last executing test programs:

1.988832869s ago: executing program 2 (id=94):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38)

1.877935858s ago: executing program 2 (id=98):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000a40)={0x1f, 0x100f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

1.01781014s ago: executing program 2 (id=124):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x8809}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x2, 0x6, "32dae6", 0x194, 0x6, 0x1, @remote, @private0, {[@hopopts={0x0, 0xc, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6e, 0x10, [0x84bc, 0x0, 0x5, 0xd, 0x7, 0x3]}}, @ra={0x5, 0x2, 0xb5}, @pad1]}, @srh={0x6c, 0xc, 0x4, 0x6, 0xff, 0x68, 0x9, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x43}, @dev={0xfe, 0x80, '\x00', 0x3f}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}], {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x10, 0x8, 0x200, 0x0, 0x6bf, {[@md5sig={0x13, 0x12, "0112c0ef64f16b4938771d7ea2c36c4a"}, @fastopen={0x22, 0x8, "2328bfe90910"}, @md5sig={0x13, 0x12, "b20bc0a33a4e0c536e5c77305e8d1523"}]}}, {"214a8ba539750190358bac34ed9e529c2afcb03bbf4a5d4ce132b03b05519ef1bf9e03117044778ff80d6ad6bbcea76d04ac274f02be8bc94c379f6c4027f8907dd32502cf5fe38e2e0286f66c290f90dd7d3c8dc434fe6066d5de1d9f9d0d8e732a39a92f5d0534ac3f96101c6b128a3dc708124907cc8a1429090c7c8d5072e6cc696f0677b67ee15144533e4d57fe51ee4e4ab1b3e1357ca35170e568b5d00e6579bd01e03a14f45ce6f3714984de5113da9d550251ba733ff02172408bda3332173f655e07dd5c99859013eaed92074926efa1e9944d81464dafa6fe"}}}}}}}}, 0x230)

973.60039ms ago: executing program 2 (id=127):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x2}, 0x102)

255.161137ms ago: executing program 1 (id=160):
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1e)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x1, @empty}}, 0x1e)

176.832377ms ago: executing program 1 (id=163):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000880)="a2d5575a88545041767557c26f554d90c5d9", 0x12}], 0x1, 0x0, 0x0, 0x20000851}, 0x0)
recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/224, 0xe0}], 0x1, &(0x7f00000000c0)=""/91, 0x5b}, 0x5}], 0x1, 0x40000063, 0x0)

176.636427ms ago: executing program 0 (id=164):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="021803001b0000000000000000000000050005006c0000000a004e2000000003fe8000000000000000000000000000111b4300000000000008001200feff00000100000000000000060000000000000000000000000000007f000001000000000000000000000000fc01000000000000000000000000000005000600008000000a004e2100000005ff0200000000000000000000000000010300000000000000070019"], 0xd8}}, 0x0)

128.768328ms ago: executing program 1 (id=165):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'blkio'}]}, 0x7)

128.653497ms ago: executing program 0 (id=166):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80)

128.48907ms ago: executing program 1 (id=167):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r1, 0x204)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

75.051417ms ago: executing program 2 (id=168):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

74.872798ms ago: executing program 0 (id=169):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)

74.51982ms ago: executing program 1 (id=170):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0)

74.28306ms ago: executing program 0 (id=171):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x0)
listen(r1, 0x0)

4.210387ms ago: executing program 1 (id=172):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

3.923853ms ago: executing program 0 (id=173):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30000000000000000000000008002c00ff030000050021000600000018011a8030"], 0x1c0}, 0x1, 0xba01}, 0x20048050)

3.765836ms ago: executing program 0 (id=174):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x28011, r0, 0x513e9000)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000)

