last executing test programs:

2.371896401s ago: executing program 2 (id=30):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005200010004bd7000fcdbdf241c000000080001"], 0x1c}}, 0x8800)

2.310725292s ago: executing program 2 (id=33):
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f0000000500)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000050000"], 0x48)

2.072393402s ago: executing program 1 (id=41):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100))

1.971274532s ago: executing program 1 (id=43):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000100)=@in6={0xa, 0x4e27, 0x41d, @remote, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x4f, 0x1}}], 0x18}, 0x2400c0c1)

1.92231998s ago: executing program 1 (id=45):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x1, 0xd8, &(0x7f0000000440)=""/216}, 0x94)
pwritev(r0, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0)

1.83318148s ago: executing program 1 (id=47):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x1002, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x20000000)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

984.133139ms ago: executing program 1 (id=64):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

912.876256ms ago: executing program 0 (id=65):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178004"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

850.294162ms ago: executing program 0 (id=66):
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0x2)

849.93791ms ago: executing program 0 (id=67):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[], 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r4=>0x0}, 0x8)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r5, 0x4)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r4, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r6, r3, 0x4, r3}, 0x10)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x800000000000004)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00'})

847.396147ms ago: executing program 1 (id=68):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xcb58c9f2fa78421b}, 0x40c0080)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x10000c00)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x8000}, 0x2e)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = accept4(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x80, 0x800)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x1, 0x4, 0x16fe900e86c9a2c2, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8d}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x200}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000)
accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x23, 0x803, 0xfffffffd)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0xc000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0)

452.849052ms ago: executing program 0 (id=69):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0)

346.490111ms ago: executing program 2 (id=70):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9b}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)

346.250294ms ago: executing program 2 (id=71):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x65}, 0x7, 0x1, 0x4, 0x0, 0x1c, 'syz0\x00', "523ca936f8f61adc3d7b1d6e25ad96acfe31ce82f2f500eb00d82e396194db04", "0b6bf1b163e3da54e1b5e6a5ef65b661209cd090c61155070ae569ac4a65ef21", [{0x8, 0xa000, {0x1, 0x10}}, {0x800, 0x7, {0x1, 0xb}}, {0x9, 0xd240, {0x3, 0x56c}}, {0x8, 0x401, {0x0, 0x2e}}, {0x0, 0x42, {0x0, 0x401}}, {0xffa8, 0x1, {0x3}}, {0xfff8, 0x7, {0x0, 0x2}}, {0x4, 0x5}, {0x0, 0xfff7, {0x1, 0xa}}, {0xc, 0x791, {0x1, 0x7}}, {0x1000, 0x9, {0x1, 0xd3d}}, {0x16, 0x9, {0x0, 0x99}}, {0xe45a, 0x4fd, {0x2, 0x5}}, {0x6, 0x8, {0x0, 0x4}}, {0x2, 0xc, {0x1, 0x9}}, {0x7, 0xfffe, {0x2, 0x7f}}, {0x3, 0x1000, {0x2, 0x3}}, {0x0, 0xfff, {0x1, 0x7f}}, {0x9, 0x7, {0x3, 0x3ff}}, {0x1, 0x10, {0x1, 0x7fff}}, {0xe, 0x7, {0x3, 0xfffffffc}}, {0x9, 0x2, {0x2, 0x3}}, {0x9, 0x6, {0x2, 0x6}}, {0xefe7, 0x6, {0x3, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0x40, 0x6ba5, {0x2, 0x8}}, {0xdc, 0xcf83, {0x1, 0xc}}, {0x2, 0xff7b, {0x2, 0x9953}}, {0x8000, 0xc, {0x1, 0xfd}}, {0x7, 0x2, {0x2, 0x7}}, {0x8000, 0x5, {0x1, 0x7}}, {0x1, 0x4, {0x2, 0x2}}, {0x1000, 0x40, {0x0, 0x5}}, {0x2, 0x5, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x4}}, {0x4, 0x58, {0x3, 0x7}}, {0x6, 0xe, {0x3, 0x10001}}, {0x8, 0xfff7, {0x2, 0x7fffffff}}, {0x3, 0xff, {0x2, 0x7}}, {0x400, 0x8, {0x0, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000)

308.76469ms ago: executing program 2 (id=72):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

308.430346ms ago: executing program 0 (id=73):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000400016803c0001800c000500f9ffffff3f060004280001"], 0x68}, 0x1, 0x0, 0x0, 0x44004}, 0x0)

133.478683ms ago: executing program 0 (id=74):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b0601"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc00c0)
syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1)

