last executing test programs:

527.132139ms ago: executing program 0 (id=161):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x155555f9, 0x0, 0x5, 0x0, 0x98}]}, {0x0, [0x30, 0x30, 0x61, 0x2e]}}, 0x0, 0x2a, 0x0, 0x8, 0xbf81}, 0x28)

437.582498ms ago: executing program 0 (id=163):
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x19}})

437.279221ms ago: executing program 1 (id=164):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='task_rename\x00', r2}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000"], 0x17)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

437.075983ms ago: executing program 0 (id=165):
syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x28, 0x11, 0x1, @private0, @mcast2, {[], {0x4e22, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x2, 0x3, "c1ec20295ad01efe923f724ddb2e065d"}}}}}}}, 0x0)

334.942706ms ago: executing program 0 (id=167):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a80)="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", 0x801}], 0x1}}], 0x1, 0x40488d5)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4100, &(0x7f00000000c0)=0x1004)

314.372544ms ago: executing program 1 (id=169):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000740)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x8000)

307.41511ms ago: executing program 0 (id=170):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
close(0x4)

240.127322ms ago: executing program 2 (id=172):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, 0x0, &(0x7f0000000140))

239.695783ms ago: executing program 2 (id=173):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40080)

239.526473ms ago: executing program 1 (id=174):
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000015000400000000000000000067636d5f6261736528637472286165732d6165736e69292c67686173682d67656e6572696329"], 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0)

174.87648ms ago: executing program 2 (id=175):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000976935640001010800044000000001"], 0x100}}, 0x0)

174.636645ms ago: executing program 2 (id=176):
r0 = socket$netlink(0x10, 0x3, 0x10)
unshare(0x28000600)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

174.404642ms ago: executing program 1 (id=177):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

57.90865ms ago: executing program 0 (id=178):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r1}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = socket(0x15, 0x80005, 0x0)
getsockopt(r3, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)
r4 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000))
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5a8, 0x2e8, 0x0, 0x2e8, 0x0, 0x2e8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000180), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], '\x00', 'tunl0\x00', {0xff}, {0xff}, 0x36, 0x4, 0xf, 0x8}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xff, 0x91ea20fa44f294db, 0x0, 0xff000000], 'syzkaller1\x00', 'vlan0\x00', {}, {0xff}, 0x1, 0xc, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @mcast2, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xffffff], 'ip6gre0\x00', 'vxcan1\x00', {}, {}, 0x1d, 0x8, 0x7}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'pim6reg1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x6c, 0x2, 0xe772453f5b41c059, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x12}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608)
r5 = openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\tm'], 0xa)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r7, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)
unshare(0x6a040000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}, 0x1, 0x0, 0x0, 0x4044051}, 0x0)

57.670282ms ago: executing program 2 (id=179):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x0, 0x2000}, 0x90)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="a5", 0x1}], 0x1}}], 0x1, 0x20048040)

56.880747ms ago: executing program 1 (id=180):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xa0}}, 0x0)

