last executing test programs:

711.195518ms ago: executing program 0 (id=1098):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000400)='\x00', 0x1)
setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000000000)='S', 0x1)
getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13)

631.710159ms ago: executing program 0 (id=1101):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x7ff}, 0x28)

572.33452ms ago: executing program 0 (id=1103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb43}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

572.138147ms ago: executing program 0 (id=1105):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000500)=""/247, 0xf7}], 0x2}}], 0x48}, 0x0)

471.035425ms ago: executing program 0 (id=1106):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)

421.552428ms ago: executing program 2 (id=1109):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000041000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
close(r2)

372.339434ms ago: executing program 0 (id=1111):
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x8, 0x2, 0xa000, 0x3}, 0x10)
listen(r0, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
accept4$nfc_llcp(r0, 0x0, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000080}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x20040000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYBLOB='\b\x00\t\x00&I'], 0x24}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)={0x1fc, r5, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa84a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xb471, @mcast2, 0x4f}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81c000}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "21f2d68771b809b6088e9108bf807914b525dff6ff67a5223d91a0152f7f15"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "18157056914a0528b64c8b3d412f2f8552a52937610ab28c0977d5d90db8e0e8"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8d1d8488ec996a432898e2b107e1c88bcf5fba77ce39"}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8000000}, 0x40880)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x525000, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0xfc, 0x2f, 0x0, @remote, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)

372.215564ms ago: executing program 2 (id=1112):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e010108000200ac1414aa080007400000000024000e8014000180080001"], 0x88}}, 0x0)

322.509641ms ago: executing program 2 (id=1115):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x445f, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x490, 0x4)

322.335242ms ago: executing program 2 (id=1117):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e24, 0x3, @local, 0x4000101}, 0x1c)
getsockname$packet(r0, 0x0, &(0x7f0000000240))

260.912117ms ago: executing program 2 (id=1119):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x81, 0xb007}, 0x4)

260.758856ms ago: executing program 1 (id=1121):
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000340), 0x4)

260.520357ms ago: executing program 2 (id=1122):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18)
nanosleep(0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000c40)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4106(gcm(aes)))\x00'}, 0x58)
bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x7)
setsockopt$inet_tcp_int(r3, 0x6, 0x18, 0x0, 0x0)

141.593437ms ago: executing program 1 (id=1123):
r0 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0)

141.230555ms ago: executing program 1 (id=1124):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6d932bbd700000000000010000000800030003"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYRES16], 0x0, 0x5, 0x0, 0x0, 0x0, 0x26}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

72.422565ms ago: executing program 1 (id=1125):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4)
getsockopt(r0, 0x4000006, 0xf53d, 0x0, &(0x7f00000001c0))
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x160)

72.30997ms ago: executing program 1 (id=1126):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}]}, 0x1c}}, 0x0)

