last executing test programs:

17.101650524s ago: executing program 0 (id=82):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000780)="f4000900062b3c25fe80000000000000dc8b850f2384", 0x16}, {&(0x7f0000001400)="8c0b4eab3af0d6535584b4b67b1b1b60a00c", 0x12}], 0x2}, 0x800)

17.101459735s ago: executing program 0 (id=83):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18)
bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.846854921s ago: executing program 0 (id=84):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010)

16.649204962s ago: executing program 0 (id=92):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd4e, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2d, 0x80000001, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$kcm(0x2, 0x2, 0x73)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040000)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$inet(r5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20)

16.648916201s ago: executing program 1 (id=93):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xc5bf)

16.58592394s ago: executing program 1 (id=95):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='s', 0x1}], 0x1}, 0x480c0)

16.561870579s ago: executing program 1 (id=97):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r0], 0x9a)

16.370281393s ago: executing program 1 (id=99):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000008000002"})

16.238266763s ago: executing program 1 (id=104):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$kcm(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637288a8"], 0xfdef)

15.961392224s ago: executing program 2 (id=110):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x110e22fff2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000340)="5c00000033006bcc9e3be35c6e17aa3107f3653c001a0108000600070002bc24eab556a705251e618294ff0051f60a84c9f4d4b68037e786a6d0001000000e4509c5bbcd72c6c953e87efc340cb002b3cb23d694af9149ade85a2892", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x42)

15.546753921s ago: executing program 2 (id=111):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)=0x20000)

15.546459008s ago: executing program 0 (id=112):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, 0x0, 0x0)
close(r0)

15.54623394s ago: executing program 2 (id=113):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000380), 0x4)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000080)

15.479412875s ago: executing program 0 (id=114):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$kcm(0x18, 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003})
socket$kcm(0x28, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, 0x0, 0x30044889)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0x4)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(0x0, 0xffffffffffffffff, 0x7, r3, 0x1)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x10)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local})
close(r0)

15.479166256s ago: executing program 2 (id=115):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a400014003000001000000000000005c0461c1d67f6f94007134cf6ee08008a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

15.150084222s ago: executing program 2 (id=116):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x6}, {0xf, 0x5, 0xc56}]}]}}, 0x0, 0x3e, 0x0, 0x8}, 0x28)

15.149819772s ago: executing program 2 (id=117):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x15, 0x5, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x90)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

15.068632412s ago: executing program 1 (id=118):
r0 = socket$kcm(0xf, 0x3, 0x2)
recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffec7, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10)

