last executing test programs:

368.329291ms ago: executing program 0 (id=707):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1)
setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0)

312.310574ms ago: executing program 1 (id=708):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0x0, @in=@multicast2}}, 0xe4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8)
close(r0)

312.008172ms ago: executing program 1 (id=709):
r0 = socket$isdn(0x22, 0x2, 0x25)
close(r0)

311.846307ms ago: executing program 0 (id=710):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)

259.163819ms ago: executing program 1 (id=712):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x2000000000000000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31040000000000f032001600000018000180140002006e657464657673696d3000000000000005000200010000000500020003000000050003"], 0x44}}, 0x0)

197.561203ms ago: executing program 2 (id=713):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0)

197.257422ms ago: executing program 1 (id=714):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x34, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}]}]}, 0x34}}, 0x0)

196.489364ms ago: executing program 0 (id=715):
unshare(0x6020400)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x22200, 0x0)
unshare(0x2c060000)
close(0x3)

196.243105ms ago: executing program 1 (id=716):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

144.391508ms ago: executing program 2 (id=717):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x4c)

143.70276ms ago: executing program 1 (id=718):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x1c8, 0x278, 0x278, 0x1c8, 0x1c8, 0x348, 0x348, 0x98, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffffff, 'macvlan1\x00', 'wlan0\x00', {0xff}, {0xff}, 0x62, 0x2, 0x10}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xe, 0x2}}}, {{@ip={@private=0xa010100, @loopback, 0x0, 0xffffffff, 'veth1_to_team\x00', 'wlan1\x00', {0xff}, {}, 0x73, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x4}}}, {{@ip={@empty, @dev, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_bond\x00', {}, {}, 0x73, 0x0, 0x30}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x8, @ipv6=@private2, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x6, 0xc, [0x29, 0x21, 0x3c, 0x25, 0x3e, 0x3b, 0x29, 0x2e, 0x14, 0x5, 0x10, 0x37, 0x2b, 0x38, 0x36, 0x9], 0x2, 0x7ff, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b00000000004e43dfafa6fbc851643cf4b11ab67fa388e4d6f76086d2a991366be88111a463475e4aa5251f64a1ab4933878826feb7c67856e60902276e0ed43805dd7c53838a23a47ede90f70464b8d421b5b8ffc28d8e110cd37d758842"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x4c}}, 0x2)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c0002800800"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xf00)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000680)=@ethtool_per_queue_op={0x4b, 0xf, [0x69d1, 0x4, 0x1, 0x0, 0x5e7, 0x1000, 0xfffffffc, 0x5, 0x8, 0x1, 0x7, 0xb145, 0x6, 0x5d9b, 0x1, 0x6, 0x1, 0x4, 0x2, 0x0, 0xb, 0x7fffffff, 0xffffffff, 0x95b, 0x3, 0x8001, 0x7, 0xe, 0xffffffff, 0x4, 0x7f, 0x1, 0x651, 0x0, 0x7, 0x12, 0x1, 0x8, 0x0, 0xab, 0x7, 0x8, 0x43, 0x5, 0x3, 0x0, 0x0, 0x5, 0x6, 0x5, 0x5, 0x9, 0x4, 0x6, 0x4, 0x80000000, 0x9, 0xf0000000, 0x9, 0x8000, 0x100, 0x0, 0x5, 0xc, 0x4e, 0x6, 0x8, 0x5, 0x1, 0x5, 0x9, 0x6, 0x9, 0x7, 0x3, 0x2e9, 0x7, 0x1, 0x6, 0x4, 0x8000, 0x2, 0x6, 0x27d1, 0x80, 0x7f, 0x8001, 0x0, 0x0, 0x8, 0xffffffff, 0x8, 0x100, 0x400, 0x5, 0x101, 0x9, 0x3, 0x10000, 0x9, 0xff, 0x5, 0xe19d, 0x8ae, 0x4, 0xfffff000, 0x0, 0x7, 0xe, 0x5dc8, 0x7, 0xff, 0x5, 0x1, 0x67de, 0x8001, 0x80, 0x100, 0x8000003, 0xfffffffd, 0x7, 0x6, 0x6, 0x81, 0x0, 0x8d, 0x1, 0xffffff84]}})

142.092417ms ago: executing program 0 (id=719):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x1416, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

136.395637ms ago: executing program 2 (id=720):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x6, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x65, 0x0, 0x2, 0x54, 0x0, @local, @private=0xa010100}}}})

68.114226ms ago: executing program 0 (id=721):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}, 0x10)

67.898252ms ago: executing program 2 (id=722):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x4c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000"], 0xec}}, 0x0)