0s ago: executing program 1 (id=1127):
r0 = socket$unix(0x1, 0x5, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82187201, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f0000000280)=@broadcast, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x36)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=r8], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r9], 0x44}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:25165' (ED25519) to the list of known hosts.
syzkaller login: [   49.241124][ T5766] cgroup: Unknown subsys name 'net'
[   49.359885][ T5766] cgroup: Unknown subsys name 'cpuset'
[   49.364438][ T5766] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.157064][ T5766] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.432252][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.437866][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.440948][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.444204][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.448103][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.451176][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.454782][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.476484][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.480488][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.484769][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.484886][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.493728][ T5205] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.498253][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.507675][ T5205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.511047][ T5205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.761227][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   55.834565][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   55.891180][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   55.917440][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.920307][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.923211][ T5814] bridge_slave_0: entered allmulticast mode
[   55.926468][ T5814] bridge_slave_0: entered promiscuous mode
[   55.955347][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.958868][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.961217][ T5814] bridge_slave_1: entered allmulticast mode
[   55.963954][ T5814] bridge_slave_1: entered promiscuous mode
[   56.023938][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.026565][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.030327][ T5810] bridge_slave_0: entered allmulticast mode
[   56.033060][ T5810] bridge_slave_0: entered promiscuous mode
[   56.038644][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.052882][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.055584][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.060369][ T5810] bridge_slave_1: entered allmulticast mode
[   56.063332][ T5810] bridge_slave_1: entered promiscuous mode
[   56.075840][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.105892][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.130004][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.132966][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.135685][ T5816] bridge_slave_0: entered allmulticast mode
[   56.140380][ T5816] bridge_slave_0: entered promiscuous mode
[   56.146109][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.152984][ T5814] team0: Port device team_slave_0 added
[   56.169293][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.171958][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.174579][ T5816] bridge_slave_1: entered allmulticast mode
[   56.177922][ T5816] bridge_slave_1: entered promiscuous mode
[   56.191535][ T5814] team0: Port device team_slave_1 added
[   56.233583][ T5810] team0: Port device team_slave_0 added
[   56.245478][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.250783][ T5810] team0: Port device team_slave_1 added
[   56.254440][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.258590][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.261095][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.270013][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.289662][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.292251][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.301874][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.316610][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.319339][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.328558][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.346042][ T5816] team0: Port device team_slave_0 added
[   56.354309][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.357204][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.368078][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.380758][ T5816] team0: Port device team_slave_1 added
[   56.407010][ T5814] hsr_slave_0: entered promiscuous mode
[   56.409651][ T5814] hsr_slave_1: entered promiscuous mode
[   56.435679][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.438879][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.449542][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.472468][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.475329][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.487666][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.506177][ T5810] hsr_slave_0: entered promiscuous mode
[   56.510275][ T5810] hsr_slave_1: entered promiscuous mode
[   56.513111][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.516359][ T5810] Cannot create hsr debugfs directory
[   56.595242][ T5816] hsr_slave_0: entered promiscuous mode
[   56.598222][ T5816] hsr_slave_1: entered promiscuous mode
[   56.600391][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.603042][ T5816] Cannot create hsr debugfs directory
[   56.851154][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.870992][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.882060][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.896252][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.930722][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.952268][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.960052][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.975579][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.019233][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.025440][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.033282][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.044672][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.145004][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.164164][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.179493][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   57.189363][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.191803][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.213356][  T477] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.215741][  T477] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.222974][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   57.239441][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.241754][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.247166][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.262022][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.264420][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.305056][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   57.331500][  T477] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.334623][  T477] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.352664][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.363392][  T477] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.366400][  T477] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.432356][ T5816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.436607][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.494392][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.548296][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.559289][ T5205] Bluetooth: hci0: command tx timeout