0s ago: executing program 32 (id=114):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$kcm(0x18, 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003})
socket$kcm(0x28, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, 0x0, 0x30044889)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0x4)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(0x0, 0xffffffffffffffff, 0x7, r3, 0x1)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x10)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local})
close(r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58417' (ED25519) to the list of known hosts.
syzkaller login: [   48.414122][ T5819] cgroup: Unknown subsys name 'net'
[   48.523960][ T5819] cgroup: Unknown subsys name 'cpuset'
[   48.529952][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.148968][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.346108][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.349029][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.351832][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.355055][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.357717][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.410221][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.412830][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.415389][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.418548][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.421645][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.446008][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.449333][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.452440][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.455722][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.458664][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.565901][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   54.666420][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.669038][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.672045][ T5829] bridge_slave_0: entered allmulticast mode
[   54.674911][ T5829] bridge_slave_0: entered promiscuous mode
[   54.687801][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.690120][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.692479][ T5829] bridge_slave_1: entered allmulticast mode
[   54.695454][ T5829] bridge_slave_1: entered promiscuous mode
[   54.740972][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.755786][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.779293][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   54.802751][ T5829] team0: Port device team_slave_0 added
[   54.809278][ T5829] team0: Port device team_slave_1 added
[   54.844307][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   54.854187][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.856308][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.864296][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.876815][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.879488][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.887080][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.952178][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.954372][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.956490][ T5833] bridge_slave_0: entered allmulticast mode
[   54.959136][ T5833] bridge_slave_0: entered promiscuous mode
[   54.963276][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.965456][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.967603][ T5833] bridge_slave_1: entered allmulticast mode
[   54.970622][ T5833] bridge_slave_1: entered promiscuous mode
[   54.992669][ T5829] hsr_slave_0: entered promiscuous mode
[   54.996214][ T5829] hsr_slave_1: entered promiscuous mode
[   55.031954][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.034866][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.037868][ T5835] bridge_slave_0: entered allmulticast mode
[   55.041698][ T5835] bridge_slave_0: entered promiscuous mode
[   55.047124][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.051408][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.054186][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.057180][ T5835] bridge_slave_1: entered allmulticast mode
[   55.060984][ T5835] bridge_slave_1: entered promiscuous mode
[   55.081249][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.122335][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.142288][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.151379][ T5833] team0: Port device team_slave_0 added
[   55.174190][ T5833] team0: Port device team_slave_1 added
[   55.186782][ T5835] team0: Port device team_slave_0 added
[   55.207301][ T5835] team0: Port device team_slave_1 added
[   55.247784][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.251353][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.262088][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.276057][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.278232][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.287899][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.294581][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.297345][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.309292][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.314629][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.317316][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.327726][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.366280][ T5833] hsr_slave_0: entered promiscuous mode