229.732µs ago: executing program 1 (id=181):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xffffffffffffffa0, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 2 (id=182):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a300000000014000000110001"], 0xf0}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13428' (ED25519) to the list of known hosts.
syzkaller login: [   48.198257][ T5771] cgroup: Unknown subsys name 'net'
[   48.263051][ T5771] cgroup: Unknown subsys name 'cpuset'
[   48.267224][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.693059][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.263976][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.268006][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.271695][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.275107][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.278323][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.323243][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.331777][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.335317][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.351907][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.355746][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.359103][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.363782][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.378917][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.392346][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.413650][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.526371][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   58.659774][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.662782][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.665661][ T5872] bridge_slave_0: entered allmulticast mode
[   58.670944][ T5872] bridge_slave_0: entered promiscuous mode
[   58.681829][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.684758][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.687437][ T5872] bridge_slave_1: entered allmulticast mode
[   58.691886][ T5872] bridge_slave_1: entered promiscuous mode
[   58.720679][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   58.751480][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.766943][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.807765][ T5872] team0: Port device team_slave_0 added
[   58.816548][ T5872] team0: Port device team_slave_1 added
[   58.827673][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   58.881837][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.884167][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.886814][ T5877] bridge_slave_0: entered allmulticast mode
[   58.890078][ T5877] bridge_slave_0: entered promiscuous mode
[   58.893686][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.896243][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.898970][ T5877] bridge_slave_1: entered allmulticast mode
[   58.901576][ T5877] bridge_slave_1: entered promiscuous mode
[   58.915848][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.918618][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.928991][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.948266][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.951118][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.962140][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.989988][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.001609][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.055873][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.059458][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.062386][ T5875] bridge_slave_0: entered allmulticast mode
[   59.066232][ T5875] bridge_slave_0: entered promiscuous mode
[   59.071638][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.074266][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.076784][ T5875] bridge_slave_1: entered allmulticast mode
[   59.080837][ T5875] bridge_slave_1: entered promiscuous mode
[   59.088499][ T5872] hsr_slave_0: entered promiscuous mode
[   59.092327][ T5872] hsr_slave_1: entered promiscuous mode
[   59.097437][ T5877] team0: Port device team_slave_0 added
[   59.109174][ T5877] team0: Port device team_slave_1 added
[   59.148335][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.155869][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.172242][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.175008][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.185001][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.227250][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.230234][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.240416][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.245700][ T5875] team0: Port device team_slave_0 added
[   59.261170][ T5875] team0: Port device team_slave_1 added
[   59.307709][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.310510][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.319553][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.334554][ T5877] hsr_slave_0: entered promiscuous mode
[   59.337572][ T5877] hsr_slave_1: entered promiscuous mode
[   59.340479][ T5877] debugfs: 'hsr0' already exists in 'hsr'
[   59.342650][ T5877] Cannot create hsr debugfs directory
[   59.345379][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.348122][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.356931][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.428989][ T5875] hsr_slave_0: entered promiscuous mode
[   59.432082][ T5875] hsr_slave_1: entered promiscuous mode
[   59.434913][ T5875] debugfs: 'hsr0' already exists in 'hsr'
[   59.437228][ T5875] Cannot create hsr debugfs directory
[   59.605977][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.641013][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.663450][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.670146][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.731175][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.740787][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.755765][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.768309][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.824144][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.831751][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.844513][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.852852][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.878425][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.925728][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   59.947443][  T244] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.950774][  T244] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.962249][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.968465][  