[   57.562644][ T5205] Bluetooth: hci1: command tx timeout
[   57.562700][ T5813] Bluetooth: hci2: command tx timeout
[   57.632859][ T5814] veth0_vlan: entered promiscuous mode
[   57.641099][ T5810] veth0_vlan: entered promiscuous mode
[   57.656468][ T5810] veth1_vlan: entered promiscuous mode
[   57.663558][ T5814] veth1_vlan: entered promiscuous mode
[   57.685119][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.711942][ T5810] veth0_macvtap: entered promiscuous mode
[   57.721181][ T5814] veth0_macvtap: entered promiscuous mode
[   57.726845][ T5810] veth1_macvtap: entered promiscuous mode
[   57.748595][ T5814] veth1_macvtap: entered promiscuous mode
[   57.774661][ T5816] veth0_vlan: entered promiscuous mode
[   57.779930][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.790712][ T5816] veth1_vlan: entered promiscuous mode
[   57.804855][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.812842][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.826067][ T5810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.830290][ T5810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.833864][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.837991][ T5810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.846482][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.854254][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.859097][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.862690][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.866143][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.912817][ T5816] veth0_macvtap: entered promiscuous mode
[   57.929977][ T5816] veth1_macvtap: entered promiscuous mode
[   57.972130][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.986305][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.993153][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.995904][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.011844][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.014870][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.020748][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.023595][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.036799][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.044824][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.108557][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.116451][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.123353][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.140158][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.172052][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.175295][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.184476][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.219731][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.222900][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.415158][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'.
[   58.420217][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'.
[   58.518706][ T5892] netlink: 'syz.0.6': attribute type 1 has an invalid length.
[   58.556798][ T5892] gretap1: entered promiscuous mode
[   58.670023][ T5899] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   58.729926][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'.
[   58.761872][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'.
[   58.833256][ T5908] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   59.571552][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'.
[   59.637453][ T5818] Bluetooth: hci2: command tx timeout
[   59.639314][ T5813] Bluetooth: hci1: command tx timeout
[   59.661409][ T5967] bridge_slave_0: left allmulticast mode
[   59.663895][ T5967] bridge_slave_0: left promiscuous mode
[   59.671112][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.678467][ T5967] bridge_slave_1: left allmulticast mode
[   59.680862][ T5967] bridge_slave_1: left promiscuous mode
[   59.683362][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.698446][ T5967] bond0: (slave bond_slave_0): Releasing backup interface
[   59.704658][ T5967] bond0: (slave bond_slave_1): Releasing backup interface
[   59.716309][ T5967] team0: Port device team_slave_0 removed
[   59.722932][ T5967] team0: Port device team_slave_1 removed
[   59.725152][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.730567][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.735067][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.740576][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.130977][ T5985] ip6tnl1: entered promiscuous mode
[   60.133241][ T5985] ip6tnl1: entered allmulticast mode
[   60.371328][ T5995] netlink: 72 bytes leftover after parsing attributes in process `syz.2.49'.
[   60.375098][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'.
[   60.551353][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.53'.
[   60.888892][ T6026] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.975412][ T6030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   60.978798][ T6030] IPv6: NLM_F_CREATE should be set when creating new route
[   60.981894][ T6030] IPv6: NLM_F_CREATE should be set when creating new route
[   61.176846][ T6042] netlink: 32 bytes leftover after parsing attributes in process `syz.1.70'.
[   61.289879][ T6052] netlink: 'syz.1.77': attribute type 1 has an invalid length.
[   61.335193][ T6056] Zero length message leads to an empty skb
[   61.531105][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'.
[   61.537217][ T6075] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   61.542124][ T6075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.553479][ T6077] netlink: 'syz.0.88': attribute type 10 has an invalid length.
[   61.567171][ T6079] netlink: 'syz.1.89': attribute type 13 has an invalid length.
[   61.572320][ T6079] netlink: 'syz.1.89': attribute type 17 has an invalid length.
[   61.576933][ T6079] netlink: 'syz.1.89': attribute type 27 has an invalid length.
[   61.587876][ T6077] team0: Port device geneve0 added
[   61.698459][ T6087] netlink: 'syz.0.92': attribute type 21 has an invalid length.
