f958
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=ffffffff8e1f80a0 R13=1ffff9200060df30 R14=ffffffff8e1f80a0 R15=0000000000000000
RIP=ffffffff8223a090 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f56ab0e7d60 CR3=0000000100ab0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f56aa5856a3 00007f56aa5856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0100100002800401 000000080606015a
XMM06=c84080080002e003 00100002d0030010 XMM07=0002c00302100002 b00302f810001003
XMM08=00020005f0030204 0005ec030a040005 XMM09=6769726f5f74696e 695f636e5f766461
XMM10=666666666666660a 342e79656b5f5f2e XMM11=6174616220622030 6534633130613966
XMM12=6666666666660a31 342e79656b5f5f2e XMM13=73766f2062203061 6663313061396666
XMM14=2e79656b5f5f2e74 656e5f74696e695f XMM15=6331306139666666 66666666660a3334
