last executing test programs:

326.104048ms ago: executing program 0 (id=471):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x75, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

325.964835ms ago: executing program 2 (id=472):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}}, 0x0)

325.539799ms ago: executing program 0 (id=474):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x7, 0x6, 0x1, 0x0, "f049da"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0)

283.50782ms ago: executing program 0 (id=475):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400005b6dbe53850000000200000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x22}, 0x94)

283.320913ms ago: executing program 2 (id=476):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYBLOB="036beb0baa"], 0x1c}}, 0x0)

232.413563ms ago: executing program 0 (id=477):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x65bf, 0x6, 0x4, 0x1, 0xffffffff}, 0x50)

231.717571ms ago: executing program 1 (id=478):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

231.553058ms ago: executing program 2 (id=479):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="10010000220001000000000000000000020100800c000100000000000000000014000b"], 0x110}], 0x1}, 0x80)

231.381019ms ago: executing program 0 (id=480):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmsg(r0, &(0x7f0000004b40)={0x0, 0x0, 0x0}, 0x40002100)

184.651263ms ago: executing program 2 (id=481):
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0)

184.456023ms ago: executing program 1 (id=482):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x25, 0x0, &(0x7f0000001000)="b9ffe4306844268cb89914f008005d7d06f3ce084d3b369d50e3d5854804c6f824468830e2", 0x0, 0x23, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

184.183985ms ago: executing program 0 (id=483):
r0 = socket$nl_route(0x10, 0x3, 0x0)
close(r0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0)
unshare(0x22020400)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000010027bd7800fbdbdfa500000000", @ANYRESOCT=r3, @ANYBLOB="892e0a001162050034001280110001f06172696467655f736c617665000000001c00"], 0x54}, 0x1, 0x0, 0x0, 0x8c041}, 0x2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r4)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="07ef28bd7000ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r8, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c)
shutdown(r8, 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x82, &(0x7f0000000540)={0x0, 0x0, 0x3}, 0xfffffffffffffe8f)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x3f8, 0x30, 0xb, 0xfffffffd, 0x2, {}, [{0x3e4, 0x1, [@m_sample={0xc4, 0xc, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xa, 0x3, 0x2, 0x6, 0xfff}}]}, {0x7e, 0x6, "114d741539e2c0cfa4f1d55ca4a054ac5786712b68a465853d95aec95e8514c92418f452f48d182882f5bc898e8d49262d0f3dd28e46ca0c96cbeeb5869b24b7579e0f72ceb8cb74cdf3fe4f5e03f045cbb538066d4afda2b2c5b9eb20b2fd6cd765b58264742c1647a5603f5acb6c265631304ed694da2aea00"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x10c, 0x18, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7fffffff}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffffffff, 0x2d5d, 0x12, 0xfffffffb, 0x3}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x40}]}, {0xb6, 0x6, "4d821f1b1652a7598488e65e4615c96c5cf013e470e422616391b40ad463af8b0aeb5db3dbe93c3e17826fdcca17934b3143f2e5faf8a44e723e634f533e282eacbea4313a159d0a8a57b44d83ad24e1999f4b1fe60300823a014142a895358a05bdf65c248d6fe125ffc5fcb72039fb5ff7fea0ae865a3892922b4ab7a290b12339fcd3945d4b77742959410796e4d57d616ae1d70cf27a60eb2a84ff7a023229891ba55fd44107ff834005136932a30531"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x58, 0x6, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8001, 0x81, 0x6, 0xfffff483, 0xffff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3ff}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x14c, 0xc, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5f}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2754, 0x2, 0x6, 0x100, 0x3}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7f}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000001, 0x4, 0x10000000, 0x5, 0xfffffffa}}]}, {0xb7, 0x6, "f9263ac200987fb63b1f8e6c2540aa2ad6b6098855318e31d98bc61f4badde0c4acdcd9898513fcaf32db2dcbc28f104e3c559fb40979380f50e35c51269c0d2dfee25959587dc37af60812a37f818a5e490945a65c163af264e094b694de0dee9dfb33bbfd492f4509ad23220eb5951075d49b6b4ea16ab6583bea337774234dd4684d41b1d1981610e8d43030d41ebe2d50833ebe79115d471bb42adcda310c52a1680359d2b690a7d20a62d8e840e83a0f7"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x6c, 0x1d, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x2f, 0x6, "7ec66090898df029049a7745ad888c0f045c96178f3375389c93caa934b1f4040a465996fb8cf089de8166"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x850}, 0x0)
shutdown(r9, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r10=>0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e1d, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}]}, &(0x7f0000000580)=0x10)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x1000000, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000400)={r10, 0x39, "b1c18f70612939ec9920b77781b7addc6bc7f2bbfb1cd5017f4a85f67b8abb3c66269c42d7a238cb802ff1c984d8d842d176fef210dee530c1"}, &(0x7f00000000c0)=0x41)
socket$packet(0x11, 0x2, 0x300)