[   61.704173][ T6087] netlink: 'syz.0.92': attribute type 4 has an invalid length.
[   61.708596][ T6087] netlink: 'syz.0.92': attribute type 5 has an invalid length.
[   61.718323][ T5813] Bluetooth: hci1: command tx timeout
[   61.727574][ T5818] Bluetooth: hci2: command tx timeout
[   62.264732][ T6135] vlan0: entered promiscuous mode
[   62.277732][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.332550][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.386661][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.570964][ T6157] syzkaller0: entered promiscuous mode
[   62.591690][ T6157] syzkaller0: entered allmulticast mode
[   63.136443][ T6183] nbd: must specify a size in bytes for the device
[   63.798413][ T5813] Bluetooth: hci1: command tx timeout
[   63.800551][ T5818] Bluetooth: hci2: command tx timeout
[   64.119367][ T6209] __nla_validate_parse: 6 callbacks suppressed
[   64.119377][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'.
[   64.125421][ T6209] netlink: 'syz.0.145': attribute type 5 has an invalid length.
[   64.234220][ T6215] syzkaller0: entered promiscuous mode
[   64.236690][ T6215] syzkaller0: entered allmulticast mode
[   65.107643][ T6230] syz.2.153 uses obsolete (PF_INET,SOCK_PACKET)
[   65.111013][ T6230] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.293668][ T6236] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[   65.770597][ T6253] xt_TPROXY: Can be used only with -p tcp or -p udp
[   66.201320][ T6281] netlink: 'syz.1.176': attribute type 3 has an invalid length.
[   66.204488][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'.
[   66.279396][ T6284] Bluetooth: MGMT ver 1.23
[   66.352958][ T6282] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82
[   66.459306][ T6290] netlink: 17 bytes leftover after parsing attributes in process `syz.1.180'.
[   66.464598][ T6290] netlink: zone id is out of range
[   66.466335][ T6290] netlink: zone id is out of range
[   66.474723][ T6290] netlink: zone id is out of range
[   66.476659][ T6290] netlink: zone id is out of range
[   66.480215][ T6290] netlink: zone id is out of range
[   66.482334][ T6290] netlink: zone id is out of range
[   66.484350][ T6290] netlink: zone id is out of range
[   66.493584][ T6290] netlink: zone id is out of range
[   66.666625][ T6305] netlink: 'syz.1.186': attribute type 7 has an invalid length.
[   66.812938][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'.
[   67.254555][ T6338] warning: `syz.2.201' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.320916][ T6340] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   67.639460][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'.
[   67.643299][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'.
[   67.647098][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'.
[   67.654358][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'.
[   67.658637][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'.
[   68.260936][ T6381] vcan0: tx drop: invalid da for name 0x0000000000000003
[   68.375017][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'.
[   68.387473][ T6385] net_ratelimit: 75 callbacks suppressed
[   68.387487][ T6385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.739271][ T5262] udevd[5262]: worker [6160] terminated by signal 33 (Unknown signal 33)
[   69.781807][ T6453] netlink: 'syz.2.247': attribute type 1 has an invalid length.
[   69.791705][ T6453] netlink: 36 bytes leftover after parsing attributes in process `syz.2.247'.
[   69.813827][ T6457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.249'.
[   69.991009][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'.
[   70.004805][ T6474] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   70.268321][ T6502] netlink: 280 bytes leftover after parsing attributes in process `syz.2.272'.
[   70.346190][ T6512] netlink: 'syz.0.274': attribute type 10 has an invalid length.
[   70.369459][ T6512] 8021q: adding VLAN 0 to HW filter on device team0
[   70.378091][ T6512] bond0: (slave team0): Enslaving as an active interface with an up link
[   70.393090][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'.
[   70.751099][ T6537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.971438][ T6554] bridge1: entered promiscuous mode
[   71.001184][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.003312][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.121642][ T6567] netlink: 'syz.1.302': attribute type 7 has an invalid length.
[   71.253428][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'.
[   71.385750][ T6586] netlink: 'syz.2.311': attribute type 21 has an invalid length.
[   71.389610][ T6586] netlink: 36 bytes leftover after parsing attributes in process `syz.2.311'.
[   71.410349][ T6589] netlink: 88 bytes leftover after parsing attributes in process `syz.0.312'.
[   71.698462][ T6607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.315'.
[   71.767870][ T6595] netlink: 'syz.2.315': attribute type 12 has an invalid length.
[   71.951611][ T6619] netlink: 'syz.1.322': attribute type 1 has an invalid length.
[   72.040928][ T6625] netlink: 'syz.0.323': attribute type 7 has an invalid length.
[   72.050312][ T6621] syz.2.324 (6621) used obsolete PPPIOCDETACH ioctl
[   72.323736][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'.
[   72.735233][ T6671] bond0: entered promiscuous mode
[   72.738693][ T6671] bond_slave_0: entered promiscuous mode
[   72.747191][ T6671] bond_slave_1: entered promiscuous mode
[   72.750427][ T6671] team0: entered promiscuous mode
[   72.752965][ T6671] team_slave_0: entered promiscuous mode
[   72.758252][ T6671] team_slave_1: entered promiscuous mode
[   72.763372][ T6671] geneve0: entered promiscuous mode
[   72.771410][ T6671] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   72.779340][ T6671] bond0: left promiscuous mode
[   72.780969][ T6671] bond_slave_0: left promiscuous mode
[   72.782915][ T6671] bond_slave_1: left promiscuous mode
[   72.785022][ T6671] team0: left promiscuous mode
[   72.786735][ T6671] team_slave_0: left promiscuous mode
[   72.804237][ T6671] team_slave_1: left promiscuous mode
[   72.806456][ T6671] geneve0: left promiscuous mode
[   74.071323][ T6751] tipc: Started in network mode
[   74.086590][ T6751] tipc: Node identity 52c87c643a19, cluster identity 4711
[   74.093539][ T6751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.114074][ T6751] syzkaller0: entered promiscuous mode
[   74.115890][ T6751] syzkaller0: entered allmulticast mode
[   74.119415][ T6751] tipc: Resetting bearer <eth:syzkaller0>
[   74.126783][ T6750] tipc: Resetting bearer <eth:syzkaller0>
[   74.835647][ T6761] netlink: 'syz.2.380': attribute type 10 has an invalid length.
[   74.882025][ T6750] tipc: Disabling bearer <eth:syzkaller0>
[   74.898610][ T6761] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   74.906422][ T6761] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   74.911444][ T6761] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   75.267613][ T6785] tun0: tun_chr_ioctl cmd 2147767520
[   76.564996][ T6830] __nla_validate_parse: 1 callbacks suppressed