T244] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.971397][  T244] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.994145][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   60.010917][  T244] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.013627][  T244] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.024642][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.030931][  T244] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.033686][  T244] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.056639][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   60.084481][  T244] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.086901][  T244] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.091233][  T244] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.093899][  T244] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.126901][ T5877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.306585][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.310746][   T54] Bluetooth: hci0: command tx timeout
[   60.330912][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.343900][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.411399][ T5875] veth0_vlan: entered promiscuous mode
[   60.413509][ T5877] veth0_vlan: entered promiscuous mode
[   60.418501][ T5872] veth0_vlan: entered promiscuous mode
[   60.424689][ T5875] veth1_vlan: entered promiscuous mode
[   60.432176][ T5877] veth1_vlan: entered promiscuous mode
[   60.441831][ T5872] veth1_vlan: entered promiscuous mode
[   60.468898][ T5240] Bluetooth: hci2: command tx timeout
[   60.471215][   T54] Bluetooth: hci1: command tx timeout
[   60.473535][ T5875] veth0_macvtap: entered promiscuous mode
[   60.486691][ T5877] veth0_macvtap: entered promiscuous mode
[   60.493281][ T5875] veth1_macvtap: entered promiscuous mode
[   60.499815][ T5877] veth1_macvtap: entered promiscuous mode
[   60.515142][ T5872] veth0_macvtap: entered promiscuous mode
[   60.521858][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.530133][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.536364][ T5872] veth1_macvtap: entered promiscuous mode
[   60.545146][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.561176][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.565851][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.573747][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.580373][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.584957][ T5871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.598371][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.603788][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.611824][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.617796][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.635578][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.640436][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.662908][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.678575][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.683688][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.686696][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.727734][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.734122][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.782360][  T244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.785484][  T244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.818466][ T5877] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.829471][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.834663][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.840249][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.843215][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.877443][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.881383][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.919724][ T5937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'.
[   60.925788][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.935552][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.320316][ T5963] warning: `syz.2.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.399446][ T5970] IPv4: Oversized IP packet from 127.202.26.0
[   61.544557][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34'.
[   61.837113][ T6008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.47'.
[   61.848563][ T6005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.46'.
[   61.954131][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'.
[   62.056615][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'.
[   62.060719][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'.
[   62.064432][ T6023] netlink: 'syz.1.53': attribute type 1 has an invalid length.
[   62.067586][ T6023] netlink: 10 bytes leftover after parsing attributes in process `syz.1.53'.
[   62.107049][ T6029] sch_tbf: burst 5 is lower than device lo mtu (65550) !
[   62.129480][ T6023] nbd: socks must be embedded in a SOCK_ITEM attr
[   62.134630][ T6023] block nbd0: shutting down sockets
[   62.272761][ T6042] netlink: 'syz.2.62': attribute type 1 has an invalid length.
[   62.389241][   T54] Bluetooth: hci0: command tx timeout
[   62.559250][   T54] Bluetooth: hci1: command tx timeout
[   62.561468][ T5240] Bluetooth: hci2: command tx timeout
[   63.120670][ T6084] netlink: 48 bytes leftover after parsing attributes in process `syz.1.81'.
[   63.163612][ T6083] Zero length message leads to an empty skb
[   63.678966][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.755908][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.866530][ T6132] syzkaller0: entered promiscuous mode
[   63.874684][ T6132] syzkaller0: entered allmulticast mode
[   64.308615][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'.
[   64.391067][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   64.472218][ T5240] Bluetooth: hci0: command tx timeout
[   64.631794][ T5240] Bluetooth: hci2: command tx timeout
[   64.634170][ T5240] Bluetooth: hci1: command tx timeout
[   64.710752][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   64.791533][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   64.795710][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   65.043676][ T6192] Illegal XDP return value 809160737 on prog  (id 22) dev N/A, expect packet loss!
[   65.166221][ T6203] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.263176][ T6208] netlink: 'syz.1.138': attribute type 23 has an invalid length.
[   65.836029][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.069582][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.263279][ T6256] Bluetooth: MGMT ver 1.23
[   66.503912][ T6277] __nla_validate_parse: 7 callbacks suppressed
[   66.503921][ T6277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.168'.
