last executing test programs:

1.62882329s ago: executing program 2 (id=166):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$TUNDETACHFILTER(r0, 0x541b, 0x1000000000000)

1.569646769s ago: executing program 2 (id=169):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="140000003800a334711c186489da922e0a154080", 0x14}], 0x1}, 0x20000844)

1.497150184s ago: executing program 2 (id=172):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="11ffc3000002"})

1.360627213s ago: executing program 0 (id=175):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.291200139s ago: executing program 2 (id=176):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xb, 0x800800, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x8080, 0x2, 0x0, 0x1, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, 0x0)

468.799514ms ago: executing program 0 (id=177):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000180)=0xffffffffffffffff, 0x12)

460.37705ms ago: executing program 1 (id=178):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x48}, 0x94)
close(0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x60)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x35}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x10, 0x1}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x7, 0xff, 0x0, 0x1000, 0x20848, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x1e, 0x80}, 0x80, 0x7, 0x1, 0x4, 0x0, 0x0, 0x6, 0x0, 0xffffbffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

460.079058ms ago: executing program 0 (id=179):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

386.750885ms ago: executing program 0 (id=180):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18060000000000010000000000000000851000000200000020000000000000009500007b00000000850000005600000095"], &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94)

386.191221ms ago: executing program 2 (id=181):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r0}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90)

321.223018ms ago: executing program 0 (id=182):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x400300}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8)
close(r5)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c0000005e007f029ea69801d76ab059d261de06fe3114ed3a", 0x19}], 0x1}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfe33)
recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r4, 0x4, r4}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

320.689975ms ago: executing program 2 (id=183):
socketpair(0x25, 0xa, 0x7, &(0x7f0000000000))
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x50040, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)=']:\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$kcm(0x2, 0x1, 0x84)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8919, &(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='module_request\x00', r3}, 0x10)
socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)={<r5=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000002018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000c30018000000000095000000000000cd8300"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(r5, &(0x7f00000006c0)={0x0, 0xffffff48, &(0x7f0000000640)=[{&(0x7f0000000580)="61e41727f52f04", 0x7}], 0x1}, 0x24008080)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_pid(r7, &(0x7f0000000200), 0x12)
ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @multicast})
write$cgroup_subtree(r7, &(0x7f0000000840)=ANY=[], 0xfdef)
r8 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4)

232.527601ms ago: executing program 1 (id=184):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e80008a10a0015400100142603600e120800060000000401a800080008000c4003000000206010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

102.481051ms ago: executing program 1 (id=185):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

91.960419ms ago: executing program 0 (id=186):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611", 0x2c}, {&(0x7f0000001dc0)="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", 0x52f}], 0x2}, 0x0)

532.623µs ago: executing program 1 (id=187):
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x10800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5}, 0x2880, 0xc8, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8100073200fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)

171.821µs ago: executing program 1 (id=188):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)