[   76.565006][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'.
[   76.579314][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'.
[   76.595707][ T6830] vlan2: entered promiscuous mode
[   76.600352][ T6830] bridge0: entered promiscuous mode
[   76.605313][ T6830] vlan2: entered allmulticast mode
[   76.606962][ T6830] bridge0: entered allmulticast mode
[   76.616085][ T6830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'.
[   77.212892][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'.
[   77.270712][ T6896] netlink: 'syz.0.437': attribute type 13 has an invalid length.
[   77.279425][ T6896] netlink: 'syz.0.437': attribute type 17 has an invalid length.
[   77.446402][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.444'.
[   77.775306][ T6934] netlink: 'syz.2.457': attribute type 10 has an invalid length.
[   77.795480][ T6934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.457'.
[   77.804167][ T6934] batadv0: entered promiscuous mode
[   77.805928][ T6934] batadv0: entered allmulticast mode
[   77.810296][ T6934] bridge0: port 3(batadv0) entered blocking state
[   77.812486][ T6934] bridge0: port 3(batadv0) entered disabled state
[   77.816051][ T6934] bridge0: port 3(batadv0) entered blocking state
[   77.818571][ T6934] bridge0: port 3(batadv0) entered forwarding state
[   77.826399][ T6936] netlink: 'syz.0.458': attribute type 4 has an invalid length.
[   77.842311][ T6936] netlink: 'syz.0.458': attribute type 4 has an invalid length.
[   77.880576][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   77.884920][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   78.104878][ T6960] netlink: 'syz.1.469': attribute type 1 has an invalid length.
[   78.346310][ T6981] netlink: 304 bytes leftover after parsing attributes in process `syz.2.479'.
[   78.637186][ T6999] xt_connbytes: Forcing CT accounting to be enabled
[   78.642559][ T6999] Cannot find set identified by id 0 to match
[   79.106631][ T7021] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.178070][ T7021] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.250783][ T7021] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.344646][ T7021] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.450142][ T7021] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.468819][ T7021] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.482804][ T7021] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.508994][ T7021] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.682048][ T7056] syzkaller1: tun_chr_ioctl cmd 1074025677
[   79.688623][ T7056] syzkaller1: linktype set to 6
[   79.950969][ T7086] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.514'.
[   80.345528][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'.
[   80.459127][ T7109] netlink: 56 bytes leftover after parsing attributes in process `syz.2.524'.
[   81.100406][ T7138] netlink: 'syz.2.533': attribute type 1 has an invalid length.
[   81.215748][ T7146] netlink: 'syz.1.536': attribute type 39 has an invalid length.
[   81.242033][  T790] cfg80211: failed to load regulatory.db
[   81.920214][ T7206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.922894][ T7206] IPv6: NLM_F_CREATE should be set when creating new route
[   82.421454][ T7256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.424089][ T7256] IPv6: NLM_F_CREATE should be set when creating new route
[   82.426490][ T7256] IPv6: NLM_F_CREATE should be set when creating new route
[   82.640602][ T7275] __nla_validate_parse: 1 callbacks suppressed
[   82.640618][ T7275] netlink: 224 bytes leftover after parsing attributes in process `syz.2.590'.
[   82.832544][ T7289] vlan2: entered promiscuous mode
[   82.834761][ T7289] syz_tun: entered promiscuous mode
[   83.260340][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'.
[   83.386879][ T7345] xt_hashlimit: size too large, truncated to 1048576
[   83.391741][ T7345] xt_hashlimit: max too large, truncated to 1048576
[   83.457056][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'.
[   83.718194][ T7379] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   83.734959][ T7380] netlink: 'syz.2.633': attribute type 1 has an invalid length.
[   83.740841][ T7380] netlink: 'syz.2.633': attribute type 2 has an invalid length.
[   83.914411][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.644'.
[   84.028872][ T7407] netlink: 'syz.0.647': attribute type 2 has an invalid length.
[   84.031470][ T7407] netlink: 119 bytes leftover after parsing attributes in process `syz.0.647'.
[   84.342568][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'.
[   84.346466][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'.
[   84.354310][ T7426] netlink: 'syz.1.653': attribute type 13 has an invalid length.
[   84.358028][ T7426] netlink: 'syz.1.653': attribute type 12 has an invalid length.
[   84.458475][ T7436] netlink: 'syz.2.658': attribute type 5 has an invalid length.
[   84.608768][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'.
[   84.611785][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.666'.
[   84.620040][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.666'.
[   85.203744][ T7523] netlink: 'syz.2.697': attribute type 2 has an invalid length.
[   85.745190][ T7535] netlink: 'syz.0.702': attribute type 13 has an invalid length.
[   86.175112][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.177954][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.224843][ T7535] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.230755][ T7535] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.280002][ T7535] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.282659][ T7535] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.285298][ T7535] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.289050][ T7535] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.596627][ T7577] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[   86.910953][ T7604] raw_sendmsg: syz.2.732 forgot to set AF_INET. Fix it!
[   87.102288][ T7620] netlink: 'syz.0.740': attribute type 25 has an invalid length.
[   87.105607][ T7620] netlink: 'syz.0.740': attribute type 7 has an invalid length.
[   87.130766][ T7621] netlink: 'syz.2.739': attribute type 4 has an invalid length.
[   87.141723][ T7621] netlink: 'syz.2.739': attribute type 4 has an invalid length.
[   87.307540][ T7631] vlan3: entered promiscuous mode
[   87.309676][ T7631] bridge0: entered promiscuous mode
[   87.414716][ T7637] Cannot find del_set index 1 as target
[   88.162647][ T7680] __nla_validate_parse: 5 callbacks suppressed
[   88.162662][ T7680] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.768'.
[   88.170227][ T7680] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   88.173571][ T7680] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   88.323584][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'.
[   88.723719][ T7690] bridge0: port 3(batadv0) entered disabled state
[   88.730372][ T7690] bridge_slave_1: left allmulticast mode
[   88.732805][ T7690] bridge_slave_1: left promiscuous mode
[   88.734828][ T7690] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.739289][ T7690] bridge_slave_0: left allmulticast mode