[   55.368492][ T5833] hsr_slave_1: entered promiscuous mode
[   55.370738][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.373179][ T5833] Cannot create hsr debugfs directory
[   55.416327][ T5835] hsr_slave_0: entered promiscuous mode
[   55.418630][ T5835] hsr_slave_1: entered promiscuous mode
[   55.422151][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.424474][ T5835] Cannot create hsr debugfs directory
[   55.481941][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.494755][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.500390][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.520288][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.691506][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.698375][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.709095][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.723425][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.734151][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.757414][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   55.775889][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.778272][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.791138][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.802775][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.804934][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.809713][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.817425][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.831054][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.947649][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.965313][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.973558][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   55.985218][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.987586][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.993997][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   56.002993][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.005310][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.010103][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.012427][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.030446][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.032803][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.058786][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.155172][ T5829] veth0_vlan: entered promiscuous mode
[   56.165049][ T5829] veth1_vlan: entered promiscuous mode
[   56.203669][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.214901][ T5829] veth0_macvtap: entered promiscuous mode
[   56.227672][ T5829] veth1_macvtap: entered promiscuous mode
[   56.235595][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.247353][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.256040][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.264210][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.266969][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.271395][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.274011][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.287087][ T5835] veth0_vlan: entered promiscuous mode
[   56.298524][ T5835] veth1_vlan: entered promiscuous mode
[   56.330856][ T5833] veth0_vlan: entered promiscuous mode
[   56.342428][ T5835] veth0_macvtap: entered promiscuous mode
[   56.351627][ T5835] veth1_macvtap: entered promiscuous mode
[   56.359128][ T5833] veth1_vlan: entered promiscuous mode
[   56.380073][ T5832] Bluetooth: hci0: command tx timeout
[   56.391206][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.398815][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.402346][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.408526][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.423979][ T5833] veth0_macvtap: entered promiscuous mode
[   56.426730][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.430493][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.433128][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.435686][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.445583][ T5833] veth1_macvtap: entered promiscuous mode
[   56.451009][ T5832] Bluetooth: hci1: command tx timeout
[   56.468351][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.472226][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.477651][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.491317][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.508138][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.513582][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.516273][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.518927][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.529706][ T5832] Bluetooth: hci2: command tx timeout
[   56.552342][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.576196][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.578612][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.641364][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.645452][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.656505][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.661435][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.709065][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.713010][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.918966][ T5914] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10'.