137.282479ms ago: executing program 2 (id=484):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x8000)

87.016917ms ago: executing program 1 (id=485):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0)

36.383182ms ago: executing program 1 (id=486):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
connect$x25(r0, &(0x7f0000000a80), 0x12)

36.016835ms ago: executing program 1 (id=487):
r0 = socket(0x840000000002, 0x3, 0xfa)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0xff00)

10.795143ms ago: executing program 2 (id=488):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

0s ago: executing program 1 (id=489):
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000140085000000190000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:62453' (ED25519) to the list of known hosts.
syzkaller login: [   48.779176][ T5819] cgroup: Unknown subsys name 'net'
[   48.861541][ T5819] cgroup: Unknown subsys name 'cpuset'
[   48.865626][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.157524][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.347721][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.351167][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.351860][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.353732][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.358880][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.358968][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.362116][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.364413][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.366107][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.370735][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.374094][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.376423][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.379283][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.383054][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.390394][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.585520][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   53.629629][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   53.706427][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.709394][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.711887][ T5828] bridge_slave_0: entered allmulticast mode
[   53.714663][ T5828] bridge_slave_0: entered promiscuous mode
[   53.732630][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   53.741272][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.743585][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.745892][ T5828] bridge_slave_1: entered allmulticast mode
[   53.748802][ T5828] bridge_slave_1: entered promiscuous mode
[   53.758557][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.761002][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.763245][ T5833] bridge_slave_0: entered allmulticast mode
[   53.765959][ T5833] bridge_slave_0: entered promiscuous mode
[   53.769765][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.771984][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.774284][ T5833] bridge_slave_1: entered allmulticast mode
[   53.776963][ T5833] bridge_slave_1: entered promiscuous mode
[   53.814551][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.819417][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.826709][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.838935][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.866524][ T5828] team0: Port device team_slave_0 added
[   53.891599][ T5828] team0: Port device team_slave_1 added
[   53.895730][ T5833] team0: Port device team_slave_0 added
[   53.905274][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.908241][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.910541][ T5827] bridge_slave_0: entered allmulticast mode
[   53.913324][ T5827] bridge_slave_0: entered promiscuous mode
[   53.917986][ T5833] team0: Port device team_slave_1 added
[   53.920051][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.922384][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.924739][ T5827] bridge_slave_1: entered allmulticast mode
[   53.927412][ T5827] bridge_slave_1: entered promiscuous mode
[   53.959201][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.961450][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.970163][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.982032][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.984304][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.993345][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.999036][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.002259][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.004486][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.013598][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.017627][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.020312][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.028309][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.036850][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.068354][ T5827] team0: Port device team_slave_0 added
[   54.085788][ T5827] team0: Port device team_slave_1 added
[   54.104099][ T5828] hsr_slave_0: entered promiscuous mode
[   54.107339][ T5828] hsr_slave_1: entered promiscuous mode