0s ago: executing program 1 (id=189):
sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@xdp={0x2c, 0x8, 0x0, 0x80032}, 0x80, 0x0}, 0x60040855)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49680' (ED25519) to the list of known hosts.
syzkaller login: [   48.251611][ T5818] cgroup: Unknown subsys name 'net'
[   48.376291][ T5818] cgroup: Unknown subsys name 'cpuset'
[   48.380658][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.826571][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.503710][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.507069][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.510470][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.515177][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.518992][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.522703][ T5222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.525859][ T5222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.528624][ T5222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.543634][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.547889][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.566551][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.572000][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.577442][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.581449][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.585234][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.841084][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   53.876674][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   53.910145][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.006846][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.010105][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.012933][ T5836] bridge_slave_0: entered allmulticast mode
[   54.016203][ T5836] bridge_slave_0: entered promiscuous mode
[   54.020548][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.023790][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.026317][ T5836] bridge_slave_1: entered allmulticast mode
[   54.029202][ T5836] bridge_slave_1: entered promiscuous mode
[   54.032268][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.035041][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.037538][ T5832] bridge_slave_0: entered allmulticast mode
[   54.040407][ T5832] bridge_slave_0: entered promiscuous mode
[   54.043852][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.046902][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.049424][ T5832] bridge_slave_1: entered allmulticast mode
[   54.052257][ T5832] bridge_slave_1: entered promiscuous mode
[   54.114223][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.119676][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.134510][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.140636][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.147425][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.149962][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.152521][ T5828] bridge_slave_0: entered allmulticast mode
[   54.155849][ T5828] bridge_slave_0: entered promiscuous mode
[   54.160275][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.163501][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.166606][ T5828] bridge_slave_1: entered allmulticast mode
[   54.170002][ T5828] bridge_slave_1: entered promiscuous mode
[   54.228684][ T5832] team0: Port device team_slave_0 added
[   54.232256][ T5832] team0: Port device team_slave_1 added
[   54.237669][ T5836] team0: Port device team_slave_0 added
[   54.249607][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.254748][ T5836] team0: Port device team_slave_1 added
[   54.266893][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.269312][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.278136][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.285020][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.295632][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.298187][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.308703][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.343747][ T5828] team0: Port device team_slave_0 added
[   54.346274][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.348674][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.358595][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.363841][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.366228][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.374934][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.380621][ T5828] team0: Port device team_slave_1 added
[   54.419047][ T5832] hsr_slave_0: entered promiscuous mode
[   54.421751][ T5832] hsr_slave_1: entered promiscuous mode
[   54.433638][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.436062][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.444964][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.469029][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.471839][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.481213][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.504122][ T5836] hsr_slave_0: entered promiscuous mode
[   54.506840][ T5836] hsr_slave_1: entered promiscuous mode
[   54.509216][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.512555][ T5836] Cannot create hsr debugfs directory
[   54.578618][ T5828] hsr_slave_0: entered promiscuous mode
[   54.581156][ T5828] hsr_slave_1: entered promiscuous mode
[   54.584593][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.587218][ T5828] Cannot create hsr debugfs directory
[   54.768892][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.778486][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.785797][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.800720][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.856508][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.868538][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.875340][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.889684][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.927175][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.940026][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.949529][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.958829][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.018376][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.045431][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   55.060237][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.066380][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.069707][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.074708][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.077200][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.117676][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   55.136223][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.138816][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.150305][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.167180][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.170078][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.194403][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   55.216612][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.219486][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.235128][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.237655][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.266769][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.306614][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.338874][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.397971][ T5832] veth0_vlan: entered promiscuous mode
