last executing test programs:

1m7.351079187s ago: executing program 1 (id=202):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f00000001c0), &(0x7f0000000080)=r0}, 0x20)
close(0x3)

1m7.350614057s ago: executing program 1 (id=204):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0x0, 0x8, 0x0, 0x0, 0x802}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f782db44b904021d080201000000040000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10)

1m7.220270727s ago: executing program 2 (id=209):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001e00)={@map, 0xffffffffffffffff, 0x1, 0x16}, 0x20)

1m7.219636985s ago: executing program 2 (id=211):
r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xa}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0xa9ea}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94)
r5 = socket$kcm(0x2, 0x1, 0x84)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1a000}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r8}, &(0x7f00000001c0), &(0x7f0000000200)=r4}, 0x20)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x1, r0, 0xb)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))

1m7.219328892s ago: executing program 1 (id=212):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x1006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r1, r2}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10)
getpid()

1m7.099054322s ago: executing program 1 (id=214):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111530000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

1m7.09886026s ago: executing program 1 (id=215):
r0 = socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local})
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r0, &(0x7f0000000f80)={&(0x7f0000000800)={0x2, 0x3, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x0)

1m7.001230031s ago: executing program 0 (id=216):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x1000, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x10, 0x0, 0xc)

1m6.979038396s ago: executing program 0 (id=217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xa}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1m6.974347992s ago: executing program 2 (id=218):
socketpair(0x22, 0x2, 0x1, &(0x7f0000000000))

1m6.911738658s ago: executing program 0 (id=219):
r0 = socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x28, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000059)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000500)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x18, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0)

1m6.911613877s ago: executing program 2 (id=220):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f00000001c0)=[{0x20, 0x84, 0x2, "fe8041000000000092"}, {0x10, 0x10e, 0xe3481c1}], 0x30}, 0x0)

1m6.91143765s ago: executing program 0 (id=221):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8482000a, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)

1m6.857378675s ago: executing program 2 (id=222):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, 0x0, &(0x7f0000000080)=r1}, 0x20)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000009e380ef2f3828c4d6297e306777d6f2172575aab8225e5ed15ba19cf2826fa4d3e64", @ANYRES32=0x0, @ANYBLOB, @ANYRES8=r0, @ANYRES64=0x0], 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x31)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c)

1m6.857244113s ago: executing program 0 (id=223):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114301, 0x4, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
close(r2)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)

1m6.672451835s ago: executing program 0 (id=224):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x8, 0x1, 0x0, 0x7e, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(r6, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(r4, 0x0, 0x6)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100))
r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x4, @perf_bp={&(0x7f0000000200)}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1}, 0x800)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, r7, 0x0)

45.981555437s ago: executing program 1 (id=225):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e48847"], 0x66)

44.849464464s ago: executing program 2 (id=226):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)

6.537370281s ago: executing program 32 (id=224):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x8, 0x1, 0x0, 0x7e, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(r6, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(r4, 0x0, 0x6)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100))
r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x4, @perf_bp={&(0x7f0000000200)}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1}, 0x800)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, r7, 0x0)

83.946µs ago: executing program 33 (id=225):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e48847"], 0x66)

