last executing test programs:

3.35967616s ago: executing program 2 (id=153):
socket$inet(0x10, 0xa, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0xfff2}, {0xffff, 0x9}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none, 0x7ff}, 0xe)
unshare(0x28000600)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
read(r0, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25GETINFOOLD(r1, 0x89e3, &(0x7f0000000180))
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x8000000008000003, {0x813b3f9114a3027a}}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e9000500ecff0f000940ddf196a4c26676166f0068a20f0000750800"], 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
r8 = epoll_create(0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r9, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0)
openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000080))

376.46659ms ago: executing program 1 (id=219):
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x80, 0x702, 0x4, 0x4, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x6a, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}})
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)

375.820427ms ago: executing program 1 (id=221):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0x80, 0x9, 0x4, 0x41}}], 0xa0}, 0x0)

332.227207ms ago: executing program 1 (id=222):
unshare(0x24060400)
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)

324.853504ms ago: executing program 2 (id=225):
syz_emit_ethernet(0x72, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x3c, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x80001, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r2}, 0x10)
listen(r1, 0x3)
close(0x4)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000180)={{r1}, 0x1, &(0x7f0000000140)=[0xfffffffffffffffe], 0x3, 0x1})
r3 = socket$inet(0x2, 0x1, 0xfffffff8)
ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000100)={0x800, 0x18, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0)

269.511381ms ago: executing program 1 (id=226):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x27, 0xe, 0x0, &(0x7f0000000440)="f802040b0000001300007f530800", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

268.156993ms ago: executing program 1 (id=228):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4ddd, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x168, 0x9, 0x0, 0xa, 0x348, 0x250, 0x250, 0x348, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'team_slave_0\x00', 'sit0\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x6000000, 0xa8, 0xc8, 0x0, {0x0, 0x28e}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast1, @remote, [], [], 'tunl0\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

198.314858ms ago: executing program 2 (id=229):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

197.866617ms ago: executing program 0 (id=230):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x2}, 0x8)

197.473828ms ago: executing program 2 (id=231):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
setsockopt$packet_add_memb(r2, 0x107, 0x18, &(0x7f0000000800)={r1, 0x1, 0x6}, 0x10)
sendto$packet(r2, &(0x7f0000000040)="02030007ffff0000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x11, 0x0, 0x0, 0x72, 0x0, 0x0, 0x41100, 0x56, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0xd, 0x7fff, 0xbc}, 0x10, 0x2aaeb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x67a}, 0x94)

115.445811ms ago: executing program 0 (id=232):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce)
ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000140)={0x3, @bcast})

114.898295ms ago: executing program 2 (id=233):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x40f00, 0x41}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)

114.54562ms ago: executing program 0 (id=234):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000000140)=""/46, 0x2e}, {0x0}, {&(0x7f00000001c0)=""/78, 0x4e}], 0x6}}], 0x1, 0x0, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

49.917587ms ago: executing program 0 (id=235):
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="24dc6170e1e03185"}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0)

49.617472ms ago: executing program 1 (id=236):
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00020000000000000000001c0007800c00018008000100", @ANYRES32=r0], 0x3c}}, 0x0)

477.938µs ago: executing program 0 (id=237):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0)

197.459µs ago: executing program 0 (id=238):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000140}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r1, 0x20, 0x70bd25, 0x6, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008045)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0)
epoll_create1(0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