[   54.121869][ T5833] hsr_slave_0: entered promiscuous mode
[   54.124235][ T5833] hsr_slave_1: entered promiscuous mode
[   54.126319][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.129071][ T5833] Cannot create hsr debugfs directory
[   54.146259][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.149735][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.162367][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.178559][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.181404][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.193055][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.264894][ T5827] hsr_slave_0: entered promiscuous mode
[   54.269178][ T5827] hsr_slave_1: entered promiscuous mode
[   54.271470][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.273966][ T5827] Cannot create hsr debugfs directory
[   54.442138][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.450029][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.465411][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.474530][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.505659][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.518126][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.523803][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.534815][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.537198][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.540124][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.542394][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.552389][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.572380][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.585095][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.590461][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.600826][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.621318][ T4380] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.624842][ T4380] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.674560][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.703038][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   54.723972][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.726350][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.733532][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.744550][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.746897][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.761055][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.766910][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   54.780293][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.782822][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.800955][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.803265][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.813512][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   54.833413][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.835701][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.839698][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.841960][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.855279][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.860488][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.983610][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.002027][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.026575][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.036233][ T5827] veth0_vlan: entered promiscuous mode
[   55.046693][ T5827] veth1_vlan: entered promiscuous mode
[   55.071846][ T5827] veth0_macvtap: entered promiscuous mode
[   55.082008][ T5827] veth1_macvtap: entered promiscuous mode
[   55.090425][ T5828] veth0_vlan: entered promiscuous mode
[   55.095798][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.105756][ T5833] veth0_vlan: entered promiscuous mode
[   55.113788][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.118368][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.121311][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.124085][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.126826][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.132676][ T5828] veth1_vlan: entered promiscuous mode
[   55.145182][ T5833] veth1_vlan: entered promiscuous mode
[   55.194802][ T5828] veth0_macvtap: entered promiscuous mode
[   55.199377][ T5833] veth0_macvtap: entered promiscuous mode
[   55.210818][ T5833] veth1_macvtap: entered promiscuous mode
[   55.220605][ T5828] veth1_macvtap: entered promiscuous mode
[   55.226102][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.236172][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.242939][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.250520][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.264074][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.271161][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.274198][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.277052][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.280424][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.287700][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.297962][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.298849][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.300789][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.300817][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.300828][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.307876][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.402931][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.405494][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.412729][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.419448][   T54] Bluetooth: hci0: command tx timeout