[   88.741171][ T7690] bridge_slave_0: left promiscuous mode
[   88.743029][ T7690] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.814190][ T7695] netlink: 'syz.0.773': attribute type 5 has an invalid length.
[   88.959034][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'.
[   89.041868][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'.
[   89.044998][ T7708] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[   89.050813][ T7708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.085326][ T7712] xt_bpf: check failed: parse error
[   89.150697][ T7712] netlink: 'syz.0.780': attribute type 8 has an invalid length.
[   89.193322][ T7721] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[   89.245391][ T7727] Driver unsupported XDP return value 0 on prog  (id 159) dev N/A, expect packet loss!
[   89.443610][ T7752] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (192)
[   90.770660][ T7793] netlink: 'syz.1.810': attribute type 1 has an invalid length.
[   90.779247][ T7793] netlink: 224 bytes leftover after parsing attributes in process `syz.1.810'.
[   90.823487][ T7780] batman_adv: batadv0: Adding interface: ipvlan2
[   90.826170][ T7780] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.879328][ T7780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.883427][ T7780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.897445][ T7780] batman_adv: batadv0: Interface activated: ipvlan2
[   91.863672][ T7828] openvswitch: netlink: Missing valid actions attribute.
[   91.866307][ T7828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.945845][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'.
[   92.056597][ T7851] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   92.063239][ T7851] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   92.173959][ T7861] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.840'.
[   92.255627][ T7871] Cannot find add_set index 0 as target
[   92.366141][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'.
[   92.412450][ T7884] netlink: set zone limit has 8 unknown bytes
[   92.499403][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'.
[   92.525558][ T7890] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.854'.
[   93.465005][ T7909] veth0_to_bond: entered allmulticast mode
[   93.601057][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'.
[   93.907547][ T7958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.884'.
[   94.072018][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'.
[   94.113795][ T7980] netlink: 164 bytes leftover after parsing attributes in process `syz.1.895'.
[   94.634044][ T8026] syzkaller0: entered promiscuous mode
[   94.636363][ T8026] syzkaller0: entered allmulticast mode
[   95.696060][ T8045] netlink: 'syz.2.925': attribute type 5 has an invalid length.
[   95.776446][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[   95.784246][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[   95.787704][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[   95.791077][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[   95.797048][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[   95.800077][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[   95.802553][   T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3
[   95.811548][   T10] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[   96.433412][ T8037] netlink: 'syz.0.921': attribute type 4 has an invalid length.
[   96.479379][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.928'.
[   96.719680][ T8078] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.723099][ T8078] bridge0: port 1(bond1) entered blocking state
[   96.725748][ T8078] bridge0: port 1(bond1) entered disabled state
[   96.730283][ T8078] bond1: entered allmulticast mode
[   96.736653][ T8078] bond1: entered promiscuous mode
[   96.739714][ T8078] bridge0: port 1(bond1) entered blocking state
[   96.743198][ T8078] bridge0: port 1(bond1) entered forwarding state
[   96.769710][ T3604] bridge0: port 1(bond1) entered disabled state
[   96.777560][ T8078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.939'.
[   96.783913][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.939'.
[   96.797161][ T8078] team0: entered promiscuous mode
[   96.801187][ T8078] bond0: entered promiscuous mode
[   96.803554][ T8078] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network
[   96.806994][ T8078] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[   96.811379][ T8078] 8021q: adding VLAN 0 to HW filter on device hsr1
[   96.814012][ T8078] bridge0: port 2(hsr1) entered blocking state
[   96.816072][ T8078] bridge0: port 2(hsr1) entered disabled state
[   96.818469][ T8078] hsr1: entered allmulticast mode
[   96.820640][ T8078] team0: entered allmulticast mode
[   96.822462][ T8078] bond0: entered allmulticast mode
[   96.825097][ T8078] hsr1: entered promiscuous mode
[   96.889730][ T8092] ipt_rpfilter: unknown options
[   97.000156][ T8103] netlink: 'syz.0.951': attribute type 8 has an invalid length.
[   97.028979][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'.
[   97.066480][ T8113] netlink: 'syz.0.955': attribute type 2 has an invalid length.
[   97.072646][ T8113] netlink: 244 bytes leftover after parsing attributes in process `syz.0.955'.
[   97.100083][ T8117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.111538][ T8119] netlink: 'syz.0.958': attribute type 1 has an invalid length.
[   97.113995][ T8119] netlink: 232 bytes leftover after parsing attributes in process `syz.0.958'.
[   97.413713][ T5845] IPVS: starting estimator thread 0...
[   97.479290][ T8122] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.482528][ T8122] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.486171][ T8122] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.489635][ T8122] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.495335][ T8122] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   97.507803][ T8144] IPVS: using max 40 ests per chain, 96000 per kthread
[   97.529431][ T8146] netlink: 'syz.2.967': attribute type 3 has an invalid length.
[   97.954979][ T8174] ip6gre1: entered promiscuous mode
[   98.569319][ T8189] "syz.0.985" (8189) uses obsolete ecb(arc4) skcipher
[   98.615730][ T8198] __nla_validate_parse: 7 callbacks suppressed
[   98.615855][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'.
[   98.624782][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'.
[   98.638062][ T8198] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.642258][ T8198] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.646388][ T8198] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.650364][ T8198] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.454876][ T8239] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1004'.
[   99.819499][ T8268] sctp: [Deprecated]: syz.2.1019 (pid 8268) Use of int in max_burst socket option.
[   99.819499][ T8268] Use struct sctp_assoc_value instead
[   99.906759][ T8274] netlink: 'syz.2.1021': attribute type 10 has an invalid length.