0s ago: executing program 2 (id=175):
connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @bcast, @default]}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c00010009"], 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:60405' (ED25519) to the list of known hosts.
syzkaller login: [   40.422640][ T5754] cgroup: Unknown subsys name 'net'
[   40.544571][ T5754] cgroup: Unknown subsys name 'cpuset'
[   40.548388][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.808349][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.089061][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.096717][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.099870][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.111116][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.114439][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.117001][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.119754][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.122610][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.126034][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.128526][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.151508][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.154669][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.157251][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.160458][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.163368][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.450730][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   52.484332][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   52.511578][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   52.568175][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.570490][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.573628][ T5858] bridge_slave_0: entered allmulticast mode
[   52.576310][ T5858] bridge_slave_0: entered promiscuous mode
[   52.593523][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.595757][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.597987][ T5858] bridge_slave_1: entered allmulticast mode
[   52.600671][ T5858] bridge_slave_1: entered promiscuous mode
[   52.610046][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.613122][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.615315][ T5861] bridge_slave_0: entered allmulticast mode
[   52.617859][ T5861] bridge_slave_0: entered promiscuous mode
[   52.648468][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.650717][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.653334][ T5861] bridge_slave_1: entered allmulticast mode
[   52.655916][ T5861] bridge_slave_1: entered promiscuous mode
[   52.658393][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.660887][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.663683][ T5855] bridge_slave_0: entered allmulticast mode
[   52.666199][ T5855] bridge_slave_0: entered promiscuous mode
[   52.669113][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.671318][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.673712][ T5855] bridge_slave_1: entered allmulticast mode
[   52.676280][ T5855] bridge_slave_1: entered promiscuous mode
[   52.680715][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.700759][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.728878][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.743674][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.747612][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.752994][ T5858] team0: Port device team_slave_0 added
[   52.756080][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.759893][ T5858] team0: Port device team_slave_1 added
[   52.802767][ T5855] team0: Port device team_slave_0 added
[   52.820754][ T5855] team0: Port device team_slave_1 added
[   52.834992][ T5861] team0: Port device team_slave_0 added
[   52.837511][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.839667][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.847999][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.854823][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.857558][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.867819][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.880768][ T5861] team0: Port device team_slave_1 added
[   52.887161][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.889618][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.900061][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.904730][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.906861][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.916475][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.958732][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.961022][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.971195][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.992541][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.995065][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.006858][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.024503][ T5855] hsr_slave_0: entered promiscuous mode
[   53.026794][ T5855] hsr_slave_1: entered promiscuous mode
[   53.034090][ T5858] hsr_slave_0: entered promiscuous mode
[   53.037312][ T5858] hsr_slave_1: entered promiscuous mode
[   53.040120][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.044508][ T5858] Cannot create hsr debugfs directory