[   55.419977][ T5221] Bluetooth: hci1: command tx timeout
[   55.421864][   T54] Bluetooth: hci2: command tx timeout
[   55.432370][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.435385][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.446688][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.449392][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.484352][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.486905][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.651933][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.654842][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.755483][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.761931][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.820287][ T5905] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.823279][ T5905] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.826204][ T5905] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.829977][ T5905] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.859005][ T5913] bond0: entered promiscuous mode
[   55.863851][ T5913] bond_slave_0: entered promiscuous mode
[   55.865762][ T5913] bond_slave_1: entered promiscuous mode
[   55.901341][ T5925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'.
[   56.191308][ T5950] netlink: 'syz.0.26': attribute type 6 has an invalid length.
[   56.470543][ T5971] tipc: Started in network mode
[   56.472196][ T5971] tipc: Node identity , cluster identity 4711
[   56.474118][ T5971] tipc: Failed to obtain node identity
[   56.475925][ T5971] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   56.599068][ T5978] Zero length message leads to an empty skb
[   56.604683][ T5978] Bluetooth: MGMT ver 1.23
[   56.893057][ T5994] netlink: 'syz.2.44': attribute type 1 has an invalid length.
[   57.324976][ T6022] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.353425][ T6022] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.358119][ T6022] xt_SECMARK: invalid mode: 0
[   57.498049][ T6027] block nbd0: server does not support multiple connections per device.
[   57.498253][ T5839] Bluetooth: hci1: command tx timeout
[   57.502890][ T5221] Bluetooth: hci0: command tx timeout
[   57.506234][   T54] Bluetooth: hci2: command tx timeout
[   57.508874][ T6027] block nbd0: shutting down sockets
[   57.636860][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'.
[   57.660539][ T6052] pim6reg: entered allmulticast mode
[   57.668891][ T6052] pim6reg: left allmulticast mode
[   57.876750][ T6079] batman_adv: batadv0: Adding interface: vxlan0
[   57.881298][ T6079] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.889920][ T6079] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active
[   58.017723][ T6089] tipc: Started in network mode
[   58.021265][ T6089] tipc: Node identity c21e998084f1, cluster identity 4711
[   58.023963][ T6089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.027036][ T6089] syzkaller0: entered promiscuous mode
[   58.029533][ T6089] syzkaller0: entered allmulticast mode
[   58.061122][ T6093] netlink: 14 bytes leftover after parsing attributes in process `syz.2.81'.
[   58.144221][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.150477][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.153871][ T6093] bond0 (unregistering): Released all slaves
[   58.178534][ T6089] tipc: Resetting bearer <eth:syzkaller0>
[   58.184770][ T6088] tipc: Resetting bearer <eth:syzkaller0>
[   58.191473][ T6088] tipc: Disabling bearer <eth:syzkaller0>
[   58.432065][ T6116] Cannot find add_set index 0 as target
[   58.597594][ T6128] Driver unsupported XDP return value 0 on prog  (id 17) dev N/A, expect packet loss!
[   58.733447][ T6136] tap0: tun_chr_ioctl cmd 1074025677
[   58.735495][ T6136] tap0: linktype set to 774
[   58.873402][ T6145] netlink: 'syz.1.105': attribute type 83 has an invalid length.
[   59.044578][ T6170] veth0: entered promiscuous mode
[   59.053189][ T6169] veth0: left promiscuous mode
[   59.286508][ T6191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.434338][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'.
[   59.578039][   T54] Bluetooth: hci2: command tx timeout
[   59.578243][ T5839] Bluetooth: hci1: command tx timeout
[   59.580298][   T54] Bluetooth: hci0: command tx timeout
[   59.706891][ T6241] xt_l2tp: wrong L2TP version: 0
[   59.841434][ T6254] tipc: Started in network mode
[   59.843413][ T6254] tipc: Node identity 7ac2c41bd374, cluster identity 4711
[   59.846744][ T6254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.850392][ T6254] syzkaller0: entered promiscuous mode
[   59.854131][ T6254] syzkaller0: entered allmulticast mode
[   59.879955][ T6254] tipc: Resetting bearer <eth:syzkaller0>
[   59.888196][ T6253] tipc: Resetting bearer <eth:syzkaller0>
