last executing test programs:

1.840211249s ago: executing program 2 (id=221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)

1.788398839s ago: executing program 2 (id=222):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0x8)

1.787946546s ago: executing program 2 (id=223):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES64=r1], 0x4)

1.660449684s ago: executing program 2 (id=224):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000740)="d4", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000b80)='\a', 0x1}], 0x1}}], 0x2, 0x4000050)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

1.660136594s ago: executing program 2 (id=225):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000", 0x8}, {&(0x7f00000000c0)="a14711fe9ab102c76fb2e1cf1fc0ad12", 0x10}], 0x2}, 0x400c010)

1.659806973s ago: executing program 2 (id=226):
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x4}, 0x1})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r11, &(0x7f0000000000)="2a000200010078", 0x7)
connect$rose(r10, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

1.00024664s ago: executing program 0 (id=238):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10)
readv(0xffffffffffffffff, 0x0, 0x0)

948.560531ms ago: executing program 0 (id=240):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats})

948.450477ms ago: executing program 1 (id=241):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001200010400000000000000000a00000008000200", @ANYRES32, @ANYBLOB="0c000080080031"], 0x28}}, 0x0)

948.148466ms ago: executing program 0 (id=242):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r3, 0x0)

877.625028ms ago: executing program 1 (id=243):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

877.438666ms ago: executing program 0 (id=244):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

877.328037ms ago: executing program 1 (id=245):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005210100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001"], 0x80}}, 0x0)

810.734592ms ago: executing program 1 (id=246):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0xfffffffffffffe08, 0x0}, 0x10)

810.441619ms ago: executing program 1 (id=247):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x178, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x148, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xfc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x5, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x47, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x5, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x0)

379.748µs ago: executing program 0 (id=248):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r2, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0)

138.032µs ago: executing program 1 (id=249):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