0s ago: executing program 34 (id=226):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10454' (ED25519) to the list of known hosts.
syzkaller login: [   40.614710][ T5763] cgroup: Unknown subsys name 'net'
[   40.718466][ T5763] cgroup: Unknown subsys name 'cpuset'
[   40.723118][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.980660][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   48.999852][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   49.002995][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   49.005730][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   49.010893][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   49.015376][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   49.082855][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.103962][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.109496][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.146877][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.150151][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.128524][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.131355][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.133944][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.139022][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.142698][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   51.149416][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.153410][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.191645][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.194996][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.198003][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.215719][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.218500][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.221170][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.227026][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.229510][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   51.392414][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   51.566346][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   51.570900][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.577521][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.579836][ T5854] bridge_slave_0: entered allmulticast mode
[   51.582550][ T5854] bridge_slave_0: entered promiscuous mode
[   51.590130][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.592505][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.594718][ T5854] bridge_slave_1: entered allmulticast mode
[   51.597591][ T5854] bridge_slave_1: entered promiscuous mode
[   51.629284][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.632175][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   51.638841][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.679841][ T5854] team0: Port device team_slave_0 added
[   51.691521][ T5854] team0: Port device team_slave_1 added
[   51.728916][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.731187][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.739806][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.744525][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.747147][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.755113][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.772281][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.774503][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.776980][ T5856] bridge_slave_0: entered allmulticast mode
[   51.779568][ T5856] bridge_slave_0: entered promiscuous mode
[   51.782544][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.784699][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.787568][ T5856] bridge_slave_1: entered allmulticast mode
[   51.790123][ T5856] bridge_slave_1: entered promiscuous mode
[   51.799047][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.801251][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.803462][ T5859] bridge_slave_0: entered allmulticast mode
[   51.806572][ T5859] bridge_slave_0: entered promiscuous mode
[   51.809463][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.811635][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.813808][ T5859] bridge_slave_1: entered allmulticast mode
[   51.816556][ T5859] bridge_slave_1: entered promiscuous mode
[   51.848360][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.859477][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.863779][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.878764][ T5854] hsr_slave_0: entered promiscuous mode
[   51.881041][ T5854] hsr_slave_1: entered promiscuous mode
[   51.885681][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.928597][ T5859] team0: Port device team_slave_0 added
[   51.949806][ T5856] team0: Port device team_slave_0 added
[   51.959309][ T5859] team0: Port device team_slave_1 added
[   51.962008][ T5856] team0: Port device team_slave_1 added
[   51.994459][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.996971][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.004611][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.009078][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.011197][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.019673][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.037516][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.039693][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.050238][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.059404][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.062182][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.072802][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.117326][ T5859] hsr_slave_0: entered promiscuous mode
[   52.119821][ T5859] hsr_slave_1: entered promiscuous mode
[   52.122304][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.124834][ T5859] Cannot create hsr debugfs directory
[   52.149427][ T5856] hsr_slave_0: entered promiscuous mode
[   52.151949][ T5856] hsr_slave_1: entered promiscuous mode
[   52.154282][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.157532][ T5856] Cannot create hsr debugfs directory