[   59.919175][ T6253] tipc: Disabling bearer <eth:syzkaller0>
[   59.966706][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'.
[   60.015622][ T6274] netlink: 3 bytes leftover after parsing attributes in process `syz.2.155'.
[   60.739990][   T96] cfg80211: failed to load regulatory.db
[   61.225997][ T6376] netlink: 'syz.2.202': attribute type 7 has an invalid length.
[   61.232662][ T6376] netlink: 224 bytes leftover after parsing attributes in process `syz.2.202'.
[   61.658667][   T54] Bluetooth: hci1: command tx timeout
[   61.658774][ T5221] Bluetooth: hci2: command tx timeout
[   61.660540][   T54] Bluetooth: hci0: command tx timeout
[   61.680599][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'.
[   61.825088][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.208'.
[   61.889346][ T6401] netlink: 244 bytes leftover after parsing attributes in process `syz.2.211'.
[   62.052362][ T6418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.217'.
[   62.147251][ T6428] netlink: 'syz.2.222': attribute type 1 has an invalid length.
[   62.155744][ T6428] netlink: 'syz.2.222': attribute type 1 has an invalid length.
[   62.334827][ T6443] Cannot find add_set index 0 as target
[   62.707092][ T6466] rdma_op ffff888032c1c9f0 conn xmit_rdma 0000000000000000
[   62.799512][ T6472] netlink: 'syz.2.240': attribute type 2 has an invalid length.
[   62.802783][ T6472] netlink: 224 bytes leftover after parsing attributes in process `syz.2.240'.
[   63.926652][ T6500] warning: `syz.1.253' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.012971][ T6511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.257'.
[   64.122033][ T6522] netlink: 'syz.2.261': attribute type 1 has an invalid length.
[   64.143961][ T6522] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   64.146948][ T6522] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   64.150979][ T6522] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   64.153729][ T6522] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   64.159255][ T6522] bond0: (slave geneve2): making interface the new active one
[   64.162464][ T6522] bond0: (slave geneve2): Enslaving as an active interface with an up link
[   64.170254][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.261'.
[   64.175517][ T6522] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.263062][ T6529] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.285332][ T6529] syzkaller0: entered promiscuous mode
[   64.287192][ T6529] syzkaller0: entered allmulticast mode
[   64.290249][ T6529] tipc: Resetting bearer <eth:syzkaller0>
[   64.299472][ T6528] tipc: Resetting bearer <eth:syzkaller0>
[   65.278526][   T96] tipc: Node number set to 2847327259
[   65.818497][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[   65.828340][ T6528] tipc: Disabling bearer <eth:syzkaller0>
[   65.949722][ T6557] Cannot find add_set index 0 as target
[   66.299925][ T6588] tun0: tun_chr_ioctl cmd 2147767507
[   66.995073][ T6602] netlink: 'syz.1.299': attribute type 3 has an invalid length.
[   67.038384][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'.
[   67.252236][ T6633] netlink: 'syz.0.314': attribute type 2 has an invalid length.
[   67.324927][ T6643] syz.2.319 uses obsolete (PF_INET,SOCK_PACKET)
[   68.053128][ T6699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.343'.
[   68.364402][ T6712] erspan0: entered promiscuous mode
[   68.372073][ T6712] erspan0: left promiscuous mode
[   68.589199][ T6732] netlink: 'syz.1.357': attribute type 15 has an invalid length.
[   68.637171][ T6736] netlink: 136 bytes leftover after parsing attributes in process `syz.1.360'.
[   68.688776][ T6745] netlink: 'syz.2.364': attribute type 2 has an invalid length.
[   68.691411][ T6745] netlink: 'syz.2.364': attribute type 1 has an invalid length.
[   68.694163][ T6745] netlink: 'syz.2.364': attribute type 1 has an invalid length.
[   68.755933][ T6753] netlink: 84 bytes leftover after parsing attributes in process `syz.2.368'.
[   68.847365][ T6764] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   68.972587][ T6772] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   69.358236][ T6795] netlink: 'syz.2.384': attribute type 10 has an invalid length.
[   69.366868][ T6795] team0: Port device dummy0 added
[   69.484737][ T6801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.387'.
[   69.946098][ T6829] tipc: Started in network mode
[   69.948573][ T6829] tipc: Node identity 8614aa59f9d4, cluster identity 4711
[   69.951951][ T6829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.955832][ T6829] syzkaller0: entered promiscuous mode
[   69.960320][ T6829] syzkaller0: entered allmulticast mode
[   69.979700][ T6829] tipc: Resetting bearer <eth:syzkaller0>
[   69.983780][ T6828] tipc: Resetting bearer <eth:syzkaller0>
[   69.990692][ T6828] tipc: Disabling bearer <eth:syzkaller0>
[   70.224492][ T6845] tipc: Enabled bearer <eth:vlan0>, priority 18
[   70.394001][ T6859] netlink: 'syz.1.415': attribute type 1 has an invalid length.
[   70.402523][ T6859] netlink: 204 bytes leftover after parsing attributes in process `syz.1.415'.
[   70.439820][ T6865] netlink: 92 bytes leftover after parsing attributes in process `syz.1.418'.
[   70.445864][ T6865] tc_dump_action: action bad kind