[   55.415503][ T5832] veth1_vlan: entered promiscuous mode
[   55.440288][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.462596][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.481869][ T5832] veth0_macvtap: entered promiscuous mode
[   55.491153][ T5832] veth1_macvtap: entered promiscuous mode
[   55.516962][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.535181][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.546203][ T5828] veth0_vlan: entered promiscuous mode
[   55.555317][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.558449][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.561636][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.565119][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.590081][ T5828] veth1_vlan: entered promiscuous mode
[   55.597111][ T5834] Bluetooth: hci1: command tx timeout
[   55.599568][ T5831] Bluetooth: hci2: command tx timeout
[   55.604410][ T5831] Bluetooth: hci0: command tx timeout
[   55.604939][ T5836] veth0_vlan: entered promiscuous mode
[   55.628105][ T5836] veth1_vlan: entered promiscuous mode
[   55.656620][ T5828] veth0_macvtap: entered promiscuous mode
[   55.656718][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.661720][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.675441][ T5828] veth1_macvtap: entered promiscuous mode
[   55.691308][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.695006][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.707219][ T5836] veth0_macvtap: entered promiscuous mode
[   55.712194][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.718175][ T5836] veth1_macvtap: entered promiscuous mode
[   55.729779][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.732436][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.742940][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.749037][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.752794][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.757790][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.780746][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.792669][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.807793][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.811878][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.817329][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.820416][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.895893][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.900384][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.915039][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.917799][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.929002][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.932079][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.965143][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.971555][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.058149][ T5900] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.072160][ T5900] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.459712][ T5931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16'.
[   56.468316][ T5924] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.14'.
[   56.472453][ T5924] openvswitch: netlink: Message has 6 unknown bytes.
[   56.498682][ T5831] Bluetooth: hci2: ISO packet for unknown connection handle 3327
[   56.502077][ T5831] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   56.605385][    C1] hrtimer: interrupt took 34866 ns
[   56.790638][ T5940] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.19'.
[   57.335065][    T9] cfg80211: failed to load regulatory.db
[   57.626935][ T5977] syzkaller0: entered promiscuous mode
[   57.628976][ T5977] syzkaller0: entered allmulticast mode
[   57.683932][ T5834] Bluetooth: hci0: command tx timeout
[   57.685900][   T54] Bluetooth: hci1: command tx timeout
[   57.687845][ T5831] Bluetooth: hci2: command tx timeout
[   58.367392][ T5985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.39'.
[   58.371383][ T5986] netlink: 60 bytes leftover after parsing attributes in process `syz.1.38'.
[   58.376446][ T5987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.39'.
[   58.381091][ T5983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.38'.
[   58.385518][ T5989] netlink: 60 bytes leftover after parsing attributes in process `syz.0.39'.
[   58.600077][ T6001] netlink: 'syz.0.45': attribute type 22 has an invalid length.
[   58.781833][ T6015] warning: `syz.1.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.753782][ T5834] Bluetooth: hci0: command tx timeout
[   59.755721][ T5834] Bluetooth: hci2: command tx timeout
[   59.757749][ T5831] Bluetooth: hci1: command tx timeout
[   60.271160][ T6073] netlink: 'syz.2.80': attribute type 4 has an invalid length.
[   60.403028][ T5831] Bluetooth: hci0: ISO packet for unknown connection handle 3327
[   60.409117][ T5831] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   60.456573][ T6086] netlink: 'syz.2.85': attribute type 21 has an invalid length.
[   60.459471][ T6086] netlink: 'syz.2.85': attribute type 1 has an invalid length.
[   60.892802][ T6113] sctp: [Deprecated]: syz.0.98 (pid 6113) Use of struct sctp_assoc_value in delayed_ack socket option.
[   60.892802][ T6113] Use struct sctp_sack_info instead
[   61.367244][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.371692][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.375107][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.378488][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.382413][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.385858][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.389536][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.392934][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.397636][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.477291][ T6139] net_ratelimit: 311 callbacks suppressed
[   61.477368][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.482918][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.486946][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.490688][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.494137][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.497563][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.500855][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.504082][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.507467][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.510727][ T6139] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   61.834738][ T5831] Bluetooth: hci2: command tx timeout
[   61.837268][ T5831] Bluetooth: hci1: command tx timeout
[   61.839681][ T5834] Bluetooth: hci0: command tx timeout
[   62.111092][ T6149] __nla_validate_parse: 8 callbacks suppressed
[   62.111106][ T6149] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.114'.
[   62.205732][ T6155] netlink: 'syz.2.117': attribute type 10 has an invalid length.