[   52.264249][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   52.286693][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   52.310705][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   52.322736][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   52.400643][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   52.409257][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   52.419135][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   52.427173][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   52.489262][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   52.495700][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.499898][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   52.504567][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   52.517904][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   52.551218][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   52.564536][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.567589][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.585349][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.587653][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.640324][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.646555][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.668130][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.671801][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   52.680489][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   52.695452][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.697833][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.704207][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.706539][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.710626][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.712948][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.717071][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.719517][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.779511][ T5859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.804302][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.835680][ T5854] veth0_vlan: entered promiscuous mode
[   52.850231][ T5854] veth1_vlan: entered promiscuous mode
[   52.883401][ T5854] veth0_macvtap: entered promiscuous mode
[   52.893544][ T5854] veth1_macvtap: entered promiscuous mode
[   52.903424][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.918346][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.923855][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.931709][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.939245][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.942006][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.944637][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.947569][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.989384][ T5859] veth0_vlan: entered promiscuous mode
[   52.995175][ T5856] veth0_vlan: entered promiscuous mode
[   53.010318][ T5856] veth1_vlan: entered promiscuous mode
[   53.016945][ T5859] veth1_vlan: entered promiscuous mode
[   53.025154][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.028597][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.061588][ T5859] veth0_macvtap: entered promiscuous mode
[   53.068995][ T5856] veth0_macvtap: entered promiscuous mode
[   53.072574][ T5859] veth1_macvtap: entered promiscuous mode
[   53.077568][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.081887][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.084692][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.091177][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.094617][ T5856] veth1_macvtap: entered promiscuous mode
[   53.101139][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.104097][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.110010][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.112689][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.143535][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.164555][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.179854][ T5856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.182552][ T5856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.185177][ T5856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.191073][ T5856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.227885][   T54] Bluetooth: hci0: command tx timeout
[   53.228451][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.229899][ T5835] Bluetooth: hci1: command tx timeout
[   53.232157][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.273403][ T3669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.277468][ T3669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.297222][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.306021][ T5835] Bluetooth: hci2: command tx timeout
[   53.310571][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.319425][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.321928][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.569007][ T5943] delete_channel: no stack
[   53.580455][ T5943] delete_channel: no stack
[   53.800437][ T5963] syzkaller0: entered promiscuous mode
[   53.802305][ T5963] syzkaller0: entered allmulticast mode
[   54.808575][ T5991] netlink: 'syz.0.43': attribute type 29 has an invalid length.
[   54.813450][ T5991] netlink: 'syz.0.43': attribute type 29 has an invalid length.
[   54.852189][ T5996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.927621][    C1] hrtimer: interrupt took 35163 ns
[   55.183854][ T6005] netlink: 'syz.2.48': attribute type 22 has an invalid length.
[   55.190217][ T6005] netlink: 148 bytes leftover after parsing attributes in process `syz.2.48'.
[   55.288514][ T6013] Zero length message leads to an empty skb
[   55.293155][ T6013] warning: `syz.1.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.308055][   T54] Bluetooth: hci0: command tx timeout
[   55.309985][ T5835] Bluetooth: hci1: command tx timeout
[   55.386723][ T5835] Bluetooth: hci2: command tx timeout
[   55.656983][ T6027] netlink: 'syz.0.56': attribute type 3 has an invalid length.
[   55.671260][ T6027] netlink: 'syz.0.56': attribute type 1 has an invalid length.
[   55.690541][ T6027] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.56'.
[   56.916789][ T6092] delete_channel: no stack
[   56.918381][ T6092] delete_channel: no stack
[   57.386152][ T5835] Bluetooth: hci1: command tx timeout
[   57.387934][ T5835] Bluetooth: hci0: command tx timeout
[   57.388333][ T6114] netlink: 'syz.0.95': attribute type 29 has an invalid length.
[   57.395713][ T6114] netlink: 'syz.0.95': attribute type 29 has an invalid length.
[   57.430170][ T6114] netlink: 'syz.0.95': attribute type 29 has an invalid length.
[   57.433120][ T6114] netlink: 'syz.0.95': attribute type 29 has an invalid length.
[   57.466439][   T54] Bluetooth: hci2: command tx timeout
[   57.680743][ T6137] tap0: tun_chr_ioctl cmd 1074025675
[   57.682494][ T6137] tap0: persist disabled
[   57.704373][ T6141] netlink: 'syz.2.108': attribute type 16 has an invalid length.