67.721558ms ago: executing program 0 (id=723):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x44, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x44}}, 0x0)

67.603744ms ago: executing program 2 (id=724):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

0s ago: executing program 2 (id=725):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35308' (ED25519) to the list of known hosts.
syzkaller login: [   47.794063][ T5786] cgroup: Unknown subsys name 'net'
[   47.900426][ T5786] cgroup: Unknown subsys name 'cpuset'
[   47.904326][ T5786] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.192748][ T5786] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.440806][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.444161][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.451523][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.467292][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.474248][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.586691][ T5202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.590357][ T5202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.594334][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.599150][ T5202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.604645][ T5202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.667930][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.671377][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.674203][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.680108][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.683113][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.794470][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   58.896235][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.898669][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.901095][ T5835] bridge_slave_0: entered allmulticast mode
[   58.904400][ T5835] bridge_slave_0: entered promiscuous mode
[   58.912631][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.916199][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.918851][ T5835] bridge_slave_1: entered allmulticast mode
[   58.921663][ T5835] bridge_slave_1: entered promiscuous mode
[   58.948937][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.974648][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.048564][ T5835] team0: Port device team_slave_0 added
[   59.062094][ T5835] team0: Port device team_slave_1 added
[   59.084034][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.086832][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.094861][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.098939][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   59.105337][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.107900][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.115955][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.160721][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   59.168303][ T5835] hsr_slave_0: entered promiscuous mode
[   59.170953][ T5835] hsr_slave_1: entered promiscuous mode
[   59.253348][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.256837][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.259182][ T5842] bridge_slave_0: entered allmulticast mode
[   59.261915][ T5842] bridge_slave_0: entered promiscuous mode
[   59.287287][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.290010][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.292352][ T5842] bridge_slave_1: entered allmulticast mode
[   59.294959][ T5842] bridge_slave_1: entered promiscuous mode
[   59.333588][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.336213][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.338806][ T5839] bridge_slave_0: entered allmulticast mode
[   59.341573][ T5839] bridge_slave_0: entered promiscuous mode
[   59.347992][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.350561][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.353435][ T5839] bridge_slave_1: entered allmulticast mode
[   59.357774][ T5839] bridge_slave_1: entered promiscuous mode
[   59.404000][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.410808][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.421288][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.446364][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.475349][ T5842] team0: Port device team_slave_0 added
[   59.497329][ T5842] team0: Port device team_slave_1 added
[   59.530101][ T5839] team0: Port device team_slave_0 added
[   59.556873][ T5839] team0: Port device team_slave_1 added
[   59.573417][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.576565][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.585252][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.608400][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.611013][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.619196][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.623164][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.627347][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.637116][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.642679][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.647237][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.655299][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.707957][ T5842] hsr_slave_0: entered promiscuous mode