[   70.501737][ T6870] 8021q: adding VLAN 0 to HW filter on device team0
[   70.598750][ T6878] netlink: 'syz.1.423': attribute type 1 has an invalid length.
[   70.615604][ T6880] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   70.631894][ T6880] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   70.675015][ T6878] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   70.685052][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   70.685493][ T6878] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.713909][ T6878] veth3: entered promiscuous mode
[   70.729837][ T6878] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   70.757236][ T6878] bridge_slave_0: left allmulticast mode
[   70.768181][ T6878] bridge_slave_0: left promiscuous mode
[   70.771425][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.785425][ T6878] bridge_slave_1: left allmulticast mode
[   70.787401][ T6878] bridge_slave_1: left promiscuous mode
[   70.790314][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.801036][ T6878] bond0: (slave bond_slave_0): Releasing backup interface
[   70.803782][ T6878] bond_slave_0: left promiscuous mode
[   70.809004][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   70.813856][ T6878] bond0: (slave bond_slave_1): Releasing backup interface
[   70.816711][ T6878] bond_slave_1: left promiscuous mode
[   70.828797][ T6878] team0: Port device team_slave_0 removed
[   70.835736][ T6878] team0: Port device team_slave_1 removed
[   70.839450][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.842011][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.845468][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.849869][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.858016][ T6878] bond1: (slave ip6gretap1): Removing an active aggregator
[   70.862287][ T6878] bond1: (slave ip6gretap1): Releasing backup interface
[   70.864671][ T6878] bond1: (slave ip6gretap1): the permanent HWaddr of slave - c2:82:25:30:a1:fa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   70.873618][ T6878] bond1: (slave veth3): Releasing backup interface
[   71.064757][ T6902] netlink: 596 bytes leftover after parsing attributes in process `syz.0.432'.
[   71.102121][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.105175][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.496147][ T6928] xt_CT: You must specify a L4 protocol and not use inversions on it
[   71.526659][ T6928] netlink: 180 bytes leftover after parsing attributes in process `syz.1.440'.
[   71.626911][ T6936] netlink: 6 bytes leftover after parsing attributes in process `syz.1.444'.
[   72.361770][ T7014] netlink: 'syz.2.479': attribute type 1 has an invalid length.
[   72.364481][ T7014] netlink: 'syz.2.479': attribute type 11 has an invalid length.
[   72.367208][ T7014] netlink: 220 bytes leftover after parsing attributes in process `syz.2.479'.
[   72.456348][ T7024] netlink: 52 bytes leftover after parsing attributes in process `syz.0.483'.
[   72.456684][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'.
[   72.467219][ T7028] dummy0: entered promiscuous mode
[   72.469540][ T7028] macsec1: entered promiscuous mode
[   72.471253][ T7028] team0: entered promiscuous mode
[   72.473070][ T7028] team_slave_0: entered promiscuous mode
[   72.475611][ T7028] team_slave_1: entered promiscuous mode
[   72.478667][ T7028] macsec1: entered allmulticast mode
[   72.480867][ T7028] team0: entered allmulticast mode
[   72.482541][ T7028] team_slave_0: entered allmulticast mode
[   72.484372][ T7028] team_slave_1: entered allmulticast mode
[   72.486267][ T7028] dummy0: entered allmulticast mode
[   72.490719][ T7028] team0: Device macsec1 is already an upper device of the team interface
[   72.500715][ T7028] team0: left allmulticast mode
[   72.502303][ T7028] team_slave_0: left allmulticast mode
[   72.504011][ T7028] team_slave_1: left allmulticast mode
[   72.505794][ T7028] dummy0: left allmulticast mode
[   72.515848][ T7028] team0: left promiscuous mode
[   72.517885][ T7028] team_slave_0: left promiscuous mode
[   72.519945][ T7028] team_slave_1: left promiscuous mode
[   72.522628][ T7028] dummy0: left promiscuous mode
[   72.562691][ T7024] xt_CT: You must specify a L4 protocol and not use inversions on it
[   72.630690][ T7039] netlink: 'syz.2.488': attribute type 10 has an invalid length.
[   72.633376][ T7039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.488'.
[   72.636267][ T7039] dummy0: entered promiscuous mode
[   72.654961][ T7039] 
[   72.655824][ T7039] ======================================================
[   72.657055][ T7041] netlink: 48 bytes leftover after parsing attributes in process `syz.1.490'.
[   72.658151][ T7039] WARNING: possible circular locking dependency detected
[   72.658164][ T7039] 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 Not tainted
[   72.658171][ T7039] ------------------------------------------------------
[   72.658176][ T7039] syz.2.488/7039 is trying to acquire lock:
[   72.658183][ T7039] ffff888031d2ce00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x544/0xa20
[   72.658222][ T7039] 
[   72.658222][ T7039] but task is already holding lock:
[   72.658227][ T7039] ffff888031ea0d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   72.658267][ T7039] 