[   99.923732][ T8274] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  100.083673][ T8291] netlink: 'syz.1.1029': attribute type 1 has an invalid length.
[  100.950257][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'.
[  101.163983][ T8424] netlink: 'syz.1.1085': attribute type 21 has an invalid length.
[  101.367813][ T8445] netlink: 'syz.1.1097': attribute type 14 has an invalid length.
[  101.378022][ T8447] netlink: 'syz.2.1096': attribute type 11 has an invalid length.
[  101.385042][ T8447] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1096'.
[  101.498361][ T8461] netlink: 'syz.1.1104': attribute type 10 has an invalid length.
[  101.509525][ T8461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1104'.
[  101.513321][ T8461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.516471][ T8461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.522540][ T8461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.526440][ T8461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.535471][ T8461] geneve0: entered promiscuous mode
[  101.537914][ T8461] geneve0: entered allmulticast mode
[  101.540695][ T8461] team0: Port device geneve0 added
[  101.576568][ T8467] bond0: entered promiscuous mode
[  101.579626][ T8467] bond_slave_0: entered promiscuous mode
[  101.582410][ T8467] bond_slave_1: entered promiscuous mode
[  101.587824][ T8467] team0: entered promiscuous mode
[  101.589487][ T8467] team_slave_0: entered promiscuous mode
[  101.591882][ T8467] team_slave_1: entered promiscuous mode
[  101.593761][ T8467] geneve0: entered promiscuous mode
[  101.601227][ T8467] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  101.605770][ T8467] Cannot create hsr debugfs directory
[  101.609479][ T8467] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  101.612916][ T8467] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  101.616227][ T8467] hsr1: entered allmulticast mode
[  101.619075][ T8467] bridge0: entered allmulticast mode
[  101.620809][ T8467] bond0: entered allmulticast mode
[  101.622470][ T8467] bond_slave_0: entered allmulticast mode
[  101.624318][ T8467] bond_slave_1: entered allmulticast mode
[  101.626287][ T8467] team0: entered allmulticast mode
[  101.628458][ T8467] team_slave_0: entered allmulticast mode
[  101.630433][ T8467] team_slave_1: entered allmulticast mode
[  101.632373][ T8467] geneve0: entered allmulticast mode
[  101.688394][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'.
[  101.692087][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'.
[  101.923264][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'.
[  102.009968][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'.
[  102.111335][ T5845] IPVS: starting estimator thread 0...
[  102.132321][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.135024][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.144053][ T8525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.162242][    C1] ------------[ cut here ]------------
[  102.164319][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  102.168266][    C1] WARNING: CPU: 1 PID: 8524 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  102.171674][    C1] Modules linked in:
[  102.173297][    C1] CPU: 1 UID: 0 PID: 8524 Comm: syz.1.1127 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  102.178376][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.181721][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  102.183814][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  102.190820][    C1] RSP: 0000:ffffc90002a0f698 EFLAGS: 00010246
[  102.192820][    C1] RAX: ee798ae1baee4200 RBX: 000000000000000c RCX: ffff888029288000
[  102.195443][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  102.198107][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  102.200728][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888031024928
[  102.203202][    C1] R13: 0000000000000000 R14: ffff8881246d8e40 R15: ffff8881246db0d8
[  102.205625][    C1] FS:  000055556be9c500(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  102.208571][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.210706][    C1] CR2: 00002000000054c0 CR3: 000000010939c000 CR4: 00000000000006f0
[  102.213354][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  102.215919][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  102.218636][    C1] Call Trace:
[  102.219740][    C1]  <TASK>
[  102.220858][    C1]  rate_control_send_low+0x194/0x7a0
[  102.222819][    C1]  rate_control_get_rate+0x20b/0x5d0
[  102.224486][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  102.226335][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  102.228387][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  102.230209][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  102.232052][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  102.233816][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  102.235622][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[  102.237475][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  102.239262][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  102.241063][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  102.243068][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  102.244836][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  102.247093][    C1]  __iterate_interfaces+0x2ab/0x590
[  102.248870][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  102.250915][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  102.253319][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  102.255288][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  102.257671][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  102.259433][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  102.261538][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  102.263446][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  102.265317][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  102.267448][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  102.269599][    C1]  handle_softirqs+0x286/0x870
[  102.271250][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  102.272889][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  102.274713][    C1]  __irq_exit_rcu+0xca/0x1f0
[  102.276289][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  102.278315][    C1]  irq_exit_rcu+0x9/0x30
[  102.279771][    C1]  sysvec_apic_timer_interrupt+0x57/0xc0
[  102.281790][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  102.283910][    C1] RIP: 0033:0x7f411ec6e926
[  102.285390][    C1] Code: 89 fb 48 89 d0 49 8d 14 d2 49 39 50 18 0f 82 b5 03 00 00 c6 44 24 1e 01 45 31 ff 45 31 f6 44 0f b6 e6 85 c0 0f 84 9e 00 00 00 <44> 89 f9 49 8b 50 30 4c 89 f0 49 03 14 ca 80 3d 6d 92 34 00 00 49
[  102.291895][    C1] RSP: 002b:00007ffc75b43b50 EFLAGS: 00000293
[  102.294097][    C1] RAX: 0000000000000001 RBX: 00007f411fae5720 RCX: ffffffff81d609ac
[  102.296854][    C1] RDX: 00000000000009ac RSI: ffffffff81d609ac RDI: 000000000000001b
[  102.299738][    C1] RBP: ffffffff81d609ac R08: 00007f411efb6038 R09: 00007f411efa2000