[   59.710969][ T5842] hsr_slave_1: entered promiscuous mode
[   59.713050][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.715890][ T5842] Cannot create hsr debugfs directory
[   59.735324][ T5839] hsr_slave_0: entered promiscuous mode
[   59.738858][ T5839] hsr_slave_1: entered promiscuous mode
[   59.741338][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.743642][ T5839] Cannot create hsr debugfs directory
[   59.746668][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.754523][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.783813][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.790008][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.984653][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.989065][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.007136][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.011474][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.040033][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.044380][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.052109][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.058331][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.063595][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.089386][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   60.101132][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.103680][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.120071][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.123081][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.182978][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.190014][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.220672][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.226156][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   60.246656][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.249583][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.253796][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.256696][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.289413][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   60.313547][  T552] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.316512][  T552] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.324816][  T552] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.327787][  T552] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.373214][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.461611][ T5835] veth0_vlan: entered promiscuous mode
[   60.478444][ T5835] veth1_vlan: entered promiscuous mode
[   60.505621][ T5835] veth0_macvtap: entered promiscuous mode
[   60.510747][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.517965][ T5835] veth1_macvtap: entered promiscuous mode
[   60.533495][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.541444][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.550391][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.555977][   T55] Bluetooth: hci0: command tx timeout
[   60.564249][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.569348][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.572051][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.574703][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.597567][ T5839] veth0_vlan: entered promiscuous mode
[   60.613883][ T5839] veth1_vlan: entered promiscuous mode
[   60.630066][ T5842] veth0_vlan: entered promiscuous mode
[   60.635872][   T55] Bluetooth: hci1: command tx timeout
[   60.655018][ T5842] veth1_vlan: entered promiscuous mode
[   60.662481][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.665167][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.692498][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.694254][ T5839] veth0_macvtap: entered promiscuous mode
[   60.695363][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.706521][ T5839] veth1_macvtap: entered promiscuous mode
[   60.715815][   T55] Bluetooth: hci2: command tx timeout
[   60.722713][ T5842] veth0_macvtap: entered promiscuous mode
[   60.730993][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.737250][ T5842] veth1_macvtap: entered promiscuous mode
[   60.739615][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.745063][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.752370][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.756765][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.760047][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.762999][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.768871][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.779098][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.790643][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.793540][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.800230][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.803555][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.887229][  T552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.891518][  T552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.909175][ T5903] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.938356][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.941281][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.965020][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.969807][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.999642][ T5905] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET)