[   72.658267][ T7039] which lock already depends on the new lock.
[   72.658267][ T7039] 
[   72.658273][ T7039] 
[   72.658273][ T7039] the existing dependency chain (in reverse order) is:
[   72.658279][ T7039] 
[   72.658279][ T7039] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   72.658305][ T7039]        lock_acquire+0x120/0x360
[   72.658315][ T7039]        __mutex_lock+0x182/0xe80
[   72.658325][ T7039]        dev_set_mtu+0x10e/0x260
[   72.658337][ T7039]        team_add_slave+0x8b8/0x2840
[   72.658348][ T7039]        do_set_master+0x533/0x6d0
[   72.662795][ T7041] netlink: 56 bytes leftover after parsing attributes in process `syz.1.490'.
[   72.664327][ T7039]        do_setlink+0xcf0/0x41c0
[   72.664348][ T7039]        rtnl_newlink+0x160b/0x1c70
[   72.664360][ T7039]        rtnetlink_rcv_msg+0x7cf/0xb70
[   72.664370][ T7039]        netlink_rcv_skb+0x208/0x470
[   72.708520][ T7039]        netlink_unicast+0x75c/0x8e0
[   72.710270][ T7039]        netlink_sendmsg+0x805/0xb30
[   72.712044][ T7039]        __sock_sendmsg+0x21c/0x270
[   72.713738][ T7039]        ____sys_sendmsg+0x505/0x830
[   72.715420][ T7039]        ___sys_sendmsg+0x21f/0x2a0
[   72.717094][ T7039]        __x64_sys_sendmsg+0x19b/0x260
[   72.718832][ T7039]        do_syscall_64+0xfa/0x3b0
[   72.720451][ T7039]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.722596][ T7039] 
[   72.722596][ T7039] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[   72.725281][ T7039]        validate_chain+0xb9b/0x2140
[   72.726993][ T7039]        __lock_acquire+0xab9/0xd20
[   72.728676][ T7039]        lock_acquire+0x120/0x360
[   72.730355][ T7039]        __mutex_lock+0x182/0xe80
[   72.732031][ T7039]        team_device_event+0x544/0xa20
[   72.733747][ T7039]        notifier_call_chain+0x1b6/0x3e0
[   72.735628][ T7039]        __dev_notify_flags+0x21b/0x2e0
[   72.737464][ T7039]        netif_change_flags+0xe8/0x1a0
[   72.739264][ T7039]        do_setlink+0xc55/0x41c0
[   72.740908][ T7039]        rtnl_setlink+0x604/0x900
[   72.742570][ T7039]        rtnetlink_rcv_msg+0x7cf/0xb70
[   72.744379][ T7039]        netlink_rcv_skb+0x208/0x470
[   72.746161][ T7039]        netlink_unicast+0x75c/0x8e0
[   72.747937][ T7039]        netlink_sendmsg+0x805/0xb30
[   72.749705][ T7039]        __sock_sendmsg+0x21c/0x270
[   72.751414][ T7039]        ____sys_sendmsg+0x505/0x830
[   72.753177][ T7039]        ___sys_sendmsg+0x21f/0x2a0
[   72.754921][ T7039]        __x64_sys_sendmsg+0x19b/0x260
[   72.756721][ T7039]        do_syscall_64+0xfa/0x3b0
[   72.758394][ T7039]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.760509][ T7039] 
[   72.760509][ T7039] other info that might help us debug this:
[   72.760509][ T7039] 
[   72.763765][ T7039]  Possible unsafe locking scenario:
[   72.763765][ T7039] 
[   72.766113][ T7039]        CPU0                    CPU1
[   72.767810][ T7039]        ----                    ----
[   72.769504][ T7039]   lock(&dev_instance_lock_key#3);
[   72.771255][ T7039]                                lock(team->team_lock_key#3);
[   72.773659][ T7039]                                lock(&dev_instance_lock_key#3);
[   72.776042][ T7039]   lock(team->team_lock_key#3);
[   72.777655][ T7039] 
[   72.777655][ T7039]  *** DEADLOCK ***
[   72.777655][ T7039] 
[   72.780181][ T7039] 2 locks held by syz.2.488/7039:
[   72.781816][ T7039]  #0: ffffffff8f51bb48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4ea/0x900
[   72.784702][ T7039]  #1: ffff888031ea0d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   72.787908][ T7039] 
[   72.787908][ T7039] stack backtrace:
[   72.789721][ T7039] CPU: 0 UID: 0 PID: 7039 Comm: syz.2.488 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[   72.789734][ T7039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.789741][ T7039] Call Trace:
[   72.789747][ T7039]  <TASK>
[   72.789754][ T7039]  dump_stack_lvl+0x189/0x250
[   72.789768][ T7039]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.789779][ T7039]  ? __pfx__printk+0x10/0x10
[   72.789791][ T7039]  ? print_lock_name+0xde/0x100
[   72.789804][ T7039]  print_circular_bug+0x2ee/0x310
[   72.789816][ T7039]  check_noncircular+0x134/0x160
[   72.789829][ T7039]  validate_chain+0xb9b/0x2140
[   72.789845][ T7039]  __lock_acquire+0xab9/0xd20
[   72.789855][ T7039]  ? team_device_event+0x544/0xa20
[   72.789865][ T7039]  lock_acquire+0x120/0x360
[   72.789873][ T7039]  ? team_device_event+0x544/0xa20
[   72.789883][ T7039]  __mutex_lock+0x182/0xe80
[   72.789894][ T7039]  ? team_device_event+0x544/0xa20
[   72.789902][ T7039]  ? do_raw_spin_lock+0x121/0x290
[   72.789915][ T7039]  ? team_device_event+0x544/0xa20
[   72.789922][ T7039]  ? fib_rebalance+0x8e/0x9a0
[   72.789933][ T7039]  ? __pfx___mutex_lock+0x10/0x10
[   72.789944][ T7039]  ? fib_sync_up+0x76d/0x7b0
[   72.789956][ T7039]  team_device_event+0x544/0xa20
[   72.789965][ T7039]  notifier_call_chain+0x1b6/0x3e0
[   72.789978][ T7039]  __dev_notify_flags+0x21b/0x2e0
[   72.789991][ T7039]  ? __pfx___dev_notify_flags+0x10/0x10
[   72.790003][ T7039]  ? __dev_change_flags+0x4cc/0x6d0
[   72.790016][ T7039]  ? __pfx_console_unlock+0x10/0x10
[   72.790027][ T7039]  ? irq_work_queue+0xc3/0x140
[   72.790036][ T7039]  netif_change_flags+0xe8/0x1a0