[   53.117919][ T5861] hsr_slave_0: entered promiscuous mode
[   53.120904][ T5861] hsr_slave_1: entered promiscuous mode
[   53.124178][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.127129][ T5861] Cannot create hsr debugfs directory
[   53.307073][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.315851][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.321356][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.330786][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.368725][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.384685][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.396401][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.401311][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.403826][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.406556][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.408732][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.423745][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.426574][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.436150][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.465183][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.469456][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.485354][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.489191][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.536735][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.571001][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   53.578969][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.601364][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.603725][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.607492][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.609734][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.633429][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   53.646495][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   53.652864][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.655101][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.661019][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.672368][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.674617][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.693718][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   53.705143][  T546] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.707383][  T546] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.719920][  T108] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.722197][  T108] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.754248][ T5861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   53.757549][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   53.806147][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.859828][ T5858] veth0_vlan: entered promiscuous mode
[   53.870136][ T5858] veth1_vlan: entered promiscuous mode
[   53.877003][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.886317][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.908795][ T5858] veth0_macvtap: entered promiscuous mode
[   53.915150][ T5858] veth1_macvtap: entered promiscuous mode
[   53.931346][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.940319][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.953832][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.956606][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.959287][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.963148][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.970921][ T5855] veth0_vlan: entered promiscuous mode
[   53.980064][ T5861] veth0_vlan: entered promiscuous mode
[   53.996211][ T5855] veth1_vlan: entered promiscuous mode
[   54.005302][ T5861] veth1_vlan: entered promiscuous mode
[   54.048478][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.053164][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.086330][ T5861] veth0_macvtap: entered promiscuous mode
[   54.091070][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.092491][ T5855] veth0_macvtap: entered promiscuous mode
[   54.096140][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.100840][ T5861] veth1_macvtap: entered promiscuous mode
[   54.108769][ T5855] veth1_macvtap: entered promiscuous mode
[   54.127623][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   54.132414][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.138036][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.144624][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.148587][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.151301][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.155566][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.158401][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.166739][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.170445][ T5855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.174227][ T5855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.177641][ T5855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.180635][ T5855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.203367][ T5856] Bluetooth: hci2: command tx timeout
[   54.203444][ T5219] Bluetooth: hci0: command tx timeout
[   54.206816][   T55] Bluetooth: hci1: command tx timeout