[   62.211232][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.217676][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.268070][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.271166][ T6155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.274829][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.277681][ T6155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.299369][ T6155] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   62.354893][ T6155] syz.2.117 (6155) used greatest stack depth: 20536 bytes left
[   62.643429][ T6177] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.126'.
[   62.702826][ T6179] syzkaller0: entered promiscuous mode
[   62.707976][ T6179] syzkaller0: entered allmulticast mode
[   63.500001][ T6195] netlink: 196 bytes leftover after parsing attributes in process `syz.2.135'.
[   64.547827][ T6201] netlink: 'syz.2.138': attribute type 12 has an invalid length.
[   64.551119][ T6201] netlink: 132 bytes leftover after parsing attributes in process `syz.2.138'.
[   64.887018][ T6225] sit0: entered allmulticast mode
[   64.997169][ T6222] sit0: entered promiscuous mode
[   65.949883][ T6246] sit0: entered allmulticast mode
[   66.001636][ T6258] netlink: 17 bytes leftover after parsing attributes in process `syz.2.163'.
[   66.275075][ T6277] syzkaller0: refused to change device tx_queue_len
[   66.431242][ T6285] Zero length message leads to an empty skb
[   67.435959][ T6299] netlink: 132 bytes leftover after parsing attributes in process `syz.0.182'.
[   67.537442][ T6306] netlink: 'syz.1.184': attribute type 21 has an invalid length.
[   67.715475][ T6318] C: renamed from team_slave_0 (while UP)
[   67.719408][ T6318] netlink: 'syz.1.189': attribute type 8 has an invalid length.
[   67.722494][ T6318] net_ratelimit: 2999 callbacks suppressed
[   67.722502][ T6318] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
Connection to localhost closed by remote host.
[   68.276668][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.333471][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.406787][ T5832] syz-executor (5832) used greatest stack depth: 20344 bytes left
[   68.411947][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.452847][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.522998][   T13] bridge_slave_1: left allmulticast mode
[   68.525462][   T13] bridge_slave_1: left promiscuous mode
[   68.528015][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.535517][   T13] bridge_slave_0: left allmulticast mode
[   68.537426][   T13] bridge_slave_0: left promiscuous mode
[   68.539428][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.765408][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.771299][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.777634][   T13] bond0 (unregistering): Released all slaves
[   69.020398][   T13] hsr_slave_0: left promiscuous mode
[   69.023782][   T13] hsr_slave_1: left promiscuous mode
[   69.026866][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.030127][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.037794][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.040925][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.056590][   T13] veth1_macvtap: left promiscuous mode
[   69.059260][   T13] veth0_macvtap: left promiscuous mode
[   69.061855][   T13] veth1_vlan: left promiscuous mode
[   69.065447][   T13] veth0_vlan: left promiscuous mode
[   69.327062][   T13] team0 (unregistering): Port device team_slave_1 removed
[   69.346690][   T13] team0 (unregistering): Port device C removed
[   69.880659][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.945214][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.992458][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.035468][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.120699][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.192589][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.241611][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.304721][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.404823][   T13] bridge_slave_1: left allmulticast mode
[   70.407215][   T13] bridge_slave_1: left promiscuous mode
[   70.409213][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.412858][   T13] bridge_slave_0: left allmulticast mode
[   70.415221][   T13] bridge_slave_0: left promiscuous mode
[   70.417116][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.422845][   T13] bridge_slave_1: left allmulticast mode
[   70.425858][   T13] bridge_slave_1: left promiscuous mode
[   70.427784][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.432207][   T13] bridge_slave_0: left allmulticast mode
[   70.435143][   T13] bridge_slave_0: left promiscuous mode
[   70.437059][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.575045][   T13] bond0 (unregistering): (slave bridge0): Releasing backup interface
[   70.655722][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.659899][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.663939][   T13] bond0 (unregistering): Released all slaves
[   70.824313][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.828543][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.832537][   T13] bond0 (unregistering): Released all slaves
[   70.956892][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.959670][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.237643][   T13] hsr_slave_0: left promiscuous mode
[   71.240578][   T13] hsr_slave_1: left promiscuous mode
[   71.244687][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.247812][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.251427][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.254734][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.260109][   T13] hsr_slave_0: left promiscuous mode
[   71.262572][   T13] hsr_slave_1: left promiscuous mode
[   71.267087][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.269880][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.272712][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.277866][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.291057][   T13] veth1_macvtap: left promiscuous mode
[   71.292926][   T13] veth0_macvtap: left promiscuous mode
[   71.295145][   T13] veth1_vlan: left promiscuous mode
[   71.296931][   T13] veth0_vlan: left promiscuous mode
[   71.300156][   T13] veth1_macvtap: left promiscuous mode
[   71.302117][   T13] veth0_macvtap: left promiscuous mode
[   71.304739][   T13] veth1_vlan: left promiscuous mode
[   71.306521][   T13] veth0_vlan: left promiscuous mode
[   71.602677][   T13] team0 (unregistering): Port device team_slave_1 removed
[   71.629281][   T13] team0 (unregistering): Port device team_slave_0 removed
[   72.009057][   T13] team0 (unregistering): Port device team_slave_1 removed
[   72.025931][   T13] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
14:27:34  Registers:
info registers vcpu 0

CPU#0
RAX=c7eedeaa3bb72900 RBX=ffffffff81975f18 RCX=c7eedeaa3bb72900 RDX=0000000000000001
RSI=ffffffff8d9987c6 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1eaf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007feb81b104a0 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=00ff000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=c260732ffc71a800 RBX=ffffffff81975f18 RCX=c260732ffc71a800 RDX=0000000000000001
RSI=ffffffff8d9987c6 RDI=ffffffff8be29f80 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa1eaf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f29c10e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000ff000000 0000000000000000 XMM01=00000000ff000000 0000000000000000
XMM02=ff00000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