[   57.707517][ T6141] netlink: 156 bytes leftover after parsing attributes in process `syz.2.108'.
[   58.351507][ T6153] netlink: 164 bytes leftover after parsing attributes in process `syz.0.114'.
[   58.363516][ T6153] netlink: 164 bytes leftover after parsing attributes in process `syz.0.114'.
[   58.992108][ T6184] openvswitch: netlink: Flow key attr not present in new flow.
[   59.086507][ T6188] syz.0.130 uses obsolete (PF_INET,SOCK_PACKET)
[   59.234266][ T6186] IPv6: NLM_F_CREATE should be specified when creating new route
[   59.265049][ T6186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   59.267839][ T6186] IPv6: NLM_F_CREATE should be set when creating new route
[   59.270719][ T6186] IPv6: NLM_F_CREATE should be set when creating new route
[   59.273405][ T6186] IPv6: NLM_F_CREATE should be set when creating new route
[   59.466588][   T54] Bluetooth: hci0: command tx timeout
[   59.468442][ T5835] Bluetooth: hci1: command tx timeout
[   59.546031][   T54] Bluetooth: hci2: command tx timeout
[   60.039174][ T6210] Illegal XDP return value 4294967274 on prog  (id 49) dev N/A, expect packet loss!
[   60.137467][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   60.140634][ T6216] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.142'.
[   60.183729][ T6222] netlink: 132 bytes leftover after parsing attributes in process `syz.1.145'.
[   60.257671][ T6222] validate_nla: 3 callbacks suppressed
[   60.257729][ T6222] netlink: 'syz.1.145': attribute type 49 has an invalid length.
[   61.530080][ T6255] netlink: 26 bytes leftover after parsing attributes in process `syz.2.160'.
[   62.551889][ T6285] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   62.554099][ T6285] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   62.886074][ T6320] C: renamed from team_slave_0 (while UP)
[   62.897598][ T6320] netlink: 'syz.2.187': attribute type 3 has an invalid length.
[   62.900323][ T6320] netlink: 152 bytes leftover after parsing attributes in process `syz.2.187'.
[   62.904276][ T6320] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   63.859312][ T6347] netlink: 'syz.1.200': attribute type 3 has an invalid length.
[   63.862476][ T6347] netlink: 'syz.1.200': attribute type 2 has an invalid length.
[   63.865549][ T6347] netlink: 198000 bytes leftover after parsing attributes in process `syz.1.200'.
[   63.879745][ T6347] netlink: 'syz.1.200': attribute type 29 has an invalid length.
[   64.151431][ T6367] netlink: 'syz.2.211': attribute type 10 has an invalid length.
[   64.222571][ T6367] team0: Device ipvlan1 failed to register rx_handler
[   64.332335][ T6367] syz.2.211 (6367) used greatest stack depth: 18320 bytes left
[   70.990721][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.992888][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   80.987306][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.990258][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.992690][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.995374][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.998946][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.027756][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.030551][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.032974][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.035704][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.038444][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.052773][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   81.055557][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   81.058563][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   81.061123][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   81.063491][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   81.227487][   T10] cfg80211: failed to load regulatory.db
[   83.067330][   T54] Bluetooth: hci3: command tx timeout
[   83.069637][ T5835] Bluetooth: hci4: command tx timeout
[   83.146070][ T5835] Bluetooth: hci5: command tx timeout
[   85.146412][   T54] Bluetooth: hci3: command tx timeout
[   85.148200][ T5835] Bluetooth: hci4: command tx timeout
[   85.226009][ T5835] Bluetooth: hci5: command tx timeout
[   87.140567][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 21222517493 wd_nsec: 21222517799
[   87.225976][   T54] Bluetooth: hci3: command tx timeout
[   87.227764][ T5835] Bluetooth: hci4: command tx timeout
[   87.307045][ T5835] Bluetooth: hci5: command tx timeout
[   89.306008][   T54] Bluetooth: hci3: command tx timeout
[   89.308094][ T5835] Bluetooth: hci4: command tx timeout
[   89.386085][ T5835] Bluetooth: hci5: command tx timeout
[  132.428342][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.430432][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  141.737240][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  141.742975][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  141.745987][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  141.748827][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  141.751540][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  141.788763][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  141.791622][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  141.794029][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  141.800370][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  141.802748][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  141.852228][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  141.856068][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  141.858638][   T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  141.861460][   T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  141.864063][   T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  143.786025][   T54] Bluetooth: hci6: command tx timeout
[  143.866074][   T54] Bluetooth: hci7: command tx timeout
[  143.946136][   T54] Bluetooth: hci8: command tx timeout
[  145.866002][   T54] Bluetooth: hci6: command tx timeout
[  145.945961][   T54] Bluetooth: hci7: command tx timeout
[  146.025962][   T54] Bluetooth: hci8: command tx timeout
[  147.946003][   T54] Bluetooth: hci6: command tx timeout
[  148.025957][   T54] Bluetooth: hci7: command tx timeout
[  148.106035][   T54] Bluetooth: hci8: command tx timeout
[  150.025955][   T54] Bluetooth: hci6: command tx timeout
[  150.107561][   T54] Bluetooth: hci7: command tx timeout
[  150.186035][   T54] Bluetooth: hci8: command tx timeout
[  169.825804][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  169.828176][    C1] rcu: 	1-....: (10418 ticks this GP) idle=24cc/1/0x4000000000000000 softirq=15764/15803 fqs=5025