[   54.270593][  T546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.276344][  T546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.304038][  T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.312675][  T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.349666][  T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.354447][  T546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.357941][  T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.366728][  T546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.869370][ T5969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.39'.
[   54.967649][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'.
[   55.023948][ T5918] IPVS: starting estimator thread 0...
[   55.122078][ T5978] IPVS: using max 79 ests per chain, 189600 per kthread
[   55.364910][ T6001] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.509754][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'.
[   55.512948][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'.
[   55.515971][ T6014] netlink: 830 bytes leftover after parsing attributes in process `syz.1.61'.
[   55.540605][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'.
[   55.634909][ T6022] netlink: 'syz.1.65': attribute type 24 has an invalid length.
[   55.984794][ T6059] netlink: 'syz.0.77': attribute type 1 has an invalid length.
[   55.987341][ T6059] netlink: 172 bytes leftover after parsing attributes in process `syz.0.77'.
[   56.157312][ T6077] tipc: Started in network mode
[   56.159071][ T6077] tipc: Node identity ac14140f, cluster identity 4711
[   56.184218][ T6077] tipc: New replicast peer: 255.255.255.255
[   56.185775][ T6081] Bluetooth: MGMT ver 1.23
[   56.187223][ T6077] tipc: Enabled bearer <udp:syz2>, priority 10
[   56.264219][ T6089] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.91'.
[   56.282788][   T55] Bluetooth: hci1: command tx timeout
[   56.283005][ T5219] Bluetooth: hci2: command tx timeout
[   56.293915][ T5219] Bluetooth: hci0: command tx timeout
[   57.142826][ T6160] netlink: 'syz.0.120': attribute type 1 has an invalid length.
[   57.182097][ T6162] dvmrp1: tun_chr_ioctl cmd 1074025677
[   57.184108][ T6162] dvmrp1: linktype set to 805
[   57.193439][ T5890] tipc: Node number set to 2886997007
[   57.271929][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'.
[   57.291436][ T6168] syz.2.124 uses obsolete (PF_INET,SOCK_PACKET)
[   57.413862][ T6178] netlink: 'syz.0.129': attribute type 4 has an invalid length.
[   57.670358][ T6201] tipc: Started in network mode
[   57.672990][ T6201] tipc: Node identity 3a7625ab4954, cluster identity 4711
[   57.677505][ T6201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.680957][ T6201] syzkaller0: entered promiscuous mode
[   57.683626][ T6201] syzkaller0: entered allmulticast mode
[   57.692815][ T6201] tipc: Resetting bearer <eth:syzkaller0>
[   57.702557][ T6200] tipc: Resetting bearer <eth:syzkaller0>
[   57.708151][ T6200] tipc: Disabling bearer <eth:syzkaller0>
[   57.791437][ T6211] netlink: 'syz.0.146': attribute type 10 has an invalid length.
[   57.800845][ T6211] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   57.828270][ T6215] warning: `syz.0.147' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.098715][ T6242] syz_tun: entered allmulticast mode
[   58.103921][ T6241] syz_tun: left allmulticast mode
[   58.316961][ T6266] netlink: 'syz.1.172': attribute type 10 has an invalid length.
[   58.322451][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.173'.
[   58.331074][ T6266] team0: Port device dummy0 added
[   58.348639][ T6266] netlink: 'syz.1.172': attribute type 10 has an invalid length.
[   58.351498][ T6266] 
[   58.352356][ T6266] ======================================================
[   58.354530][ T6266] WARNING: possible circular locking dependency detected
[   58.356730][ T6266] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   58.359870][ T6266] ------------------------------------------------------
[   58.362024][ T6266] syz.1.172/6266 is trying to acquire lock:
[   58.363835][ T6266] ffff888034bb4e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[   58.367108][ T6266] 
[   58.367108][ T6266] but task is already holding lock:
[   58.369484][ T6266] ffff888034454d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   58.372658][ T6266] 
[   58.372658][ T6266] which lock already depends on the new lock.
[   58.372658][ T6266] 
[   58.376083][ T6266] 
[   58.376083][ T6266] the existing dependency chain (in reverse order) is:
[   58.378897][ T6266] 
[   58.378897][ T6266] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   58.381545][ T6266]        lock_acquire+0x120/0x360
[   58.383127][ T6266]        __mutex_lock+0x182/0xe80
[   58.384755][ T6266]        dev_set_mtu+0x10e/0x260
[   58.386392][ T6266]        team_add_slave+0x8b8/0x2840
[   58.388060][ T6266]        do_set_master+0x533/0x6d0
[   58.389767][ T6266]        do_setlink+0xcf0/0x41c0
[   58.391351][ T6266]        rtnl_newlink+0x160b/0x1c70
[   58.392946][ T6266]        rtnetlink_rcv_msg+0x7cf/0xb70
[   58.394705][ T6266]        netlink_rcv_skb+0x208/0x470
[   58.396435][ T6266]        netlink_unicast+0x75b/0x8d0
[   58.398209][ T6266]        netlink_sendmsg+0x805/0xb30
[   58.399971][ T6266]        __sock_sendmsg+0x21c/0x270
[   58.401720][ T6266]        ____sys_sendmsg+0x505/0x830