0s ago: executing program 0 (id=250):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(r2, 0x10000)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r1, 0x204)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:12602' (ED25519) to the list of known hosts.
syzkaller login: [   40.795085][ T5778] cgroup: Unknown subsys name 'net'
[   40.878326][ T5778] cgroup: Unknown subsys name 'cpuset'
[   40.882201][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.134491][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.404657][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.408563][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.411438][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.414498][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.417694][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.420600][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.423214][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.426052][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.447144][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.450288][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.472167][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.476131][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.481903][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.484676][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.487496][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.678638][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   45.703417][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   45.798999][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   45.829373][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.832498][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.835062][ T5842] bridge_slave_0: entered allmulticast mode
[   45.837956][ T5842] bridge_slave_0: entered promiscuous mode
[   45.846074][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.848356][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.850641][ T5842] bridge_slave_1: entered allmulticast mode
[   45.853990][ T5842] bridge_slave_1: entered promiscuous mode
[   45.895055][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.897480][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.899797][ T5846] bridge_slave_0: entered allmulticast mode
[   45.903556][ T5846] bridge_slave_0: entered promiscuous mode
[   45.917874][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.920923][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.924178][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.926544][ T5846] bridge_slave_1: entered allmulticast mode
[   45.929246][ T5846] bridge_slave_1: entered promiscuous mode
[   45.945692][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.966955][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.986826][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.989939][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.993725][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.996886][ T5852] bridge_slave_0: entered allmulticast mode
[   46.000153][ T5852] bridge_slave_0: entered promiscuous mode
[   46.027399][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.029735][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.032398][ T5852] bridge_slave_1: entered allmulticast mode
[   46.035115][ T5852] bridge_slave_1: entered promiscuous mode
[   46.046970][ T5842] team0: Port device team_slave_0 added
[   46.050052][ T5846] team0: Port device team_slave_0 added
[   46.063116][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.066998][ T5842] team0: Port device team_slave_1 added
[   46.069990][ T5846] team0: Port device team_slave_1 added
[   46.073668][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.107053][ T5852] team0: Port device team_slave_0 added
[   46.110412][ T5852] team0: Port device team_slave_1 added
[   46.128871][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.131169][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.139958][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.153532][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.156117][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.165431][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.170189][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.172766][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.181054][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.197428][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.199732][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.209089][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.226508][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.228895][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.238334][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.257753][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.260160][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.268581][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.285539][ T5846] hsr_slave_0: entered promiscuous mode
[   46.288399][ T5846] hsr_slave_1: entered promiscuous mode
[   46.294225][ T5842] hsr_slave_0: entered promiscuous mode
[   46.297158][ T5842] hsr_slave_1: entered promiscuous mode
[   46.299436][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   46.301600][ T5842] Cannot create hsr debugfs directory
[   46.377073][ T5852] hsr_slave_0: entered promiscuous mode
[   46.379571][ T5852] hsr_slave_1: entered promiscuous mode
[   46.382292][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   46.384169][ T5852] Cannot create hsr debugfs directory
[   46.538223][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.549275][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.559682][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.569651][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.602509][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.608894][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.613569][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.619079][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.673105][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.681521][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.690979][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.701525][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.760354][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.787022][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.802315][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   46.809347][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   46.824237][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.826778][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.835319][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.841689][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.844213][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.850959][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.853377][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.868036][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.870396][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.877249][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   46.892825][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.895185][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.915790][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.918127][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.949669][ T5842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.953959][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.072935][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.117412][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.131378][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.147080][ T5846] veth0_vlan: entered promiscuous mode