[   61.005069][  T552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.009573][  T552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.103572][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   61.623185][ T5953] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   61.628847][ T5951] lo: entered allmulticast mode
[   61.631508][ T5951] lo: left allmulticast mode
[   61.821993][ T5966] openvswitch: netlink: Flow actions attr not present in new flow.
[   61.852298][ T5969] warning: `syz.2.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.939643][ T5974] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[   62.011197][ T5980] netlink: 'syz.2.50': attribute type 5 has an invalid length.
[   62.036978][ T5983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.51'.
[   62.048110][ T5983] netlink: 'syz.1.51': attribute type 1 has an invalid length.
[   62.454197][ T6010] netlink: 'syz.0.64': attribute type 11 has an invalid length.
[   62.624822][ T5882] IPVS: starting estimator thread 0...
[   62.647112][   T55] Bluetooth: hci0: command tx timeout
[   62.716521][   T55] Bluetooth: hci1: command tx timeout
[   62.736666][ T6019] IPVS: using max 49 ests per chain, 117600 per kthread
[   62.796868][   T55] Bluetooth: hci2: command tx timeout
[   63.324311][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'.
[   63.336406][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'.
[   63.418758][ T6031] vlan2: entered allmulticast mode
[   63.420943][ T6031] hsr0: entered allmulticast mode
[   63.422787][ T6031] hsr_slave_0: entered allmulticast mode
[   63.424844][ T6031] hsr_slave_1: entered allmulticast mode
[   63.567530][ T6043] trusted_key: syz.1.75 sent an empty control message without MSG_MORE.
[   63.947802][ T6065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.82'.
[   63.997036][ T6067] netlink: 'syz.0.83': attribute type 1 has an invalid length.
[   64.070999][ T6074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.84'.
[   64.716298][   T55] Bluetooth: hci0: command tx timeout
[   64.755095][ T6136] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   64.759022][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'.
[   64.807488][   T55] Bluetooth: hci1: command tx timeout
[   64.885811][   T55] Bluetooth: hci2: command tx timeout
[   65.033742][ T6161] tipc: Started in network mode
[   65.037619][ T6161] tipc: Node identity 4, cluster identity 4711
[   65.040278][ T6161] tipc: Node number set to 4
[   65.179764][ T6177] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.518415][ T6205] xt_CT: You must specify a L4 protocol and not use inversions on it
[   66.807206][   T55] Bluetooth: hci0: command tx timeout
[   66.885731][   T55] Bluetooth: hci1: command tx timeout
[   66.932847][ T6302] netlink: 'syz.1.192': attribute type 2 has an invalid length.
[   66.940890][ T6302] netlink: 5356 bytes leftover after parsing attributes in process `syz.1.192'.
[   66.959524][   T55] Bluetooth: hci2: command tx timeout
[   67.143175][ T6321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.201'.
[   67.192592][ T6325] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[   67.296369][ T6331] Cannot find add_set index 2 as target
[   67.339401][ T6335] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   67.498539][ T6348] netlink: 17 bytes leftover after parsing attributes in process `syz.2.214'.
[   67.897543][ T6361] Cannot find set identified by id 0 to match
[   68.419786][ T6370] xfrm1: entered promiscuous mode
[   68.422084][ T6370] xfrm1: entered allmulticast mode
[   68.466221][ T6370] xt_hashlimit: size too large, truncated to 1048576
[   68.651171][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'.
[   68.659786][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'.
[   68.663698][ T6386] netlink: 'syz.0.229': attribute type 1 has an invalid length.
[   68.675529][ T6386] netlink: 10 bytes leftover after parsing attributes in process `syz.0.229'.
[   68.706059][ T6386] nbd: socks must be embedded in a SOCK_ITEM attr
[   68.709002][ T6386] block nbd0: shutting down sockets
[   68.972746][ T5836] IPVS: starting estimator thread 0...
[   69.064556][ T6423] netlink: 'syz.2.245': attribute type 1 has an invalid length.
[   69.066275][ T6413] IPVS: using max 80 ests per chain, 192000 per kthread
[   70.294975][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.257'.
[   70.912535][ T6515] netlink: 'syz.1.277': attribute type 1 has an invalid length.
[   70.917313][ T6515] netlink: 'syz.1.277': attribute type 2 has an invalid length.
[   70.921343][ T6515] netlink: 'syz.1.277': attribute type 1 has an invalid length.
[   70.924564][ T6515] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.277'.
[   71.102459][ T6537] openvswitch: netlink: Multiple metadata blocks provided
[   71.124162][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.135578][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.215866][ T6547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   71.218701][ T6547] IPv6: NLM_F_CREATE should be set when creating new route