[   66.631808][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'.
[   66.718893][ T5240] Bluetooth: hci1: command tx timeout
[   66.719168][   T54] Bluetooth: hci2: command tx timeout
[   66.777367][ T6306] netlink: 44 bytes leftover after parsing attributes in process `syz.0.178'.
[   66.781945][ T6306] netlink: 43 bytes leftover after parsing attributes in process `syz.0.178'.
[   66.795266][ T6306] netlink: 'syz.0.178': attribute type 5 has an invalid length.
[   66.798582][ T6306] netlink: 43 bytes leftover after parsing attributes in process `syz.0.178'.
[   66.882772][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
Connection to localhost closed by remote host.
[   66.949895][ T6313] netlink: 192 bytes leftover after parsing attributes in process `syz.0.178'.
[   67.474670][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.528236][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.584289][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.669307][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.768858][   T13] bridge_slave_1: left allmulticast mode
[   67.771222][   T13] bridge_slave_1: left promiscuous mode
[   67.774236][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.783118][   T13] bridge_slave_0: left allmulticast mode
[   67.785388][   T13] bridge_slave_0: left promiscuous mode
[   67.787441][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.830513][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   67.914627][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   68.060139][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.066550][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.071703][   T13] bond0 (unregistering): Released all slaves
[   68.320643][   T13] hsr_slave_0: left promiscuous mode
[   68.324200][   T13] hsr_slave_1: left promiscuous mode
[   68.326957][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.330267][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.334307][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.337328][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.350690][   T13] veth1_macvtap: left promiscuous mode
[   68.352896][   T13] veth0_macvtap: left promiscuous mode
[   68.355040][   T13] veth1_vlan: left promiscuous mode
[   68.357247][   T13] veth0_vlan: left promiscuous mode
[   68.666683][   T13] team0 (unregistering): Port device team_slave_1 removed
[   68.694557][   T13] team0 (unregistering): Port device team_slave_0 removed
[   68.954096][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   69.296908][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.372355][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.451957][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.511217][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.616876][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.682443][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.751729][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.810620][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.905037][   T13] bridge_slave_1: left allmulticast mode
[   69.907450][   T13] bridge_slave_1: left promiscuous mode
[   69.910360][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.916398][   T13] bridge_slave_0: left allmulticast mode
[   69.919334][   T13] bridge_slave_0: left promiscuous mode
[   69.921844][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.931166][   T13] bridge_slave_1: left allmulticast mode
[   69.933416][   T13] bridge_slave_1: left promiscuous mode
[   69.935857][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.941446][   T13] bridge_slave_0: left allmulticast mode
[   69.943795][   T13] bridge_slave_0: left promiscuous mode
[   69.946277][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.281897][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.287375][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.292706][   T13] bond0 (unregistering): Released all slaves
[   70.548954][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.554367][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.561134][   T13] bond0 (unregistering): Released all slaves
[   70.903755][   T13] hsr_slave_0: left promiscuous mode
[   70.906549][   T13] hsr_slave_1: left promiscuous mode
[   70.910016][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.913137][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.916736][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.921164][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.926898][   T13] hsr_slave_0: left promiscuous mode
[   70.929671][   T13] hsr_slave_1: left promiscuous mode
[   70.932081][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.935014][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.938244][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.942295][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.956978][   T13] veth1_macvtap: left promiscuous mode
[   70.959304][   T13] veth0_macvtap: left promiscuous mode
[   70.961219][   T13] veth1_vlan: left promiscuous mode
[   70.962955][   T13] veth0_vlan: left promiscuous mode
[   70.966256][   T13] veth1_macvtap: left promiscuous mode
[   70.968138][   T13] veth0_macvtap: left promiscuous mode
[   70.971227][   T13] veth1_vlan: left promiscuous mode
[   70.973270][   T13] veth0_vlan: left promiscuous mode
[   71.192602][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.195012][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.257142][   T13] team0 (unregistering): Port device team_slave_1 removed
[   71.278510][   T13] team0 (unregistering): Port device team_slave_0 removed
[   71.642412][   T13] team0 (unregistering): Port device team_slave_1 removed
[   71.671814][   T13] team0 (unregistering): Port device team_slave_0 removed
[   81.429946][  T792] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
14:53:19  Registers:
info registers vcpu 0

CPU#0
RAX=eaf80347eb7e3300 RBX=ffffffff819683f8 RCX=eaf80347eb7e3300 RDX=0000000000000001
RSI=ffffffff8d9b06d7 RDI=ffffffff8be33f00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa2f030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b72e3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3401cff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000ff000000 0000000000000000 XMM01=00000000ff000000 0000000000000000
XMM02=ff00000000000000 0000000000000000 XMM03=ff00000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b30886950fff7b00 RBX=ffffffff819683f8 RCX=b30886950fff7b00 RDX=0000000000000001
RSI=ffffffff8d9b06d7 RDI=ffffffff8be33f00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa2f030 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b72e3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9276174c80 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