[   58.403486][ T6266]        ___sys_sendmsg+0x21f/0x2a0
[   58.405160][ T6266]        __x64_sys_sendmsg+0x19b/0x260
[   58.406931][ T6266]        do_syscall_64+0xfa/0x3b0
[   58.408640][ T6266]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.410778][ T6266] 
[   58.410778][ T6266] -> #0 (team->team_lock_key#2){+.+.}-{4:4}:
[   58.413401][ T6266]        validate_chain+0xb9b/0x2140
[   58.415197][ T6266]        __lock_acquire+0xab9/0xd20
[   58.416932][ T6266]        lock_acquire+0x120/0x360
[   58.418606][ T6266]        __mutex_lock+0x182/0xe80
[   58.420282][ T6266]        team_device_event+0x182/0xa20
[   58.422070][ T6266]        notifier_call_chain+0x1b6/0x3e0
[   58.423851][ T6266]        __dev_notify_flags+0x18d/0x2e0
[   58.425686][ T6266]        netif_change_flags+0xe8/0x1a0
[   58.427508][ T6266]        do_setlink+0xc55/0x41c0
[   58.429149][ T6266]        rtnl_newlink+0x160b/0x1c70
[   58.430860][ T6266]        rtnetlink_rcv_msg+0x7cf/0xb70
[   58.432561][ T6266]        netlink_rcv_skb+0x208/0x470
[   58.434267][ T6266]        netlink_unicast+0x75b/0x8d0
[   58.436005][ T6266]        netlink_sendmsg+0x805/0xb30
[   58.437771][ T6266]        __sock_sendmsg+0x21c/0x270
[   58.439532][ T6266]        ____sys_sendmsg+0x505/0x830
[   58.441285][ T6266]        ___sys_sendmsg+0x21f/0x2a0
[   58.443023][ T6266]        __x64_sys_sendmsg+0x19b/0x260
[   58.444851][ T6266]        do_syscall_64+0xfa/0x3b0
[   58.446533][ T6266]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.448598][ T6266] 
[   58.448598][ T6266] other info that might help us debug this:
[   58.448598][ T6266] 
[   58.451896][ T6266]  Possible unsafe locking scenario:
[   58.451896][ T6266] 
[   58.454347][ T6266]        CPU0                    CPU1
[   58.456122][ T6266]        ----                    ----
[   58.457884][ T6266]   lock(&dev_instance_lock_key#3);
[   58.459607][ T6266]                                lock(team->team_lock_key#2);
[   58.462042][ T6266]                                lock(&dev_instance_lock_key#3);
[   58.464506][ T6266]   lock(team->team_lock_key#2);
[   58.466153][ T6266] 
[   58.466153][ T6266]  *** DEADLOCK ***
[   58.466153][ T6266] 
[   58.468815][ T6266] 2 locks held by syz.1.172/6266:
[   58.470486][ T6266]  #0: ffffffff8f51c948 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[   58.473440][ T6266]  #1: ffff888034454d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   58.476761][ T6266] 
[   58.476761][ T6266] stack backtrace:
[   58.478710][ T6266] CPU: 1 UID: 0 PID: 6266 Comm: syz.1.172 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   58.478719][ T6266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   58.478725][ T6266] Call Trace:
[   58.478730][ T6266]  <TASK>
[   58.478734][ T6266]  dump_stack_lvl+0x189/0x250
[   58.478747][ T6266]  ? __pfx_dump_stack_lvl+0x10/0x10
[   58.478755][ T6266]  ? __pfx__printk+0x10/0x10
[   58.478767][ T6266]  ? print_lock_name+0xde/0x100
[   58.478776][ T6266]  print_circular_bug+0x2ee/0x310
[   58.478788][ T6266]  check_noncircular+0x134/0x160
[   58.478798][ T6266]  validate_chain+0xb9b/0x2140
[   58.478808][ T6266]  ? __lock_acquire+0xab9/0xd20
[   58.478817][ T6266]  __lock_acquire+0xab9/0xd20
[   58.478825][ T6266]  ? team_device_event+0x182/0xa20
[   58.478835][ T6266]  lock_acquire+0x120/0x360
[   58.478842][ T6266]  ? team_device_event+0x182/0xa20
[   58.478852][ T6266]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   58.478866][ T6266]  __mutex_lock+0x182/0xe80
[   58.478874][ T6266]  ? team_device_event+0x182/0xa20
[   58.478885][ T6266]  ? __try_to_del_timer_sync+0x34a/0x3a0
[   58.478896][ T6266]  ? team_device_event+0x182/0xa20
[   58.478905][ T6266]  ? __pfx___mutex_lock+0x10/0x10
[   58.478911][ T6266]  ? __timer_delete_sync+0x218/0x2d0
[   58.478923][ T6266]  team_device_event+0x182/0xa20
[   58.478934][ T6266]  notifier_call_chain+0x1b6/0x3e0
[   58.478945][ T6266]  __dev_notify_flags+0x18d/0x2e0
[   58.478956][ T6266]  ? __pfx___dev_notify_flags+0x10/0x10
[   58.478964][ T6266]  ? __dev_change_flags+0x4cc/0x6d0
[   58.478973][ T6266]  ? __pfx___dev_change_flags+0x10/0x10
[   58.478981][ T6266]  ? __pfx_console_unlock+0x10/0x10
[   58.478990][ T6266]  ? irq_work_queue+0xc3/0x140
[   58.478998][ T6266]  netif_change_flags+0xe8/0x1a0
[   58.479008][ T6266]  do_setlink+0xc55/0x41c0
[   58.479019][ T6266]  ? __pfx_do_setlink+0x10/0x10
[   58.479027][ T6266]  ? _printk+0xcf/0x120
[   58.479035][ T6266]  ? __pfx____ratelimit+0x10/0x10
[   58.479047][ T6266]  ? __lock_acquire+0xab9/0xd20
[   58.479054][ T6266]  ? __mutex_trylock_common+0x153/0x260
[   58.479064][ T6266]  ? __pfx___mutex_trylock_common+0x10/0x10
[   58.479073][ T6266]  ? rcu_is_watching+0x15/0xb0
[   58.479081][ T6266]  ? trace_contention_end+0x39/0x120
[   58.479089][ T6266]  ? __mutex_lock+0x330/0xe80
[   58.479096][ T6266]  ? __pfx_aa_get_newest_label+0x10/0x10
[   58.479107][ T6266]  ? rtnl_newlink+0x8db/0x1c70
[   58.479114][ T6266]  ? rcu_is_watching+0x15/0xb0
[   58.479122][ T6266]  ? __pfx___mutex_lock+0x10/0x10
[   58.479129][ T6266]  ? ns_capable+0x8a/0xf0
[   58.479138][ T6266]  ? rtnl_link_get_net_capable+0x16a/0x350
[   58.479147][ T6266]  rtnl_newlink+0x160b/0x1c70
[   58.479154][ T6266]  ? netlink_sendmsg+0x805/0xb30
[   58.479164][ T6266]  ? __pfx_rtnl_newlink+0x10/0x10