[   71.282053][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'.
[   71.306958][ T6555] vlan2: entered allmulticast mode
[   71.309012][ T6555] bond1: entered allmulticast mode
[   71.471068][ T6573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.290'.
[   71.956943][ T6620] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[   72.111802][ T6640] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[   72.116452][ T6640] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[   72.342851][ T6658] bpq0: entered promiscuous mode
[   72.344957][ T6658] bpq0: entered allmulticast mode
[   72.360244][ T6658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.385080][ T6672] __nla_validate_parse: 1 callbacks suppressed
[   72.385094][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'.
[   72.560703][ T6688] batadv0: entered promiscuous mode
[   72.563204][ T6688] vlan2: entered promiscuous mode
[   72.791754][ T6704] sctp: [Deprecated]: syz.2.325 (pid 6704) Use of struct sctp_assoc_value in delayed_ack socket option.
[   72.791754][ T6704] Use struct sctp_sack_info instead
[   72.804914][ T6704] sctp: [Deprecated]: syz.2.325 (pid 6704) Use of struct sctp_assoc_value in delayed_ack socket option.
[   72.804914][ T6704] Use struct sctp_sack_info instead
[   73.463735][ T6734] netlink: 'syz.0.339': attribute type 12 has an invalid length.
[   73.474896][ T6734] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.339'.
[   73.493466][ T6745] syzkaller0: entered promiscuous mode
[   73.495395][ T6745] syzkaller0: entered allmulticast mode
[   74.260612][ T6747] bridge0: port 3(syz_tun) entered blocking state
[   74.266424][ T6747] bridge0: port 3(syz_tun) entered disabled state
[   74.269529][ T6747] syz_tun: entered allmulticast mode
[   74.273480][ T6747] syz_tun: entered promiscuous mode
[   74.278774][ T6747] bridge0: port 3(syz_tun) entered blocking state
[   74.281785][ T6747] bridge0: port 3(syz_tun) entered forwarding state
[   74.360926][ T6753] Bluetooth: MGMT ver 1.23
[   74.421721][ T6759] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   74.659895][ T6781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.362'.
[   74.829234][ T6796] netlink: 'syz.1.366': attribute type 1 has an invalid length.
[   74.833368][ T6783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.890937][ T6783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.949087][ T6791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.461172][ T6783] syz.0.363 (6783) used greatest stack depth: 19048 bytes left
[   75.493592][ T6812] sctp: [Deprecated]: syz.0.373 (pid 6812) Use of int in maxseg socket option.
[   75.493592][ T6812] Use struct sctp_assoc_value instead
[   75.624670][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'.
[   76.256495][ T6863] netlink: 'syz.0.397': attribute type 1 has an invalid length.
[   76.345064][ T6867] Zero length message leads to an empty skb
[   76.777721][ T6898] netlink: 96 bytes leftover after parsing attributes in process `syz.0.414'.
[   76.849515][ T6900] syzkaller1: entered promiscuous mode
[   76.851960][ T6900] syzkaller1: entered allmulticast mode
[   77.193891][ T6929] netlink: 24 bytes leftover after parsing attributes in process `syz.2.427'.
[   77.254060][ T6933] netlink: 'syz.0.429': attribute type 1 has an invalid length.
[   77.288529][ T6935] tipc: Started in network mode
[   77.290766][ T6935] tipc: Node identity ac14140f, cluster identity 4711
[   77.299169][ T6935] tipc: New replicast peer: 255.255.255.255
[   77.301676][ T6935] tipc: Enabled bearer <udp:syz2>, priority 10
[   77.304601][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.432'.
[   77.309970][ T6935] tipc: Disabling bearer <udp:syz2>
[   77.315376][ T6935] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   77.408798][ T6947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'.
[   77.690106][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.449'.
[   77.863366][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.454'.
[   78.048771][ T7000] sock: sock_set_timeout: `syz.2.462' (pid 7000) tries to set negative timeout
[   78.128529][ T7006] x_tables: duplicate underflow at hook 3
[   78.194505][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.467'.
[   78.199243][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'.
[   78.253484][ T7018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.470'.
[   78.718675][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.489'.
[   79.839006][ T7097] netlink: 'syz.1.508': attribute type 10 has an invalid length.
[   79.872594][ T7097] team0: Port device dummy0 added
[   79.881880][ T7099] Cannot find add_set index 4 as target
[   79.884863][ T7097] syz.1.508 (7097) used greatest stack depth: 18840 bytes left
[   80.358711][ T7130] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   80.486812][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'.
[   80.831766][ T7169] bridge0: port 4(gretap0) entered blocking state
[   80.834792][ T7169] bridge0: port 4(gretap0) entered disabled state
[   80.838322][ T7169] gretap0: entered allmulticast mode
[   80.842021][ T7169] gretap0: entered promiscuous mode
[   80.844965][ T7169] bridge0: port 4(gretap0) entered blocking state