[   47.174528][ T5846] veth1_vlan: entered promiscuous mode
[   47.190806][ T5852] veth0_vlan: entered promiscuous mode
[   47.206047][ T5842] veth0_vlan: entered promiscuous mode
[   47.218595][ T5852] veth1_vlan: entered promiscuous mode
[   47.224133][ T5846] veth0_macvtap: entered promiscuous mode
[   47.228897][ T5842] veth1_vlan: entered promiscuous mode
[   47.234241][ T5846] veth1_macvtap: entered promiscuous mode
[   47.253391][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.259704][ T5852] veth0_macvtap: entered promiscuous mode
[   47.271083][ T5852] veth1_macvtap: entered promiscuous mode
[   47.280756][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.288778][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.298905][ T5842] veth0_macvtap: entered promiscuous mode
[   47.302658][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.310980][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.313960][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.316768][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.320143][ T5842] veth1_macvtap: entered promiscuous mode
[   47.343663][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.367655][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.374030][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.380412][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.385810][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.389166][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.397184][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.427992][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.432664][ T3051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.435249][ T3051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.441525][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.446501][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.455405][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.492755][ T5850] Bluetooth: hci0: command tx timeout
[   47.499907][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.502600][ T5850] Bluetooth: hci1: command tx timeout
[   47.509186][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.532829][ T3051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.535289][ T3051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.567440][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.572403][ T5850] Bluetooth: hci2: command tx timeout
[   47.573932][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.576878][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.599445][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.610504][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.622644][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.625179][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.666643][ T5916] syz_tun: entered promiscuous mode
[   47.668475][ T5916] macsec1: entered allmulticast mode
[   47.670266][ T5916] syz_tun: entered allmulticast mode
[   47.682424][ T5916] syz_tun: left allmulticast mode
[   47.684145][ T5916] syz_tun: left promiscuous mode
[   47.735881][ T5922] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1'.
[   47.739139][ T5922] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   47.742295][ T5922] openvswitch: netlink: Message has 1 unknown bytes.
[   47.863316][ T5935] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.868244][ T5935] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[   47.935058][ T5940] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   47.999145][ T5944] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   48.015683][ T5936] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   48.024070][ T5936] syzkaller1: entered allmulticast mode
[   48.556567][ T5983] syzkaller0: entered promiscuous mode
[   48.558704][ T5983] syzkaller0: entered allmulticast mode
[   48.872738][ T6011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   48.925860][ T6016] netlink: 'syz.2.43': attribute type 12 has an invalid length.
[   48.993961][ T6009] netlink: 'syz.0.40': attribute type 1 has an invalid length.
[   48.997011][ T6009] netlink: 232 bytes leftover after parsing attributes in process `syz.0.40'.
[   49.003627][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'.
[   49.129954][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.148163][ T6036] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003
[   49.200038][ T6038] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.290358][ T6048] sctp: [Deprecated]: syz.0.54 (pid 6048) Use of int in maxseg socket option.
[   49.290358][ T6048] Use struct sctp_assoc_value instead
[   49.317416][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'.
[   49.358447][ T6050] Zero length message leads to an empty skb
[   49.420225][ T6063] netlink: 240 bytes leftover after parsing attributes in process `syz.1.60'.
[   49.491264][ T6069] TCP: TCP_TX_DELAY enabled
[   49.572028][ T5850] Bluetooth: hci1: command tx timeout
[   49.573954][ T5237] Bluetooth: hci0: command tx timeout
[   49.651968][ T5237] Bluetooth: hci2: command tx timeout
[   49.842971][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'.
[   49.867537][ T6093] bridge_slave_1: left allmulticast mode
[   49.870132][ T6093] bridge_slave_1: left promiscuous mode
[   49.874295][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.882277][ T6093] bridge_slave_0: left allmulticast mode
[   49.887917][ T6093] bridge_slave_0: left promiscuous mode
[   49.890046][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.932421][ T6097] netlink: 92 bytes leftover after parsing attributes in process `syz.1.76'.
[   50.078971][ T6106] netlink: 'syz.1.80': attribute type 11 has an invalid length.
[   50.231615][ T6118] netlink: 60 bytes leftover after parsing attributes in process `syz.1.86'.
[   50.235484][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.86'.
[   50.314265][ T6038] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.366450][ T6038] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.539342][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.549239][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.561355][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.569193][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.636955][ T6143] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.772698][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'.
[   51.579192][ T6211] vlan2: entered promiscuous mode
[   51.580861][ T6211] bond0: entered promiscuous mode
[   51.596834][ T6211] bond_slave_0: entered promiscuous mode
[   51.598774][ T6211] bond_slave_1: entered promiscuous mode
[   51.652413][ T5237] Bluetooth: hci0: command tx timeout
[   51.665550][ T5237] Bluetooth: hci1: command tx timeout
[   51.731906][ T5237] Bluetooth: hci2: command tx timeout