[   58.479175][ T6266]  ? kasan_quarantine_put+0xdd/0x220
[   58.479183][ T6266]  ? lockdep_hardirqs_on+0x9c/0x150
[   58.479208][ T6266]  ? nlmon_xmit+0xb0/0x100
[   58.479215][ T6266]  ? kmem_cache_free+0x18f/0x400
[   58.479224][ T6266]  ? __local_bh_enable_ip+0x12d/0x1c0
[   58.479259][ T6266]  ? lockdep_hardirqs_on+0x9c/0x150
[   58.479268][ T6266]  ? __local_bh_enable_ip+0x12d/0x1c0
[   58.479276][ T6266]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   58.479284][ T6266]  ? __dev_queue_xmit+0x27e/0x3a70
[   58.479296][ T6266]  ? __lock_acquire+0xab9/0xd20
[   58.479307][ T6266]  ? __pfx_rtnl_newlink+0x10/0x10
[   58.479314][ T6266]  rtnetlink_rcv_msg+0x7cf/0xb70
[   58.479323][ T6266]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   58.479331][ T6266]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   58.479338][ T6266]  ? ref_tracker_free+0x63a/0x7d0
[   58.479345][ T6266]  ? __copy_skb_header+0xa7/0x550
[   58.479356][ T6266]  ? __pfx_ref_tracker_free+0x10/0x10
[   58.479362][ T6266]  ? __skb_clone+0x63/0x7a0
[   58.479372][ T6266]  netlink_rcv_skb+0x208/0x470
[   58.479381][ T6266]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   58.479390][ T6266]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   58.479403][ T6266]  ? netlink_deliver_tap+0x2e/0x1b0
[   58.479421][ T6266]  ? netlink_deliver_tap+0x2e/0x1b0
[   58.479436][ T6266]  netlink_unicast+0x75b/0x8d0
[   58.479451][ T6266]  netlink_sendmsg+0x805/0xb30
[   58.479467][ T6266]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.479481][ T6266]  ? aa_sock_msg_perm+0x94/0x160
[   58.479499][ T6266]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   58.479509][ T6266]  ? __pfx_netlink_sendmsg+0x10/0x10
[   58.479529][ T6266]  __sock_sendmsg+0x21c/0x270
[   58.479548][ T6266]  ____sys_sendmsg+0x505/0x830
[   58.479565][ T6266]  ? __pfx_____sys_sendmsg+0x10/0x10
[   58.479580][ T6266]  ? import_iovec+0x74/0xa0
[   58.479593][ T6266]  ___sys_sendmsg+0x21f/0x2a0
[   58.479602][ T6266]  ? __pfx____sys_sendmsg+0x10/0x10
[   58.479615][ T6266]  ? __fget_files+0x2a/0x420
[   58.479626][ T6266]  ? __fget_files+0x3a0/0x420
[   58.479636][ T6266]  __x64_sys_sendmsg+0x19b/0x260
[   58.479645][ T6266]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   58.479655][ T6266]  ? rcu_is_watching+0x15/0xb0
[   58.479663][ T6266]  ? do_syscall_64+0xbe/0x3b0
[   58.479671][ T6266]  do_syscall_64+0xfa/0x3b0
[   58.479678][ T6266]  ? lockdep_hardirqs_on+0x9c/0x150
[   58.479684][ T6266]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.479691][ T6266]  ? exc_page_fault+0x9f/0xf0
[   58.479701][ T6266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.479708][ T6266] RIP: 0033:0x7f179d58e929
[   58.479717][ T6266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.479723][ T6266] RSP: 002b:00007f179e4a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   58.479731][ T6266] RAX: ffffffffffffffda RBX: 00007f179d7b5fa0 RCX: 00007f179d58e929
[   58.479736][ T6266] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[   58.479740][ T6266] RBP: 00007f179d610b39 R08: 0000000000000000 R09: 0000000000000000
[   58.479744][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.479748][ T6266] R13: 0000000000000000 R14: 00007f179d7b5fa0 R15: 00007fffac524498
[   58.479755][ T6266]  </TASK>
[   58.503022][ T5219] Bluetooth: hci1: command tx timeout
[   58.519143][   T55] Bluetooth: hci0: command tx timeout
[   58.522018][ T5856] Bluetooth: hci2: command tx timeout
[   58.685687][ T6266] team0: Port device dummy0 removed
[   58.689547][ T6266] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   58.697862][ T6276] ipvlan2: entered promiscuous mode
[   58.703116][ T6276] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   58.705806][ T6276] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   60.601856][ T5856] Bluetooth: hci1: command tx timeout
[   60.601901][ T5219] Bluetooth: hci0: command tx timeout
[   60.761838][ T5219] Bluetooth: hci2: command tx timeout
[   62.841844][ T5219] Bluetooth: hci2: command tx timeout

VM DIAGNOSIS:
03:03:20  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4e920 RBX=ffff88804b03b1c0 RCX=ffff888108849cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000358f6c0 RSP=ffffc9000358f560
R8 =ffffffff8fa1def7 R9 =1ffffffff1f43bde R10=dffffc0000000000 R11=fffffbfff1f43bdf
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81b4e909 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558a6b9500 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f079eae56c0 CR3=0000000023f3a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f079de11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002d43 RDI=0000000000002d44 RBP=00000000000003f8 RSP=ffffc90006cd5f10
R8 =ffff888020b78237 R9 =1ffff1100416f046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78f8 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f179e4a86c0 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c367dfe CR3=000000002a0e2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f179d785478 00007f179d785450 XMM03=00007f179d785488 00007f179d785480
XMM04=00007f179e2ed100 00007f179d785440 XMM05=00007f179d785458 00007f179d7854a0
XMM06=00007f179d785498 00007f179d785490 XMM07=00007f179d785488 00007f179d785480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f179d611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