[  169.832898][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  169.835237][    C1] rcu: 	 number:  1083559        210            0
[  169.837578][    C1] rcu: 	cputime:    33550      18928           45   ==> 52480(ms)
[  169.840403][    C1] rcu: 	(t=10500 jiffies g=7377 q=4913 ncpus=2)
[  169.842651][    C1] CPU: 1 UID: 0 PID: 6399 Comm: syz.0.224 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[  169.842660][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.842665][    C1] RIP: 0010:lock_acquire+0x0/0x360
[  169.842676][    C1] Code: 05 45 d5 01 11 a9 00 ff ff 00 0f 95 c0 c3 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 60 4d 89 ce 45
[  169.842682][    C1] RSP: 0018:ffffc900001e03c8 EFLAGS: 00000246
[  169.842688][    C1] RAX: 0000000000000003 RBX: ffffffff81ae7a9c RCX: 0000000000000002
[  169.842693][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13f0e0
[  169.842697][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  169.842701][    C1] R10: ffffc900001e04f8 R11: ffffffff81ad0050 R12: 1ffff9200003c095
[  169.842705][    C1] R13: ffffc900001e04e0 R14: ffffc900001e04a8 R15: ffffffff8172aae5
[  169.842710][    C1] FS:  00007f49dc4886c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  169.842715][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.842719][    C1] CR2: 0000001b31d0cff8 CR3: 000000010fe84000 CR4: 00000000000006f0
[  169.842745][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  169.842751][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000602
[  169.842755][    C1] Call Trace:
[  169.842758][    C1]  <IRQ>
[  169.842760][    C1]  unwind_next_frame+0xc2/0x2390
[  169.842769][    C1]  ? unwind_next_frame+0xa5/0x2390
[  169.842779][    C1]  ? unwind_next_frame+0xa5/0x2390
[  169.842786][    C1]  ? mac80211_hwsim_beacon+0xbb/0x1c0
[  169.842796][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  169.842805][    C1]  arch_stack_walk+0x11c/0x150
[  169.842817][    C1]  ? __hrtimer_run_queues+0x52c/0xc60
[  169.842826][    C1]  stack_trace_save+0x9c/0xe0
[  169.842835][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  169.842847][    C1]  kasan_save_track+0x3e/0x80
[  169.842853][    C1]  ? kasan_save_track+0x3e/0x80
[  169.842858][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  169.842863][    C1]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  169.842870][    C1]  ? kmalloc_reserve+0xbd/0x290
[  169.842876][    C1]  ? __alloc_skb+0x142/0x2d0
[  169.842881][    C1]  ? __netdev_alloc_skb+0x108/0x970
[  169.842887][    C1]  ? __ieee80211_beacon_get+0xeeb/0x17b0
[  169.842895][    C1]  ? ieee80211_beacon_get_tim+0xb4/0x2b0
[  169.842901][    C1]  ? mac80211_hwsim_beacon_tx+0x3ce/0x860
[  169.842910][    C1]  ? __iterate_interfaces+0x2ab/0x590
[  169.842916][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  169.842922][    C1]  ? mac80211_hwsim_beacon+0xbb/0x1c0
[  169.842963][    C1]  ? __hrtimer_run_queues+0x52c/0xc60
[  169.842985][    C1]  __kasan_slab_alloc+0x6c/0x80
[  169.842992][    C1]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  169.842999][    C1]  ? kmalloc_reserve+0xbd/0x290
[  169.843007][    C1]  kmalloc_reserve+0xbd/0x290
[  169.843015][    C1]  __alloc_skb+0x142/0x2d0
[  169.843023][    C1]  __netdev_alloc_skb+0x108/0x970
[  169.843029][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  169.843036][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  169.843047][    C1]  __ieee80211_beacon_get+0xeeb/0x17b0
[  169.843055][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  169.843061][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  169.843073][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  169.843083][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  169.843094][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  169.843105][    C1]  __iterate_interfaces+0x2ab/0x590
[  169.843112][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  169.843121][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  169.843129][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  169.843137][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  169.843147][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  169.843155][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  169.843162][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  169.843177][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  169.843190][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  169.843200][    C1]  handle_softirqs+0x286/0x870
[  169.843211][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  169.843220][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  169.843228][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  169.843238][    C1]  __irq_exit_rcu+0xca/0x1f0
[  169.843245][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  169.843256][    C1]  irq_exit_rcu+0x9/0x30
[  169.843262][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  169.843270][    C1]  </IRQ>
[  169.843272][    C1]  <TASK>
[  169.843275][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  169.843283][    C1] RIP: 0010:lock_is_held_type+0x65/0x190
[  169.843291][    C1] Code: 85 ef 00 00 00 65 4c 8b 2c 25 08 10 a0 92 41 83 bd ec 0a 00 00 00 0f 85 d8 00 00 00 89 f5 49 89 fe 48 c7 04 24 00 00 00 00 9c <8f> 04 24 4c 8b 24 24 fa 48 c7 c7 9f c2 9a 8d e8 e7 16 00 00 65 ff
[  169.843296][    C1] RSP: 0018:ffffc90006a277d0 EFLAGS: 00000246
[  169.843302][    C1] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffff888107499cc0
[  169.843306][    C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8e13f1a0
[  169.843311][    C1] RBP: 00000000ffffffff R08: ffffffff8fa1e9f7 R09: 1ffffffff1f43d3e
[  169.843315][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d3f R12: ffff88813663aac8
[  169.843319][    C1] R13: ffff888107499cc0 R14: ffffffff8e13f1a0 R15: ffff8881a3c1f000
[  169.843332][    C1]  __schedule+0x274/0x4d00
[  169.843341][    C1]  ? perf_trace_preemptirq_template+0xa3/0x340
[  169.843350][    C1]  ? irqentry_enter+0x3d/0x60
[  169.843361][    C1]  ? perf_trace_preemptirq_template+0xa3/0x340
[  169.843371][    C1]  ? preempt_schedule_common+0x83/0xd0
[  169.843380][    C1]  ? __pfx___schedule+0x10/0x10
[  169.843386][    C1]  ? irqentry_exit+0x74/0x90
[  169.843394][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.843406][    C1]  ? preempt_schedule+0xae/0xc0
[  169.843414][    C1]  preempt_schedule_common+0x83/0xd0
[  169.843422][    C1]  preempt_schedule+0xae/0xc0
[  169.843429][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[  169.843439][    C1]  preempt_schedule_thunk+0x16/0x30