[   57.139368][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[   57.142478][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'.
[   57.145546][ T5932] netlink: 33 bytes leftover after parsing attributes in process `syz.0.18'.
[   57.149107][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'.
[   57.152751][ T5932] netlink: 33 bytes leftover after parsing attributes in process `syz.0.18'.
[   57.408528][ T5944] sock: sock_set_timeout: `syz.2.24' (pid 5944) tries to set negative timeout
[   57.424653][ T5832] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17
[   57.505309][ T5946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   57.509992][ T5946] IPv6: NLM_F_CREATE should be set when creating new route
[   57.512489][ T5946] IPv6: NLM_F_CREATE should be set when creating new route
[   57.668900][ T5962] netlink: 'syz.1.33': attribute type 29 has an invalid length.
[   57.676450][ T5962] netlink: 'syz.1.33': attribute type 29 has an invalid length.
[   57.691201][ T5962] netlink: 'syz.1.33': attribute type 29 has an invalid length.
[   57.694482][ T5962] netlink: 'syz.1.33': attribute type 29 has an invalid length.
[   57.766927][ T5970] Zero length message leads to an empty skb
[   57.876815][ T5978] netlink: 'syz.2.41': attribute type 21 has an invalid length.
[   57.886865][ T5978] IPv6: NLM_F_CREATE should be specified when creating new route
[   58.264398][ T5988] Illegal XDP return value 4294967274 on prog  (id 14) dev N/A, expect packet loss!
[   58.450493][ T5832] Bluetooth: hci0: command tx timeout
[   58.529925][ T5832] Bluetooth: hci1: command tx timeout
[   58.609705][ T5832] Bluetooth: hci2: command tx timeout
[   58.979873][ T6011] warning: `syz.1.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.224188][ T6038] netlink: 'syz.0.68': attribute type 2 has an invalid length.
[   59.226594][ T6038] netlink: 132 bytes leftover after parsing attributes in process `syz.0.68'.
[   59.342817][ T6048] netlink: 'syz.2.73': attribute type 3 has an invalid length.
[   59.346516][ T6048] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.73'.
[   59.594987][ T6066] Dead loop on virtual device ip6_vti0, fix it urgently!
[   59.930272][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'.
[   60.106920][ T6089] delete_channel: no stack
[   60.203919][ T5832] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9
[   60.228251][ T6100] netlink: 'syz.2.98': attribute type 5 has an invalid length.
[   60.294547][ T6100] netlink: 'syz.2.98': attribute type 25 has an invalid length.
[   60.302959][ T6100] netlink: 'syz.2.98': attribute type 1 has an invalid length.
[   60.307718][ T6100] bridge0: port 1(bridge_slave_0) entered learning state
[   60.338392][ T6103] syzkaller0: entered promiscuous mode
[   60.342260][ T6103] syzkaller0: entered allmulticast mode
[   60.521822][ T6113] syzkaller0: entered promiscuous mode
[   60.523592][ T6113] syzkaller0: entered allmulticast mode
[   60.529771][ T5832] Bluetooth: hci0: command tx timeout
[   60.609966][ T5832] Bluetooth: hci1: command tx timeout
[   60.689756][ T5832] Bluetooth: hci2: command tx timeout
[   60.808369][ T6126] netlink: 72 bytes leftover after parsing attributes in process `syz.2.110'.
[   62.610132][ T5832] Bluetooth: hci0: command tx timeout
[   62.689635][ T5832] Bluetooth: hci1: command tx timeout
[   62.779627][ T5832] Bluetooth: hci2: command tx timeout
[   68.199424][    C1] hrtimer: interrupt took 24352 ns
[  121.117906][ T6165] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  121.122470][ T6165] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  121.125236][ T6165] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  121.127773][ T6165] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  121.130798][ T6165] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  121.133626][ T6165] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  121.136104][ T6165] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  121.138560][ T6165] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  121.141539][ T6165] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  121.146106][ T6165] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  121.149552][ T6165] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  121.151975][ T6165] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  121.154830][ T6165] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  121.157131][ T6165] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  121.159908][ T6165] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  123.170448][ T6166] Bluetooth: hci3: command tx timeout
[  123.172852][ T6166] Bluetooth: hci4: command tx timeout
[  123.249764][ T5222] Bluetooth: hci5: command tx timeout
[  125.252969][ T5222] Bluetooth: hci4: command tx timeout
[  125.255147][ T5222] Bluetooth: hci3: command tx timeout
[  125.329878][ T6166] Bluetooth: hci5: command tx timeout
[  127.332376][ T6166] Bluetooth: hci3: command tx timeout
[  127.334590][ T6166] Bluetooth: hci4: command tx timeout
[  127.411153][ T5222] Bluetooth: hci5: command tx timeout
[  129.411013][ T5222] Bluetooth: hci4: command tx timeout
[  129.412669][ T5222] Bluetooth: hci3: command tx timeout