[   72.790049][ T7039]  do_setlink+0xc55/0x41c0
[   72.790063][ T7039]  ? __pfx_do_setlink+0x10/0x10
[   72.790074][ T7039]  ? _printk+0xcf/0x120
[   72.790085][ T7039]  ? __pfx____ratelimit+0x10/0x10
[   72.790095][ T7039]  ? __lock_acquire+0xab9/0xd20
[   72.790106][ T7039]  ? __mutex_trylock_common+0x153/0x260
[   72.790119][ T7039]  ? __pfx___mutex_trylock_common+0x10/0x10
[   72.790131][ T7039]  ? rcu_is_watching+0x15/0xb0
[   72.790141][ T7039]  ? trace_contention_end+0x39/0x120
[   72.790152][ T7039]  ? __mutex_lock+0x330/0xe80
[   72.790162][ T7039]  ? __pfx_aa_get_newest_label+0x10/0x10
[   72.790172][ T7039]  ? rtnl_setlink+0x4ea/0x900
[   72.790183][ T7039]  ? rcu_is_watching+0x15/0xb0
[   72.790193][ T7039]  ? __pfx___mutex_lock+0x10/0x10
[   72.790204][ T7039]  ? ns_capable+0x8a/0xf0
[   72.790214][ T7039]  rtnl_setlink+0x604/0x900
[   72.790225][ T7039]  ? unwind_get_return_address+0x4d/0x90
[   72.790236][ T7039]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   72.790249][ T7039]  ? __pfx_rtnl_setlink+0x10/0x10
[   72.790260][ T7039]  ? __lock_acquire+0xab9/0xd20
[   72.790270][ T7039]  ? __lock_acquire+0xab9/0xd20
[   72.790290][ T7039]  ? __pfx_rtnl_setlink+0x10/0x10
[   72.790300][ T7039]  rtnetlink_rcv_msg+0x7cf/0xb70
[   72.790312][ T7039]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   72.790323][ T7039]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   72.790336][ T7039]  netlink_rcv_skb+0x208/0x470
[   72.790348][ T7039]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   72.790359][ T7039]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   72.790372][ T7039]  ? netlink_deliver_tap+0x2e/0x1b0
[   72.790384][ T7039]  ? netlink_deliver_tap+0x2e/0x1b0
[   72.790396][ T7039]  netlink_unicast+0x75c/0x8e0
[   72.790408][ T7039]  netlink_sendmsg+0x805/0xb30
[   72.790421][ T7039]  ? __pfx_netlink_sendmsg+0x10/0x10
[   72.790434][ T7039]  ? aa_sock_msg_perm+0x94/0x160
[   72.790443][ T7039]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   72.790453][ T7039]  ? __pfx_netlink_sendmsg+0x10/0x10
[   72.790464][ T7039]  __sock_sendmsg+0x21c/0x270
[   72.790476][ T7039]  ____sys_sendmsg+0x505/0x830
[   72.790514][ T7039]  ? __pfx_____sys_sendmsg+0x10/0x10
[   72.790528][ T7039]  ? import_iovec+0x74/0xa0
[   72.790540][ T7039]  ___sys_sendmsg+0x21f/0x2a0
[   72.790553][ T7039]  ? __pfx____sys_sendmsg+0x10/0x10
[   72.790571][ T7039]  ? __fget_files+0x2a/0x420
[   72.790580][ T7039]  ? __fget_files+0x3a0/0x420
[   72.790589][ T7039]  __x64_sys_sendmsg+0x19b/0x260
[   72.790602][ T7039]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   72.790616][ T7039]  ? rcu_is_watching+0x15/0xb0
[   72.790627][ T7039]  ? do_syscall_64+0xbe/0x3b0
[   72.790637][ T7039]  do_syscall_64+0xfa/0x3b0
[   72.790647][ T7039]  ? lockdep_hardirqs_on+0x9c/0x150
[   72.790660][ T7039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.790670][ T7039]  ? exc_page_fault+0x9f/0xf0
[   72.790678][ T7039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.790687][ T7039] RIP: 0033:0x7fd94c38e9a9
[   72.790696][ T7039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.790705][ T7039] RSP: 002b:00007fd94d2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   72.790717][ T7039] RAX: ffffffffffffffda RBX: 00007fd94c5b5fa0 RCX: 00007fd94c38e9a9
[   72.790724][ T7039] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[   72.790731][ T7039] RBP: 00007fd94c410ca1 R08: 0000000000000000 R09: 0000000000000000
[   72.790737][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.790743][ T7039] R13: 0000000000000000 R14: 00007fd94c5b5fa0 R15: 00007fff8af3e2c8
[   72.790752][ T7039]  </TASK>
[   72.959196][ T7039] team0: Port device dummy0 removed
[   72.961200][ T7039] bridge0: port 3(dummy0) entered blocking state
[   72.963435][ T7039] bridge0: port 3(dummy0) entered disabled state
[   72.965638][ T7039] dummy0: entered allmulticast mode

VM DIAGNOSIS:
14:45:20  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81a10625 RBX=ffffffff81a105e4 RCX=0000000000080000 RDX=ffffc90008209000
RSI=00000000000457b5 RDI=00000000000457b6 RBP=ffffc90002fde4d0 RSP=ffffc90002fde3c0
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c26665
R12=dffffc0000000000 R13=1ffff920005fbc7c R14=0000000000000000 R15=0000000000000022
RIP=ffffffff81a10613 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd94d2b76c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020000000 CR3=000000010b282000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7636a11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000001ad87 RDI=000000000001ad88 RBP=00000000000003f8 RSP=ffffc90002a0e450
R8 =ffff888106910237 R9 =1ffff11020d22046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8b6 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f76378cd6c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020000000 CR3=000000001bbee000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0300000000000000 4003000c04000000
XMM02=0100088007004403 0000000000000040 XMM03=03000c0400000000 0000000000000002
XMM04=00007f76376ed100 00007f7636b86440 XMM05=00007f7636b86458 00007f7636b864a0
XMM06=00007f7636b86498 00007f7636b86490 XMM07=00007f7636b86488 00007f7636b86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7636a11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