[  169.843448][    C1]  try_to_wake_up+0x81b/0x1290
[  169.843462][    C1]  wake_up_q+0xb6/0x110
[  169.843470][    C1]  futex_wake+0x458/0x500
[  169.843476][    C1]  ? ktime_get+0x3e/0x1f0
[  169.843488][    C1]  ? __pfx_futex_wake+0x10/0x10
[  169.843495][    C1]  ? ktime_get+0x3e/0x1f0
[  169.843505][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  169.843520][    C1]  do_futex+0x395/0x420
[  169.843532][    C1]  ? __pfx_do_futex+0x10/0x10
[  169.843539][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  169.843549][    C1]  ? sched_clock_cpu+0x74/0x430
[  169.843558][    C1]  __se_sys_futex+0x36f/0x400
[  169.843570][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  169.843583][    C1]  ? __x64_sys_futex+0x21/0xf0
[  169.843593][    C1]  do_syscall_64+0xfa/0x3b0
[  169.843603][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.843608][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  169.843618][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.843624][    C1] RIP: 0033:0x7f49db58e9a9
[  169.843631][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.843635][    C1] RSP: 002b:00007f49dc4880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  169.843642][    C1] RAX: ffffffffffffffda RBX: 00007f49db7b5fa8 RCX: 00007f49db58e9a9
[  169.843646][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f49db7b5fac
[  169.843650][    C1] RBP: 00007f49db7b5fa0 R08: 7fffffffffffffff R09: 0000000000000000
[  169.843654][    C1] R10: 000000000000000b R11: 0000000000000246 R12: 00007f49db7b5fac
[  169.843658][    C1] R13: 0000000000000000 R14: 00007ffe2b326880 R15: 00007ffe2b326968
[  169.843668][    C1]  </TASK>
[  170.109956][    C1] sched: DL replenish lagged too much
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  175.466205][ T6437] Bluetooth: hci1: command 0x0406 tx timeout
[  175.468188][ T6437] Bluetooth: hci0: command 0x0406 tx timeout
[  175.471109][ T6437] Bluetooth: hci2: command 0x0406 tx timeout
[  175.702624][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.767395][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.814905][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.864600][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.961201][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.025296][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.066444][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.115232][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.177418][   T13] bridge_slave_1: left allmulticast mode
[  176.179558][   T13] bridge_slave_1: left promiscuous mode
[  176.181800][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.187952][   T13] bridge_slave_0: left allmulticast mode
[  176.189844][   T13] bridge_slave_0: left promiscuous mode
[  176.192040][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.205954][   T13] bridge_slave_1: left allmulticast mode
[  176.207738][   T13] bridge_slave_1: left promiscuous mode
[  176.209530][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.213330][   T13] bridge_slave_0: left allmulticast mode
[  176.215099][   T13] bridge_slave_0: left promiscuous mode
[  176.219428][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.423188][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.428284][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.431564][   T13] bond0 (unregistering): Released all slaves
[  176.565967][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.569890][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.573256][   T13] bond0 (unregistering): Released all slaves
[  176.990871][   T13] hsr_slave_0: left promiscuous mode
[  176.992971][   T13] hsr_slave_1: left promiscuous mode
[  176.995494][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.998971][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.002068][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.004618][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.014088][   T13] hsr_slave_0: left promiscuous mode
[  177.017230][   T13] hsr_slave_1: left promiscuous mode
[  177.019200][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.021430][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.024769][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.028370][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.043298][   T13] veth1_macvtap: left promiscuous mode
[  177.045713][   T13] veth0_macvtap: left promiscuous mode
[  177.048061][   T13] veth1_vlan: left promiscuous mode
[  177.050182][   T13] veth0_vlan: left promiscuous mode
[  177.053908][   T13] veth1_macvtap: left promiscuous mode
[  177.055666][   T13] veth0_macvtap: left promiscuous mode
[  177.058593][   T13] veth1_vlan: left promiscuous mode
[  177.060301][   T13] veth0_vlan: left promiscuous mode
[  177.302863][   T13] team0 (unregistering): Port device team_slave_1 removed
[  177.320363][   T13] team0 (unregistering): Port device team_slave_0 removed
[  177.647731][   T13] team0 (unregistering): Port device team_slave_1 removed
[  177.663047][   T13] team0 (unregistering): Port device team_slave_0 removed
[  178.320160][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.367159][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.410802][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.468362][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.541547][   T13] bridge_slave_1: left allmulticast mode
[  178.543342][   T13] bridge_slave_1: left promiscuous mode
[  178.545177][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.553262][   T13] bridge_slave_0: left allmulticast mode
[  178.555064][   T13] bridge_slave_0: left promiscuous mode
[  178.557297][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.755971][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.759720][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.763022][   T13] bond0 (unregistering): Released all slaves
[  178.989059][   T13] hsr_slave_0: left promiscuous mode
[  178.992675][   T13] hsr_slave_1: left promiscuous mode
[  178.995491][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.998206][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.000847][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.003124][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.014168][   T13] veth1_macvtap: left promiscuous mode
[  179.016365][   T13] veth0_macvtap: left promiscuous mode
[  179.018126][   T13] veth1_vlan: left promiscuous mode
[  179.019783][   T13] veth0_vlan: left promiscuous mode
[  179.208520][   T13] team0 (unregistering): Port device team_slave_1 removed
[  179.225247][   T13] team0 (unregistering): Port device C removed