[   80.848005][ T7169] bridge0: port 4(gretap0) entered forwarding state
[   81.002034][ T7179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.538'.
[   81.367132][   T10] cfg80211: failed to load regulatory.db
[   81.601394][ T7205] netlink: 'syz.1.550': attribute type 83 has an invalid length.
[   83.770415][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'.
[   83.877158][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'.
[   83.882447][ T7326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.605'.
[   83.924384][ T7326] vlan2: entered allmulticast mode
[   83.927756][ T7326] veth1: entered allmulticast mode
[   84.413011][ T7359] xt_TCPMSS: Only works on TCP SYN packets
[   84.450063][ T7365] netlink: 'syz.1.625': attribute type 12 has an invalid length.
[   84.453278][ T7365] netlink: 'syz.1.625': attribute type 29 has an invalid length.
[   84.456312][ T7365] netlink: 148 bytes leftover after parsing attributes in process `syz.1.625'.
[   84.501320][ T7373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.627'.
[   84.502178][ T7372] netlink: 'syz.1.628': attribute type 1 has an invalid length.
[   84.504841][ T7373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.627'.
[   84.512722][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'.
[   84.558889][ T7372] bond1: entered promiscuous mode
[   84.563560][ T7372] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.563794][ T7377] netlink: 3 bytes leftover after parsing attributes in process `syz.1.628'.
[   84.579078][ T7379] Cannot find del_set index 1 as target
[   84.592070][ T7377] batadv1: entered promiscuous mode
[   84.594366][ T7377] batadv1: entered allmulticast mode
[   84.602506][ T7377] 8021q: adding VLAN 0 to HW filter on device batadv1
[   84.609852][ T7377] bond1: (slave batadv1): making interface the new active one
[   84.614342][ T7377] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   84.817760][ T7372] netlink: 48 bytes leftover after parsing attributes in process `syz.1.628'.
[   84.963016][   T57] block nbd0: Receive control failed (result -32)
[   85.134526][ T7415] netlink: 'syz.2.645': attribute type 5 has an invalid length.
[   85.274163][ T7425] netlink: 'syz.0.650': attribute type 5 has an invalid length.
[   85.281872][ T7425] ip6erspan0: entered allmulticast mode
[   85.517297][ T7432] netlink: 'syz.0.651': attribute type 1 has an invalid length.
[   85.522448][ T7432] netlink: 224 bytes leftover after parsing attributes in process `syz.0.651'.
[   85.930697][ T7443] netlink: 'syz.1.657': attribute type 1 has an invalid length.
[   86.095041][ T7451] netlink: 'syz.1.661': attribute type 3 has an invalid length.
[   86.337571][ T7467] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   86.463935][ T7479] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[   86.467822][ T7479] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[   86.474785][ T7479] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[   86.495259][ T7479] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[   86.501871][ T7479] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[   86.576672][ T7490] syzkaller1: tun_chr_ioctl cmd 1074025677
[   86.579248][ T7490] syzkaller1: linktype set to 6
[   87.340032][ T7555] delete_channel: no stack
[   87.611772][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.615900][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.643041][ T7575] 
[   87.644122][ T7575] ======================================================
[   87.646996][ T7575] WARNING: possible circular locking dependency detected
[   87.649958][ T7575] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   87.654196][ T7575] ------------------------------------------------------
[   87.657206][ T7575] syz.1.718/7575 is trying to acquire lock:
[   87.659781][ T7575] ffff88802aa34e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[   87.664037][ T7575] 
[   87.664037][ T7575] but task is already holding lock:
[   87.667186][ T7575] ffff88803929ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   87.671168][ T7575] 
[   87.671168][ T7575] which lock already depends on the new lock.
[   87.671168][ T7575] 
[   87.675394][ T7575] 
[   87.675394][ T7575] the existing dependency chain (in reverse order) is:
[   87.679089][ T7575] 
[   87.679089][ T7575] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   87.682634][ T7575]        lock_acquire+0x120/0x360
[   87.684715][ T7575]        __mutex_lock+0x182/0xe80
[   87.686865][ T7575]        dev_set_mtu+0x10e/0x260
[   87.689014][ T7575]        team_add_slave+0x8b8/0x2840
[   87.691311][ T7575]        do_set_master+0x533/0x6d0
[   87.693557][ T7575]        do_setlink+0xcf0/0x41c0
[   87.695691][ T7575]        rtnl_newlink+0x160b/0x1c70
[   87.697877][ T7575]        rtnetlink_rcv_msg+0x7cf/0xb70
[   87.700159][ T7575]        netlink_rcv_skb+0x208/0x470
[   87.701931][ T7575]        netlink_unicast+0x75b/0x8d0
[   87.703609][ T7575]        netlink_sendmsg+0x805/0xb30
[   87.705339][ T7575]        __sock_sendmsg+0x21c/0x270
[   87.707511][ T7575]        ____sys_sendmsg+0x505/0x830
[   87.709734][ T7575]        ___sys_sendmsg+0x21f/0x2a0
[   87.711596][ T7575]        __x64_sys_sendmsg+0x19b/0x260