[  129.489750][ T6166] Bluetooth: hci5: command tx timeout
[  137.250073][ T5222] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  137.253248][ T5222] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  137.255857][ T5222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  137.258592][ T5222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  137.261182][ T5222] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  137.330515][ T5222] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  137.333620][ T5222] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  137.336376][ T5222] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  137.339393][ T5222] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  137.344267][ T5222] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  137.593342][ T5222] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  137.596211][ T5222] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  137.598676][ T5222] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  137.603127][ T5222] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  137.605628][ T5222] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  139.329739][ T5222] Bluetooth: hci6: command tx timeout
[  139.419691][ T5222] Bluetooth: hci7: command tx timeout
[  139.649599][ T5222] Bluetooth: hci8: command tx timeout
[  141.412043][ T5222] Bluetooth: hci6: command tx timeout
[  141.489600][ T5222] Bluetooth: hci7: command tx timeout
[  141.729634][ T5222] Bluetooth: hci8: command tx timeout
[  143.489638][ T5222] Bluetooth: hci6: command tx timeout
[  143.571963][ T5222] Bluetooth: hci7: command tx timeout
[  143.809617][ T5222] Bluetooth: hci8: command tx timeout
[  145.579626][ T5222] Bluetooth: hci6: command tx timeout
[  145.651965][ T5222] Bluetooth: hci7: command tx timeout
[  145.889577][ T5222] Bluetooth: hci8: command tx timeout
[  166.589463][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  166.591595][    C1] rcu: 	1-....: (10499 ticks this GP) idle=d7dc/1/0x4000000000000000 softirq=14481/14482 fqs=4809
[  166.595915][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  166.598418][    C1] rcu: 	 number:  1211149          0            0
[  166.600903][    C1] rcu: 	cputime:    25741      26737           76   ==> 52480(ms)
[  166.603889][    C1] rcu: 	(t=10500 jiffies g=7257 q=2994 ncpus=2)
[  166.606351][    C1] CPU: 1 UID: 0 PID: 6137 Comm: syz.0.114 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  166.606365][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.606372][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  166.606393][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 62 2c f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  166.606403][    C1] RSP: 0000:ffffc900001e05c0 EFLAGS: 00000206
[  166.606413][    C1] RAX: a76472e3773fbd00 RBX: 1ffff9200003c0c0 RCX: a76472e3773fbd00
[  166.606420][    C1] RDX: 0000000000000002 RSI: ffffffff8d99883e RDI: ffffffff8be29f40
[  166.606426][    C1] RBP: ffffc900001e06b8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  166.606432][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  166.606438][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  166.606444][    C1] FS:  00007f9b32b6b6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  166.606452][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  166.606457][    C1] CR2: 0000001b3061fffc CR3: 0000000028c8a000 CR4: 00000000000006f0
[  166.606488][    C1] Call Trace:
[  166.606498][    C1]  <IRQ>
[  166.606502][    C1]  ? __lock_acquire+0xab9/0xd20
[  166.606520][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  166.606538][    C1]  ? unwind_next_frame+0xa5/0x2390
[  166.606558][    C1]  __rcu_read_unlock+0x84/0xe0
[  166.606573][    C1]  ? unwind_next_frame+0xa5/0x2390
[  166.606583][    C1]  unwind_next_frame+0x19ae/0x2390
[  166.606598][    C1]  ? unwind_next_frame+0xa5/0x2390
[  166.606610][    C1]  ? __free_frozen_pages+0xc71/0xe70
[  166.606626][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  166.606640][    C1]  arch_stack_walk+0x11c/0x150
[  166.606657][    C1]  ? __tlb_remove_table+0x2d2/0x3b0
[  166.606672][    C1]  stack_trace_save+0x9c/0xe0
[  166.606685][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  166.606703][    C1]  save_stack+0xf5/0x1f0
[  166.606713][    C1]  ? irqentry_exit+0x74/0x90
[  166.606727][    C1]  ? __pfx_save_stack+0x10/0x10
[  166.606736][    C1]  ? __free_frozen_pages+0xc71/0xe70
[  166.606800][    C1]  __reset_page_owner+0x71/0x1f0
[  166.606813][    C1]  __free_frozen_pages+0xc71/0xe70
[  166.606832][    C1]  __tlb_remove_table+0x2d2/0x3b0
[  166.606845][    C1]  ? __pfx___tlb_remove_table+0x10/0x10
[  166.606865][    C1]  tlb_remove_table_rcu+0x85/0x100
[  166.606877][    C1]  ? __pfx_tlb_remove_table_rcu+0x10/0x10
[  166.606893][    C1]  ? rcu_core+0xc34/0x1710
[  166.606904][    C1]  rcu_core+0xca8/0x1710
[  166.606925][    C1]  ? __pfx_rcu_core+0x10/0x10
[  166.606935][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  166.606946][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  166.606961][    C1]  ? irqentry_exit+0x74/0x90
[  166.606980][    C1]  ? __pfx_rcu_core_si+0x10/0x10
[  166.607010][    C1]  handle_softirqs+0x286/0x870
[  166.607024][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  166.607039][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  166.607054][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  166.607071][    C1]  __irq_exit_rcu+0xca/0x1f0