VM DIAGNOSIS:
10:34:36  Registers:
info registers vcpu 0

CPU#0
RAX=e20abd39a0fc6b00 RBX=ffffffff81976a48 RCX=e20abd39a0fc6b00 RDX=0000000000000001
RSI=ffffffff8d998940 RDI=ffffffff8be29f40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e9f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e94f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa9c2231c7a CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fa9c4586d00
XMM02=ffffffff00000015 ffffffff00000000 XMM03=ffffffff8a135250 ffffffff8243d50e
XMM04=0000000000000000 00007fa9c4586d00 XMM05=0000000000000000 000000000001df8a
XMM06=ffffffff8a9eeff4 ffffffff00000017 XMM07=ffffffff00000000 ffffffff894c1139
XMM08=ffffffff894c10a5 ffffffff00000016 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df6f0
R8 =ffff888021630237 R9 =1ffff110042c6046 R10=dffffc0000000000 R11=ffffffff85472aa0
R12=dffffc0000000000 R13=ffffffff99af58b0 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f49dc4886c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31d0cff8 CR3=000000010fe84000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000602
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=643e4dfa2628cf19 ffffffff81686f4f XMM03=5772216f7d7706e3 97624d8c82f3f20e
XMM04=ffffffff823c73d4 ffffffff823c726d XMM05=ffffffff823c690c ffffffff823c6884
XMM06=ffffffff823c65c2 ffffffff823c656e XMM07=ffffffff82390bd5 ffffffff82390b88
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc193611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