0s ago: executing program 2 (id=75):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43190' (ED25519) to the list of known hosts.
syzkaller login: [   49.036987][ T5756] cgroup: Unknown subsys name 'net'
[   49.141268][ T5756] cgroup: Unknown subsys name 'cpuset'
[   49.146199][ T5756] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.684369][ T5756] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.017385][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.023020][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.025825][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.029477][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.032593][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.129853][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.134114][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.137399][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.153502][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.156771][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.159669][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.162807][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.165914][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.169377][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.173355][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.312783][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   55.440733][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.444978][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.449094][ T5824] bridge_slave_0: entered allmulticast mode
[   55.453187][ T5824] bridge_slave_0: entered promiscuous mode
[   55.500855][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.503940][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.507046][ T5824] bridge_slave_1: entered allmulticast mode
[   55.512077][ T5824] bridge_slave_1: entered promiscuous mode
[   55.577674][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.589675][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   55.599568][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.641288][ T5824] team0: Port device team_slave_0 added
[   55.643764][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   55.663972][ T5824] team0: Port device team_slave_1 added
[   55.754859][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.757658][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.767675][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.774523][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.777516][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.781130][ T5830] bridge_slave_0: entered allmulticast mode
[   55.785122][ T5830] bridge_slave_0: entered promiscuous mode
[   55.790575][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.793646][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.796770][ T5830] bridge_slave_1: entered allmulticast mode
[   55.801477][ T5830] bridge_slave_1: entered promiscuous mode
[   55.812003][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.814834][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.825510][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.904778][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.907798][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.912103][ T5828] bridge_slave_0: entered allmulticast mode
[   55.915775][ T5828] bridge_slave_0: entered promiscuous mode
[   55.920860][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.923961][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.926903][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.930328][ T5828] bridge_slave_1: entered allmulticast mode
[   55.934051][ T5828] bridge_slave_1: entered promiscuous mode
[   55.942532][ T5824] hsr_slave_0: entered promiscuous mode
[   55.945326][ T5824] hsr_slave_1: entered promiscuous mode
[   55.951671][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.989519][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.011407][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.016504][ T5830] team0: Port device team_slave_0 added
[   56.047453][ T5830] team0: Port device team_slave_1 added
[   56.061419][ T5828] team0: Port device team_slave_0 added
[   56.096307][ T5828] team0: Port device team_slave_1 added
[   56.101591][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.104533][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.115809][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.145925][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.150123][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.160465][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.174175][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.176452][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.184974][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.189726][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.192058][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.200544][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.241624][ T5830] hsr_slave_0: entered promiscuous mode
[   56.243971][ T5830] hsr_slave_1: entered promiscuous mode
[   56.246077][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.248926][ T5830] Cannot create hsr debugfs directory
[   56.300691][ T5828] hsr_slave_0: entered promiscuous mode
[   56.303260][ T5828] hsr_slave_1: entered promiscuous mode
[   56.305558][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.308106][ T5828] Cannot create hsr debugfs directory
[   56.387642][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.404904][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.413194][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.445121][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.570089][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.576862][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.597723][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.604358][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.645074][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.659981][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.668777][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.677523][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.690737][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.734540][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   56.753348][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.756498][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.765088][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.768094][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.796335][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.832779][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   56.847926][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.851062][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.872338][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.875203][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.897238][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.914676][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   56.923137][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.925656][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.960610][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.963237][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.049911][ T5221] Bluetooth: hci0: command tx timeout
[   57.092149][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.144640][ T5824] veth0_vlan: entered promiscuous mode
[   57.165061][ T5824] veth1_vlan: entered promiscuous mode
[   57.187156][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.203032][ T5824] veth0_macvtap: entered promiscuous mode
[   57.210938][ T5221] Bluetooth: hci1: command tx timeout
[   57.211085][ T5827] Bluetooth: hci2: command tx timeout