[   87.713371][ T7575]        do_syscall_64+0xfa/0x3b0
[   87.715198][ T7575]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.717916][ T7575] 
[   87.717916][ T7575] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[   87.721265][ T7575]        validate_chain+0xb9b/0x2140
[   87.723461][ T7575]        __lock_acquire+0xab9/0xd20
[   87.725635][ T7575]        lock_acquire+0x120/0x360
[   87.727767][ T7575]        __mutex_lock+0x182/0xe80
[   87.729871][ T7575]        team_device_event+0x182/0xa20
[   87.732067][ T7575]        notifier_call_chain+0x1b6/0x3e0
[   87.734327][ T7575]        __dev_notify_flags+0x18d/0x2e0
[   87.736600][ T7575]        netif_change_flags+0xe8/0x1a0
[   87.738882][ T7575]        do_setlink+0xc55/0x41c0
[   87.740998][ T7575]        rtnl_newlink+0x149f/0x1c70
[   87.743129][ T7575]        rtnetlink_rcv_msg+0x7cf/0xb70
[   87.745396][ T7575]        netlink_rcv_skb+0x208/0x470
[   87.747587][ T7575]        netlink_unicast+0x75b/0x8d0
[   87.749926][ T7575]        netlink_sendmsg+0x805/0xb30
[   87.752101][ T7575]        __sock_sendmsg+0x21c/0x270
[   87.754271][ T7575]        ____sys_sendmsg+0x505/0x830
[   87.756470][ T7575]        ___sys_sendmsg+0x21f/0x2a0
[   87.758621][ T7575]        __x64_sys_sendmsg+0x19b/0x260
[   87.760900][ T7575]        do_syscall_64+0xfa/0x3b0
[   87.762967][ T7575]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.765718][ T7575] 
[   87.765718][ T7575] other info that might help us debug this:
[   87.765718][ T7575] 
[   87.769948][ T7575]  Possible unsafe locking scenario:
[   87.769948][ T7575] 
[   87.772939][ T7575]        CPU0                    CPU1
[   87.775100][ T7575]        ----                    ----
[   87.777331][ T7575]   lock(&dev_instance_lock_key#3);
[   87.779579][ T7575]                                lock(team->team_lock_key#3);
[   87.782605][ T7575]                                lock(&dev_instance_lock_key#3);
[   87.785762][ T7575]   lock(team->team_lock_key#3);
[   87.787876][ T7575] 
[   87.787876][ T7575]  *** DEADLOCK ***
[   87.787876][ T7575] 
[   87.791199][ T7575] 2 locks held by syz.1.718/7575:
[   87.793330][ T7575]  #0: ffffffff8f50ffc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[   87.797250][ T7575]  #1: ffff88803929ad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   87.801545][ T7575] 
[   87.801545][ T7575] stack backtrace:
[   87.804025][ T7575] CPU: 1 UID: 0 PID: 7575 Comm: syz.1.718 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   87.804044][ T7575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.804052][ T7575] Call Trace:
[   87.804060][ T7575]  <TASK>
[   87.804068][ T7575]  dump_stack_lvl+0x189/0x250
[   87.804093][ T7575]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.804112][ T7575]  ? __pfx__printk+0x10/0x10
[   87.804127][ T7575]  ? print_lock_name+0xde/0x100
[   87.804141][ T7575]  print_circular_bug+0x2ee/0x310
[   87.804155][ T7575]  check_noncircular+0x134/0x160
[   87.804168][ T7575]  validate_chain+0xb9b/0x2140
[   87.804180][ T7575]  ? __lock_acquire+0xab9/0xd20
[   87.804198][ T7575]  __lock_acquire+0xab9/0xd20
[   87.804215][ T7575]  ? team_device_event+0x182/0xa20
[   87.804228][ T7575]  lock_acquire+0x120/0x360
[   87.804242][ T7575]  ? team_device_event+0x182/0xa20
[   87.804257][ T7575]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   87.804274][ T7575]  __mutex_lock+0x182/0xe80
[   87.804293][ T7575]  ? team_device_event+0x182/0xa20
[   87.804307][ T7575]  ? __try_to_del_timer_sync+0x34a/0x3a0
[   87.804320][ T7575]  ? team_device_event+0x182/0xa20
[   87.804334][ T7575]  ? __pfx___mutex_lock+0x10/0x10
[   87.804349][ T7575]  ? __timer_delete_sync+0x218/0x2d0
[   87.804368][ T7575]  team_device_event+0x182/0xa20
[   87.804382][ T7575]  notifier_call_chain+0x1b6/0x3e0
[   87.804403][ T7575]  __dev_notify_flags+0x18d/0x2e0
[   87.804420][ T7575]  ? __pfx___dev_notify_flags+0x10/0x10
[   87.804463][ T7575]  ? __dev_change_flags+0x4cc/0x6d0
[   87.804477][ T7575]  ? __pfx___dev_change_flags+0x10/0x10
[   87.804490][ T7575]  ? netif_state_change+0x256/0x3a0
[   87.804503][ T7575]  netif_change_flags+0xe8/0x1a0
[   87.804517][ T7575]  do_setlink+0xc55/0x41c0
[   87.804532][ T7575]  ? __kernel_text_address+0xd/0x40
[   87.804547][ T7575]  ? arch_stack_walk+0xfc/0x150
[   87.804560][ T7575]  ? __pfx_do_setlink+0x10/0x10
[   87.804577][ T7575]  ? __lock_acquire+0xab9/0xd20
[   87.804594][ T7575]  ? __mutex_trylock_common+0x153/0x260
[   87.804606][ T7575]  ? __pfx___mutex_trylock_common+0x10/0x10
[   87.804618][ T7575]  ? rcu_is_watching+0x15/0xb0
[   87.804637][ T7575]  ? trace_contention_end+0x39/0x120
[   87.804649][ T7575]  ? __mutex_lock+0x330/0xe80
[   87.804665][ T7575]  ? __pfx_aa_get_newest_label+0x10/0x10
[   87.804683][ T7575]  ? rtnl_newlink+0x8db/0x1c70
[   87.804694][ T7575]  ? rcu_is_watching+0x15/0xb0
[   87.804711][ T7575]  ? __pfx___mutex_lock+0x10/0x10
[   87.804730][ T7575]  ? ns_capable+0x8a/0xf0
[   87.804747][ T7575]  ? rtnl_link_get_net_capable+0x16a/0x350
[   87.804760][ T7575]  rtnl_newlink+0x149f/0x1c70
[   87.804772][ T7575]  ? netlink_sendmsg+0x805/0xb30
[   87.804796][ T7575]  ? __pfx_rtnl_newlink+0x10/0x10
[   87.804813][ T7575]  ? kasan_quarantine_put+0xdd/0x220
[   87.804831][ T7575]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.804850][ T7575]  ? nlmon_xmit+0xb0/0x100