[  166.607081][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  166.607099][    C1]  irq_exit_rcu+0x9/0x30
[  166.607109][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  166.607122][    C1]  </IRQ>
[  166.607125][    C1]  <TASK>
[  166.607130][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  166.607142][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  166.607181][    C1] Code: 74 05 e8 cb 9e 56 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 13 cd 1f f6 65 8b 05 bc f9 2e 07 85 c0 74 40 48 c7 04 24 0e 36
[  166.607189][    C1] RSP: 0000:ffffc9000694f440 EFLAGS: 00000206
[  166.607198][    C1] RAX: a76472e3773fbd00 RBX: 0000000000000a06 RCX: a76472e3773fbd00
[  166.607205][    C1] RDX: 0000000000000006 RSI: ffffffff8d99883e RDI: 0000000000000001
[  166.607210][    C1] RBP: ffffc9000694f4d0 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  166.607217][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  166.607223][    C1] R13: ffff88811132be40 R14: ffffffff99d80f18 R15: 1ffff92000d29e88
[  166.607245][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  166.607255][    C1]  ? kobject_put+0x243/0x480
[  166.607273][    C1]  ? skb_release_data+0x62d/0x7c0
[  166.607292][    C1]  debug_check_no_obj_freed+0x451/0x470
[  166.607308][    C1]  ? netlink_broadcast_filtered+0x91/0x1140
[  166.607327][    C1]  ? skb_release_data+0x62d/0x7c0
[  166.607336][    C1]  kmem_cache_free+0x113/0x400
[  166.607350][    C1]  skb_release_data+0x62d/0x7c0
[  166.607367][    C1]  consume_skb+0x9e/0xf0
[  166.607378][    C1]  netlink_broadcast_filtered+0x103e/0x1140
[  166.607406][    C1]  netlink_broadcast+0x37/0x50
[  166.607422][    C1]  kobject_uevent_net_broadcast+0x4bc/0x560
[  166.607437][    C1]  kobject_uevent_env+0x55b/0x8c0
[  166.607451][    C1]  ? up_write+0x1c4/0x420
[  166.607467][    C1]  __kobject_del+0xd2/0x300
[  166.607479][    C1]  ? kobject_put+0x237/0x480
[  166.607493][    C1]  kobject_put+0x243/0x480
[  166.607509][    C1]  netdev_queue_update_kobjects+0x5db/0x6c0
[  166.607528][    C1]  netdev_unregister_kobject+0x11f/0x450
[  166.607546][    C1]  unregister_netdevice_many_notify+0x1d52/0x2320
[  166.607568][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  166.607586][    C1]  ? __mod_timer+0xb37/0xf30
[  166.607604][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.607620][    C1]  unregister_netdevice_queue+0x33c/0x380
[  166.607634][    C1]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  166.607647][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  166.607657][    C1]  ? linkwatch_urgent_event+0x62/0x3a0
[  166.607675][    C1]  __tun_detach+0xda4/0x1560
[  166.607692][    C1]  ? __pfx_tun_chr_close+0x10/0x10
[  166.607707][    C1]  tun_chr_close+0x10a/0x1c0
[  166.607721][    C1]  __fput+0x44c/0xa70
[  166.607740][    C1]  task_work_run+0x1d4/0x260
[  166.607794][    C1]  ? __pfx_task_work_run+0x10/0x10
[  166.607808][    C1]  ? __fget_files+0x2a/0x420
[  166.607824][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  166.607836][    C1]  exit_to_user_mode_loop+0xec/0x110
[  166.607848][    C1]  do_syscall_64+0x2bd/0x3b0
[  166.607864][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.607875][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  166.607888][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.607898][    C1] RIP: 0033:0x7f9b31d8e9a9
[  166.607912][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.607920][    C1] RSP: 002b:00007f9b32b6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  166.607931][    C1] RAX: 0000000000000000 RBX: 00007f9b31fb6080 RCX: 00007f9b31d8e9a9
[  166.607937][    C1] RDX: 0000000000000006 RSI: 00000000400454cd RDI: 0000000000000003
[  166.607942][    C1] RBP: 00007f9b31e10d69 R08: 0000000000000000 R09: 0000000000000000
[  166.607953][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.607959][    C1] R13: 0000000000000000 R14: 00007f9b31fb6080 R15: 00007ffc9c6baf98
[  166.607975][    C1]  </TASK>
[  166.818570][    C1] sched: DL replenish lagged too much

VM DIAGNOSIS:
08:46:00  Registers:
info registers vcpu 0

CPU#0
RAX=898c1ba5858fe500 RBX=ffffffff81976a48 RCX=898c1ba5858fe500 RDX=0000000000000001
RSI=ffffffff8d99883e RDI=ffffffff8be29f40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055fdb5898028 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fe686d86d00
XMM02=000000030000000f 0000000000000001 XMM03=ffffffffffffe508 3394030202003392
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=0000000100000019 0052080000000001 XMM07=0400338403140400 3380033380040003
XMM08=00000000087d0120 8010000004010000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfc70
R8 =ffff888108c28237 R9 =1ffff11021185046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af5882 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9b32b6b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3061fffc CR3=0000000028c8a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f916bd86478 00007f916bd86450 XMM03=00007f916bd86488 00007f916bd86480
XMM04=00007f916c8ed100 00007f916bd86440 XMM05=00007f916bd86458 00007f916bd864a0
XMM06=00007f916bd86498 00007f916bd86490 XMM07=00007f916bd86488 00007f916bd86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f916bc11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