[  102.302759][    C1] R10: 00007f411e3ff008 R11: 000000000000001b R12: 000000000000001b
[  102.305336][    C1] R13: 0000000000000000 R14: ffffffff81d609ac R15: 0000000000011fb4
[  102.308000][    C1]  ? do_check+0x13ec/0xd450
[  102.309600][    C1]  ? do_check+0x13ec/0xd450
[  102.311227][    C1]  ? do_check+0x13ec/0xd450
[  102.312706][    C1]  ? do_check+0x13ec/0xd450
[  102.314188][    C1]  </TASK>
[  102.315200][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  102.317463][    C1] CPU: 1 UID: 0 PID: 8524 Comm: syz.1.1127 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  102.321795][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.325187][    C1] Call Trace:
[  102.326348][    C1]  <TASK>
[  102.327435][    C1]  dump_stack_lvl+0x99/0x250
[  102.329080][    C1]  ? __asan_memcpy+0x40/0x70
[  102.330726][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.332472][    C1]  ? __pfx__printk+0x10/0x10
[  102.334031][    C1]  panic+0x2db/0x790
[  102.335361][    C1]  ? __pfx_panic+0x10/0x10
[  102.336907][    C1]  ? do_check+0x13ec/0xd450
[  102.338462][    C1]  __warn+0x31b/0x4b0
[  102.339788][    C1]  ? __rate_control_send_low+0x5df/0x820
[  102.341949][    C1]  ? __rate_control_send_low+0x5df/0x820
[  102.343731][    C1]  report_bug+0x2be/0x4f0
[  102.345143][    C1]  ? __rate_control_send_low+0x5df/0x820
[  102.347024][    C1]  ? __rate_control_send_low+0x5df/0x820
[  102.348977][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  102.351304][    C1]  handle_bug+0x84/0x160
[  102.352782][    C1]  exc_invalid_op+0x1a/0x50
[  102.354454][    C1]  asm_exc_invalid_op+0x1a/0x20
[  102.356082][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  102.358363][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  102.364787][    C1] RSP: 0000:ffffc90002a0f698 EFLAGS: 00010246
[  102.366773][    C1] RAX: ee798ae1baee4200 RBX: 000000000000000c RCX: ffff888029288000
[  102.369714][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  102.372214][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  102.374734][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888031024928
[  102.377207][    C1] R13: 0000000000000000 R14: ffff8881246d8e40 R15: ffff8881246db0d8
[  102.379858][    C1]  ? __rate_control_send_low+0x5de/0x820
[  102.381712][    C1]  rate_control_send_low+0x194/0x7a0
[  102.383459][    C1]  rate_control_get_rate+0x20b/0x5d0
[  102.385103][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  102.387075][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  102.389626][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  102.391487][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  102.393409][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  102.395216][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  102.397053][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[  102.398816][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  102.400740][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  102.402452][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  102.404353][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  102.406096][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  102.408831][    C1]  __iterate_interfaces+0x2ab/0x590
[  102.410657][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  102.412623][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  102.415183][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  102.417181][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  102.419392][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  102.421215][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  102.423117][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  102.424806][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  102.426594][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  102.428994][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  102.431128][    C1]  handle_softirqs+0x286/0x870
[  102.433150][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  102.434840][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  102.436494][    C1]  __irq_exit_rcu+0xca/0x1f0
[  102.438114][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  102.439780][    C1]  irq_exit_rcu+0x9/0x30
[  102.441166][    C1]  sysvec_apic_timer_interrupt+0x57/0xc0
[  102.442969][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  102.444833][    C1] RIP: 0033:0x7f411ec6e926
[  102.446225][    C1] Code: 89 fb 48 89 d0 49 8d 14 d2 49 39 50 18 0f 82 b5 03 00 00 c6 44 24 1e 01 45 31 ff 45 31 f6 44 0f b6 e6 85 c0 0f 84 9e 00 00 00 <44> 89 f9 49 8b 50 30 4c 89 f0 49 03 14 ca 80 3d 6d 92 34 00 00 49
[  102.452678][    C1] RSP: 002b:00007ffc75b43b50 EFLAGS: 00000293
[  102.454632][    C1] RAX: 0000000000000001 RBX: 00007f411fae5720 RCX: ffffffff81d609ac
[  102.457310][    C1] RDX: 00000000000009ac RSI: ffffffff81d609ac RDI: 000000000000001b
[  102.459790][    C1] RBP: ffffffff81d609ac R08: 00007f411efb6038 R09: 00007f411efa2000
[  102.462210][    C1] R10: 00007f411e3ff008 R11: 000000000000001b R12: 000000000000001b
[  102.464801][    C1] R13: 0000000000000000 R14: ffffffff81d609ac R15: 0000000000011fb4
[  102.467453][    C1]  ? do_check+0x13ec/0xd450
[  102.469338][    C1]  ? do_check+0x13ec/0xd450
[  102.470980][    C1]  ? do_check+0x13ec/0xd450
[  102.472408][    C1]  ? do_check+0x13ec/0xd450
[  102.473930][    C1]  </TASK>
[  102.475655][    C1] Kernel Offset: disabled
[  102.477142][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:20:05  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff1c2884e RBX=ffff888035e11c08 RCX=ffff888108b31cc0 RDX=0000000000000000
RSI=ffffffff8be28d20 RDI=ffff88804b03afa8 RBP=ffffc900029af090 RSP=ffffc900029aef60
R8 =ffffffff8fa10cf7 R9 =1ffffffff1f4219e R10=dffffc0000000000 R11=fffffbfff1f4219f
R12=dffffc0000000000 R13=1ffff92000535dfc R14=0000000000000001 R15=ffffffff8e144270
RIP=ffffffff81a730a7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5016a72380 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5016bdcfe4 CR3=0000000035bf2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000ff00 0000000000000000 XMM01=ffffffffffff00ff ffffffffffffffff
XMM02=5f4342494c470033 2e325f4342494c47 XMM03=0000000000000000 00005f6570797463
XMM04=695f796669746f6e 616600636f6c5f62 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33b9260 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dc99f0 RSP=ffffc90002a0edd0
R8 =ffff888020d80237 R9 =1ffff110041b0046 R10=dffffc0000000000 R11=ffffffff85474540
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff854745b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556be9c500 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000054c0 CR3=000000010939c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=05371b19c2c70625 352231af1239d84b XMM03=00005b56d308606d 889391c9e15c3a11
XMM04=1c00000000000000 0000000000000000 XMM05=2ff1d4f93843e7ba 48aebbae5c26de6b
XMM06=9c179dc9d5e07b36 8db3d2e199b23886 XMM07=87e9ea924713939e 59b6170f2c540f79
XMM08=314ea05c7875c10f 261c000000000000 XMM09=0000000000000000 00007f411ee11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