[   87.804866][ T7575]  ? kmem_cache_free+0x18f/0x400
[   87.804880][ T7575]  ? __local_bh_enable_ip+0x12d/0x1c0
[   87.804898][ T7575]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.804914][ T7575]  ? __local_bh_enable_ip+0x12d/0x1c0
[   87.804930][ T7575]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   87.804948][ T7575]  ? __dev_queue_xmit+0x27e/0x3a70
[   87.804967][ T7575]  ? __lock_acquire+0xab9/0xd20
[   87.804988][ T7575]  ? __pfx_rtnl_newlink+0x10/0x10
[   87.804999][ T7575]  rtnetlink_rcv_msg+0x7cf/0xb70
[   87.805012][ T7575]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   87.805022][ T7575]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   87.805032][ T7575]  ? ref_tracker_free+0x63a/0x7d0
[   87.805046][ T7575]  ? __copy_skb_header+0xa7/0x550
[   87.805060][ T7575]  ? __pfx_ref_tracker_free+0x10/0x10
[   87.805075][ T7575]  ? __skb_clone+0x63/0x7a0
[   87.805090][ T7575]  netlink_rcv_skb+0x208/0x470
[   87.805104][ T7575]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   87.805115][ T7575]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   87.805131][ T7575]  ? netlink_deliver_tap+0x2e/0x1b0
[   87.805142][ T7575]  ? netlink_deliver_tap+0x2e/0x1b0
[   87.805156][ T7575]  netlink_unicast+0x75b/0x8d0
[   87.805170][ T7575]  netlink_sendmsg+0x805/0xb30
[   87.805185][ T7575]  ? __pfx_netlink_sendmsg+0x10/0x10
[   87.805199][ T7575]  ? aa_sock_msg_perm+0x94/0x160
[   87.805212][ T7575]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   87.805227][ T7575]  ? __pfx_netlink_sendmsg+0x10/0x10
[   87.805240][ T7575]  __sock_sendmsg+0x21c/0x270
[   87.805259][ T7575]  ____sys_sendmsg+0x505/0x830
[   87.805274][ T7575]  ? __pfx_____sys_sendmsg+0x10/0x10
[   87.805290][ T7575]  ? import_iovec+0x74/0xa0
[   87.805302][ T7575]  ___sys_sendmsg+0x21f/0x2a0
[   87.805316][ T7575]  ? __pfx____sys_sendmsg+0x10/0x10
[   87.805338][ T7575]  ? __fget_files+0x2a/0x420
[   87.805351][ T7575]  ? __fget_files+0x3a0/0x420
[   87.805365][ T7575]  __x64_sys_sendmsg+0x19b/0x260
[   87.805379][ T7575]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   87.805396][ T7575]  ? do_syscall_64+0xbe/0x3b0
[   87.805408][ T7575]  do_syscall_64+0xfa/0x3b0
[   87.805417][ T7575]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.805465][ T7575]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.805478][ T7575]  ? exc_page_fault+0x9f/0xf0
[   87.805494][ T7575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.805507][ T7575] RIP: 0033:0x7f747678e929
[   87.805519][ T7575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.805529][ T7575] RSP: 002b:00007f747755c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   87.805544][ T7575] RAX: ffffffffffffffda RBX: 00007f74769b5fa0 RCX: 00007f747678e929
[   87.805553][ T7575] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007
[   87.805560][ T7575] RBP: 00007f7476810b39 R08: 0000000000000000 R09: 0000000000000000
[   87.805567][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.805574][ T7575] R13: 0000000000000000 R14: 00007f74769b5fa0 R15: 00007fffcc1cf568
[   87.805585][ T7575]  </TASK>
[   88.083779][ T7575] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.088398][ T7575] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.112796][ T7575] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.115915][ T7575] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.118909][ T7575] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.121736][ T7575] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.134686][ T7575] xfrm1: left promiscuous mode
[   88.136499][ T7575] xfrm1: left allmulticast mode
[   88.138697][ T7575] vlan2: left allmulticast mode
[   88.140439][ T7575] veth1: left allmulticast mode
[   88.142212][ T7575] bond1: left promiscuous mode
[   88.144514][ T7575] batadv1: left promiscuous mode
[   88.147702][ T7575] batadv1: left allmulticast mode

VM DIAGNOSIS:
07:10:11  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4d920 RBX=ffff88804b03b1c0 RCX=0000000000080000 RDX=ffffc90008a3c000
RSI=0000000000076a44 RDI=0000000000076a45 RBP=ffffc90002baf500 RSP=ffffc90002baf3a0
R8 =ffffffff8fa10cf7 R9 =1ffffffff1f4219e R10=dffffc0000000000 R11=fffffbfff1f4219f
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81b4d909 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f747753b6c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000c038 CR3=000000010fcd2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=000055557e88ece7 000055557e88ec20 XMM03=000055557e88e364 000055557e88e360
XMM04=0000000000000000 000055557e888490 XMM05=0000000000000000 000055557e88ab18
XMM06=0000000000000000 000055557e88f988 XMM07=ffffffff0418c003 02100018b0035c10
XMM08=002690031f120000 8002000000100027 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000005d954 RDI=000000000005d955 RBP=00000000000003f8 RSP=ffffc90002bcdf10
R8 =ffff888108200237 R9 =1ffff11021040046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48fc R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f747755c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcc74b9dfc8 CR3=000000010fcd2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7476811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