0s ago: executing program 2 (id=239):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5306' (ED25519) to the list of known hosts.
syzkaller login: [   40.490781][ T5760] cgroup: Unknown subsys name 'net'
[   40.576542][ T5760] cgroup: Unknown subsys name 'cpuset'
[   40.580146][ T5760] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.895655][ T5760] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.092817][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.095656][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.098715][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.123097][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.125876][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.129212][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.131878][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.135062][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.144778][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.147299][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.155829][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.158278][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.161772][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.162138][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.166974][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.423725][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   52.459841][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   52.501284][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   52.539167][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.541878][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.548152][ T5864] bridge_slave_0: entered allmulticast mode
[   52.551062][ T5864] bridge_slave_0: entered promiscuous mode
[   52.571018][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.573592][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.576870][ T5864] bridge_slave_1: entered allmulticast mode
[   52.579623][ T5864] bridge_slave_1: entered promiscuous mode
[   52.613210][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.615567][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.617776][ T5863] bridge_slave_0: entered allmulticast mode
[   52.620324][ T5863] bridge_slave_0: entered promiscuous mode
[   52.624644][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.643119][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.645532][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.648009][ T5863] bridge_slave_1: entered allmulticast mode
[   52.650556][ T5863] bridge_slave_1: entered promiscuous mode
[   52.653947][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.664445][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.666949][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.669195][ T5860] bridge_slave_0: entered allmulticast mode
[   52.671744][ T5860] bridge_slave_0: entered promiscuous mode
[   52.691082][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.693341][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.696522][ T5860] bridge_slave_1: entered allmulticast mode
[   52.699211][ T5860] bridge_slave_1: entered promiscuous mode
[   52.717441][ T5864] team0: Port device team_slave_0 added
[   52.729170][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.733383][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.739848][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.744704][ T5864] team0: Port device team_slave_1 added
[   52.755138][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.792743][ T5860] team0: Port device team_slave_0 added
[   52.797636][ T5863] team0: Port device team_slave_0 added
[   52.800079][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.802221][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.810442][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.816699][ T5860] team0: Port device team_slave_1 added
[   52.820319][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.822571][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.831447][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.836696][ T5863] team0: Port device team_slave_1 added
[   52.880252][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.882458][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.890790][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.895641][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.897906][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.907184][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.911178][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.913401][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.921419][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.936360][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.938530][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.947255][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.953569][ T5864] hsr_slave_0: entered promiscuous mode
[   52.956462][ T5864] hsr_slave_1: entered promiscuous mode
[   53.021182][ T5863] hsr_slave_0: entered promiscuous mode
[   53.024831][ T5863] hsr_slave_1: entered promiscuous mode
[   53.027699][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.030971][ T5863] Cannot create hsr debugfs directory
[   53.040617][ T5860] hsr_slave_0: entered promiscuous mode
[   53.042896][ T5860] hsr_slave_1: entered promiscuous mode
[   53.045516][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.047861][ T5860] Cannot create hsr debugfs directory
[   53.257251][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.267781][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.271979][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.280753][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.319782][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.322132][ T5863] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.324875][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.327133][ T5863] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.339613][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.350718][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.370923][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.381157][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.416338][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.427717][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.432781][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.442263][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.446638][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.449425][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.459551][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.490843][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   53.498314][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.500558][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.513609][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.515894][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.566729][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.602849][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.607306][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   53.616599][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.618887][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.628758][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   53.639307][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.641548][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.659264][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.661530][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.671192][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.673456][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.694821][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.713760][ T5860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   53.717529][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   53.768358][ T5863] veth0_vlan: entered promiscuous mode
[   53.787108][ T5863] veth1_vlan: entered promiscuous mode
[   53.807869][ T5863] veth0_macvtap: entered promiscuous mode
[   53.820307][ T5863] veth1_macvtap: entered promiscuous mode
[   53.827829][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.850947][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.857156][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.866819][ T5863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.869600][ T5863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.872502][ T5863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.876431][ T5863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.902924][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.929048][ T5864] veth0_vlan: entered promiscuous mode
[   53.945921][ T5864] veth1_vlan: entered promiscuous mode
[   53.957605][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.960919][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.983741][ T5860] veth0_vlan: entered promiscuous mode
[   53.993787][ T5860] veth1_vlan: entered promiscuous mode
[   53.999180][ T5864] veth0_macvtap: entered promiscuous mode
[   54.002180][ T3377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.006383][ T5864] veth1_macvtap: entered promiscuous mode
[   54.008396][ T3377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.023129][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.034003][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   54.036802][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.050382][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.053149][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.057825][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.060611][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.070388][ T5860] veth0_macvtap: entered promiscuous mode