[   57.240034][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.243296][ T5824] veth1_macvtap: entered promiscuous mode
[   57.247748][ T5830] veth0_vlan: entered promiscuous mode
[   57.264353][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.268952][ T5830] veth1_vlan: entered promiscuous mode
[   57.286576][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.302060][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.305165][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.307910][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.311697][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.346506][ T5830] veth0_macvtap: entered promiscuous mode
[   57.362590][ T5830] veth1_macvtap: entered promiscuous mode
[   57.396026][ T5828] veth0_vlan: entered promiscuous mode
[   57.432271][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.436354][ T5828] veth1_vlan: entered promiscuous mode
[   57.449778][  T623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.452437][  T623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.457748][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.474644][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.477530][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.482395][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.485408][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.510241][ T5828] veth0_macvtap: entered promiscuous mode
[   57.516004][ T5828] veth1_macvtap: entered promiscuous mode
[   57.536700][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.557957][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.565464][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.569416][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.575806][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.578794][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.581738][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.584593][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.633647][  T623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.637060][  T623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.681245][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.685403][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.696391][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.740324][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.743615][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.775181][ T5893] Zero length message leads to an empty skb
[   57.807158][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.817638][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.844535][ T5896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.952482][ T5902] netlink: 'syz.2.5': attribute type 16 has an invalid length.
[   57.962356][ T5902] netlink: 'syz.2.5': attribute type 17 has an invalid length.
[   58.008290][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.012257][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.060147][ T5908] IPv6: NLM_F_REPLACE set, but no existing node found!
[   58.103126][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.113135][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.197038][ T5902] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.201826][ T5902] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.207156][ T5902] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.222442][ T5902] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.310233][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'.
[   58.853723][ T5940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18'.
[   59.128722][ T5827] Bluetooth: hci0: command tx timeout
[   59.289974][ T5827] Bluetooth: hci2: command tx timeout
[   59.291768][ T5827] Bluetooth: hci1: command tx timeout
[   59.479687][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'.
[   59.555538][ T5980] ip6gretap1: entered promiscuous mode
[   59.595881][ T5982] macvlan0: entered promiscuous mode
[   59.610368][ T5982] netlink: 'syz.0.40': attribute type 1 has an invalid length.
[   59.629529][ T5982] netlink: 'syz.0.40': attribute type 2 has an invalid length.
[   59.700458][ T5990] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   60.129111][ T6014] syz.0.55 uses obsolete (PF_INET,SOCK_PACKET)
[   60.764120][ T6039] openvswitch: netlink: Duplicate or invalid key (type 0).
[   60.766546][ T6039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.209903][ T5221] Bluetooth: hci0: command tx timeout
[   61.256479][ T6061] netlink: 56 bytes leftover after parsing attributes in process `syz.0.69'.
[   61.261898][ T6061] netlink: 19 bytes leftover after parsing attributes in process `syz.0.69'.
[   61.281334][ T6061] netlink: 19 bytes leftover after parsing attributes in process `syz.0.69'.
[   61.386195][ T5221] Bluetooth: hci1: command tx timeout
[   61.389521][ T5827] Bluetooth: hci2: command tx timeout
[   61.478150][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'.
[   61.484807][ T6069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.672453][ T6073] veth0: entered promiscuous mode
[   61.675377][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'.
[   61.728204][ T6073] veth0 (unregistering): left promiscuous mode
Connection to localhost closed by remote host.
[   63.324568][ T5824] syz-executor (5824) used greatest stack depth: 19192 bytes left
[   63.380963][ T5855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.449684][ T5221] Bluetooth: hci2: command tx timeout
[   63.454108][ T5855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.540895][ T5855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.632438][ T5855] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.731274][ T6045] Set syz1 is full, maxelem 65536 reached
[   63.738173][ T5855] bridge_slave_1: left allmulticast mode
[   63.741675][ T5855] bridge_slave_1: left promiscuous mode
[   63.744180][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.750014][ T5855] bridge_slave_0: left allmulticast mode
[   63.751989][ T5855] bridge_slave_0: left promiscuous mode
[   63.754173][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.962341][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.967962][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.971698][ T5855] bond0 (unregistering): Released all slaves
[   64.211281][ T5855] hsr_slave_0: left promiscuous mode
[   64.213750][ T5855] hsr_slave_1: left promiscuous mode
[   64.216126][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.220043][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.224034][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.227060][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.236312][ T5855] veth1_macvtap: left promiscuous mode
[   64.238234][ T5855] veth0_macvtap: left promiscuous mode
[   64.241117][ T5855] veth1_vlan: left promiscuous mode
[   64.242908][ T5855] veth0_vlan: left promiscuous mode
[   64.584960][ T5855] team0 (unregistering): Port device team_slave_1 removed
[   64.613510][ T5855] team0 (unregistering): Port device team_slave_0 removed
[   70.976706][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.979622][ T1363] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
01:23:10  Registers:
info registers vcpu 0

CPU#0
RAX=9f057b1ee8338400 RBX=ffffffff81976a48 RCX=9f057b1ee8338400 RDX=0000000000000001
RSI=ffffffff8d996116 RDI=ffffffff8be28c00 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055fdb9648b78 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000001001 0000000000000014
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=52692c029a62fd00 RBX=ffffffff81976a48 RCX=52692c029a62fd00 RDX=0000000000000001
RSI=ffffffff8d996116 RDI=ffffffff8be28c00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d6f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055fda9923680 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