[   54.087907][ T5860] veth1_macvtap: entered promiscuous mode
[   54.109272][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.128622][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.132335][ T5860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.135456][ T5860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.138678][ T5860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.141385][ T5860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.155035][   T54] Bluetooth: hci1: command tx timeout
[   54.176525][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.179095][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.232882][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.235767][   T54] Bluetooth: hci2: command tx timeout
[   54.238741][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.245244][   T54] Bluetooth: hci0: command tx timeout
[   54.299211][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.301685][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.365135][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.370622][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.529482][ T5938] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.625643][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'.
[   54.822099][ T5952] Bluetooth: MGMT ver 1.23
[   54.909130][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'.
[   55.367974][ T5992] syz.0.49 uses obsolete (PF_INET,SOCK_PACKET)
[   55.386214][ T5994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.50'.
[   55.459035][ T6000] netlink: 'syz.0.52': attribute type 11 has an invalid length.
[   55.842546][ T6025] netlink: 'syz.0.65': attribute type 15 has an invalid length.
[   56.090609][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.69'.
[   56.235264][   T54] Bluetooth: hci1: command tx timeout
[   56.246547][ T6043] bridge: RTM_NEWNEIGH with invalid state 0x31
[   56.325912][ T5218] Bluetooth: hci0: command tx timeout
[   56.325937][   T54] Bluetooth: hci2: command tx timeout
[   56.651071][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'.
[   56.789807][ T6071] Zero length message leads to an empty skb
[   56.895826][ T6075] netlink: 60 bytes leftover after parsing attributes in process `syz.2.88'.
[   56.898823][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'.
[   56.901752][ T6075] netlink: 60 bytes leftover after parsing attributes in process `syz.2.88'.
[   56.992703][ T6077] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   56.997585][ T6077] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   57.450044][ T6119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.110'.
[   57.565795][ T6130] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'.
[   57.657689][ T6143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   57.766770][ T6158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.806472][ T6164] IPv6: addrconf: prefix option has invalid lifetime
[   58.243701][ T6202] netlink: 'syz.0.144': attribute type 1 has an invalid length.
[   58.324439][ T5218] Bluetooth: hci1: command tx timeout
[   58.358647][ T6216] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.394211][ T5218] Bluetooth: hci2: command tx timeout
[   58.618417][ T6232] macsec0: entered promiscuous mode
[   58.620568][ T6232] macsec1: entered allmulticast mode
[   58.622418][ T6232] macsec0: entered allmulticast mode
[   58.627422][ T6232] veth1_macvtap: entered allmulticast mode
[   58.819058][ T6248] netlink: 'syz.1.166': attribute type 32 has an invalid length.
[   59.200080][ T6285] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0
[   59.317523][ T6296] netlink: 'syz.1.189': attribute type 4 has an invalid length.
[   59.371533][ T6302] netem: invalid attributes len -16
[   59.373581][ T6302] netem: change failed
[   59.464735][ T6313] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   59.467790][ T6313] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   59.470825][ T6313] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   59.473730][ T6313] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   60.395125][ T5218] Bluetooth: hci1: command tx timeout
[   60.474882][ T5218] Bluetooth: hci2: command 0x0419 tx timeout
[   61.205379][ T6349] __nla_validate_parse: 15 callbacks suppressed
[   61.205388][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'.
[   61.216146][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'.
[   61.545075][ T6382] Illegal XDP return value 4294967282 on prog  (id 37) dev N/A, expect packet loss!
[   61.802724][ T5760] syz-executor (5760) used greatest stack depth: 20696 bytes left
Connection to localhost closed by remote host.
[   62.213207][ T5698] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.266129][ T5698] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.332212][ T5698] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.401661][ T5698] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.500282][ T5698] bridge_slave_1: left allmulticast mode
[   62.502253][ T5698] bridge_slave_1: left promiscuous mode
[   62.504858][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.509616][ T5698] bridge_slave_0: left allmulticast mode
[   62.511499][ T5698] bridge_slave_0: left promiscuous mode
[   62.513528][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.689838][ T5698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.693869][ T5698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.699783][ T5698] bond0 (unregistering): Released all slaves
[   62.950824][ T5698] hsr_slave_0: left promiscuous mode
[   62.953053][ T5698] hsr_slave_1: left promiscuous mode
[   62.956385][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.958815][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.961772][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.964308][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.972476][ T5698] veth1_macvtap: left promiscuous mode
[   62.976514][ T5698] veth0_macvtap: left promiscuous mode
[   62.978391][ T5698] veth1_vlan: left promiscuous mode
[   62.980187][ T5698] veth0_vlan: left promiscuous mode
[   63.177331][ T5698] team0 (unregistering): Port device team_slave_1 removed
[   63.192642][ T5698] team0 (unregistering): Port device team_slave_0 removed
[   64.732411][ T5698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.736939][ T5698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   64.795924][ T5698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.799197][ T5698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   64.832076][ T5698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.835583][ T5698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   64.883219][ T5698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.886941][ T5698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   64.964762][ T5698] bridge_slave_1: left allmulticast mode
[   64.967288][ T5698] bridge_slave_1: left promiscuous mode
[   64.970187][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.976088][ T5698] bridge_slave_0: left allmulticast mode
[   64.978475][ T5698] bridge_slave_0: left promiscuous mode
[   64.981037][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.161976][ T5698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.167038][ T5698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.170724][ T5698] bond0 (unregistering): Released all slaves
[   65.265247][ T5698] IPVS: stopping backup sync thread 6285 ...
[   65.393816][ T5698] hsr_slave_0: left promiscuous mode
[   65.396517][ T5698] hsr_slave_1: left promiscuous mode
[   65.398630][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.401115][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.403976][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.406579][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.415264][ T5698] macsec0: left allmulticast mode
[   65.416988][ T5698] veth1_macvtap: left allmulticast mode
[   65.418917][ T5698] veth1_macvtap: left promiscuous mode
[   65.420690][ T5698] veth0_macvtap: left promiscuous mode
[   65.422485][ T5698] veth1_vlan: left promiscuous mode
[   65.424356][ T5698] veth0_vlan: left promiscuous mode
[   65.634166][ T5698] team0 (unregistering): Port device team_slave_1 removed
[   65.650978][ T5698] team0 (unregistering): Port device team_slave_0 removed
[   70.956537][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.958699][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   81.207571][   T24] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
13:45:49  Registers:
info registers vcpu 0

CPU#0
RAX=35c784a98aa85d00 RBX=ffffffff81975d58 RCX=35c784a98aa85d00 RDX=0000000000000001
RSI=ffffffff8d996d18 RDI=ffffffff8be28fc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1def0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556f9729be08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ff000000ffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000001001 0000000000000014
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b7cc60ffe075b900 RBX=ffffffff81975d58 RCX=b7cc60ffe075b900 RDX=0000000000000001
RSI=ffffffff8d996d18 RDI=ffffffff8be28fc0 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556f9729be08 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000558bf8d 0000000000000018 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