[   51.749610][ T5883] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.795555][ T6222] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.860324][ T6222] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.911090][ T6222] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.052421][ T5883] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.061436][ T5883] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.073802][ T5883] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.082372][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.211149][ T6238] netlink: 'syz.0.140': attribute type 5 has an invalid length.
[   52.419838][  T792] cfg80211: failed to load regulatory.db
[   52.605247][ T6258] tipc: Started in network mode
[   52.606928][ T6258] tipc: Node identity 76f2611bbea9, cluster identity 4711
[   52.609218][ T6258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.612997][ T6258] syzkaller0: entered promiscuous mode
[   52.614754][ T6258] syzkaller0: entered allmulticast mode
[   52.639112][ T6258] tipc: Resetting bearer <eth:syzkaller0>
[   52.648299][ T6256] tipc: Resetting bearer <eth:syzkaller0>
[   52.657857][ T6256] tipc: Disabling bearer <eth:syzkaller0>
[   52.914797][ T6276] __nla_validate_parse: 2 callbacks suppressed
[   52.914835][ T6276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.155'.
[   53.114460][ T6293] dvmrp1: tun_chr_ioctl cmd 1074025677
[   53.116432][ T6293] dvmrp1: linktype set to 805
[   53.527605][ T6321] sctp: [Deprecated]: syz.1.174 (pid 6321) Use of struct sctp_assoc_value in delayed_ack socket option.
[   53.527605][ T6321] Use struct sctp_sack_info instead
[   53.741875][ T5850] Bluetooth: hci0: command tx timeout
[   53.744063][ T5237] Bluetooth: hci1: command tx timeout
[   53.821820][ T5237] Bluetooth: hci2: command tx timeout
[   54.032898][ T6344] netlink: 'syz.1.185': attribute type 5 has an invalid length.
[   54.125423][ T6354] tipc: Started in network mode
[   54.127068][ T6354] tipc: Node identity b66a9a243dba, cluster identity 4711
[   54.129576][ T6354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.133310][ T6354] syzkaller0: entered promiscuous mode
[   54.135082][ T6354] syzkaller0: entered allmulticast mode
[   54.147951][ T6354] tipc: Resetting bearer <eth:syzkaller0>
[   54.150846][ T6353] tipc: Resetting bearer <eth:syzkaller0>
[   54.159823][ T6353] tipc: Disabling bearer <eth:syzkaller0>
[   54.751814][ T5884] IPVS: starting estimator thread 0...
[   54.841910][ T6390] IPVS: using max 78 ests per chain, 187200 per kthread
[   54.920092][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'.
[   54.988620][ T6406] team_slave_0: entered promiscuous mode
[   54.991376][ T6406] team_slave_1: entered promiscuous mode
[   54.993863][ T6406] vlan3: entered promiscuous mode
[   54.995934][ T6406] team0: entered promiscuous mode
[   55.500554][ T6427] sctp: [Deprecated]: syz.2.222 (pid 6427) Use of struct sctp_assoc_value in delayed_ack socket option.
[   55.500554][ T6427] Use struct sctp_sack_info instead
[   55.695763][ T6439] Bluetooth: MGMT ver 1.23
[   56.012321][ T6443] Unsupported ieee802154 address type: 0
[   56.250966][ T6457] netlink: 'syz.1.234': attribute type 13 has an invalid length.
[   56.259187][ T6457] netlink: 'syz.1.234': attribute type 17 has an invalid length.
[   56.267762][ T6457] netlink: 'syz.1.234': attribute type 27 has an invalid length.
[   56.298397][ T6463] netlink: 'syz.1.236': attribute type 23 has an invalid length.
[   56.441564][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'.
[   56.490296][ T6483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'.
[   57.332915][ T6439] ==================================================================
[   57.335538][ T6439] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[   57.338220][ T6439] Read of size 1 at addr ffff88810929ac32 by task syz.2.226/6439
[   57.341454][ T6439] 
[   57.342228][ T6439] CPU: 1 UID: 0 PID: 6439 Comm: syz.2.226 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   57.342244][ T6439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   57.342249][ T6439] Call Trace:
[   57.342253][ T6439]  <TASK>
[   57.342256][ T6439]  dump_stack_lvl+0x189/0x250
[   57.342268][ T6439]  ? __virt_addr_valid+0x1c8/0x5c0
[   57.342278][ T6439]  ? rcu_is_watching+0x15/0xb0
[   57.342285][ T6439]  ? __kasan_check_byte+0x12/0x40
[   57.342295][ T6439]  ? __pfx_dump_stack_lvl+0x10/0x10
[   57.342303][ T6439]  ? rcu_is_watching+0x15/0xb0
[   57.342309][ T6439]  ? lock_release+0x4b/0x3e0
[   57.342320][ T6439]  ? __virt_addr_valid+0x1c8/0x5c0
[   57.342328][ T6439]  ? __virt_addr_valid+0x4a5/0x5c0
[   57.342338][ T6439]  print_report+0xca/0x240
[   57.342344][ T6439]  ? rose_transmit_link+0x5c3/0x740
[   57.342355][ T6439]  kasan_report+0x118/0x150
[   57.342363][ T6439]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   57.342374][ T6439]  ? rose_transmit_link+0x5c3/0x740
[   57.342385][ T6439]  rose_transmit_link+0x5c3/0x740
[   57.342396][ T6439]  ? skb_put+0x11b/0x210
[   57.342406][ T6439]  rose_write_internal+0x11dc/0x1ac0
[   57.342416][ T6439]  ? __pfx_rose_write_internal+0x10/0x10
[   57.342423][ T6439]  ? __timer_delete+0x5d/0x390
[   57.342434][ T6439]  rose_release+0x24e/0x520
[   57.342443][ T6439]  sock_close+0xc3/0x240
[   57.342450][ T6439]  ? __pfx_sock_close+0x10/0x10
[   57.342456][ T6439]  __fput+0x44c/0xa70
[   57.342466][ T6439]  task_work_run+0x1d4/0x260
[   57.342476][ T6439]  ? __pfx_task_work_run+0x10/0x10
[   57.342485][ T6439]  ? task_work_add+0x377/0x420
[   57.342494][ T6439]  ? __pfx_task_work_add+0x10/0x10
[   57.342503][ T6439]  get_signal+0x11ed/0x1340
[   57.342512][ T6439]  arch_do_signal_or_restart+0x9a/0x750
[   57.342523][ T6439]  ? __pfx___sys_connect+0x10/0x10
[   57.342532][ T6439]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   57.342545][ T6439]  ? exit_to_user_mode_loop+0x40/0x110
[   57.342555][ T6439]  exit_to_user_mode_loop+0x75/0x110
[   57.342564][ T6439]  do_syscall_64+0x2bd/0x3b0
[   57.342573][ T6439]  ? lockdep_hardirqs_on+0x9c/0x150
[   57.342581][ T6439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.342588][ T6439]  ? exc_page_fault+0x9f/0xf0
[   57.342596][ T6439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.342603][ T6439] RIP: 0033:0x7f520a38ebe9
[   57.342610][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.342616][ T6439] RSP: 002b:00007f520b285038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   57.342625][ T6439] RAX: fffffffffffffe00 RBX: 00007f520a5b5fa0 RCX: 00007f520a38ebe9
[   57.342630][ T6439] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000010
[   57.342635][ T6439] RBP: 00007f520a411e19 R08: 0000000000000000 R09: 0000000000000000
[   57.342639][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.342644][ T6439] R13: 00007f520a5b6038 R14: 00007f520a5b5fa0 R15: 00007ffda7681718
[   57.342651][ T6439]  </TASK>
[   57.342654][ T6439] 
[   57.441509][ T6439] Allocated by task 6439:
[   57.442943][ T6439]  kasan_save_track+0x3e/0x80
[   57.444495][ T6439]  __kasan_kmalloc+0x93/0xb0
[   57.446007][ T6439]  __kmalloc_cache_noprof+0x230/0x3d0
[   57.447744][ T6439]  rose_add_node+0x23a/0xde0
[   57.449341][ T6439]  rose_rt_ioctl+0xa48/0xfb0
[   57.450827][ T6439]  rose_ioctl+0x3ce/0x8b0
[   57.452179][ T6439]  sock_do_ioctl+0xdc/0x300
[   57.453879][ T6439]  sock_ioctl+0x576/0x790
[   57.455299][ T6439]  __se_sys_ioctl+0xfc/0x170
[   57.456840][ T6439]  do_syscall_64+0xfa/0x3b0
[   57.458441][ T6439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.460568][ T6439] 
[   57.461336][ T6439] Freed by task 6449:
[   57.462612][ T6439]  kasan_save_track+0x3e/0x80
[   57.464165][ T6439]  kasan_save_free_info+0x46/0x50
[   57.465805][ T6439]  __kasan_slab_free+0x5b/0x80
[   57.467372][ T6439]  kfree+0x18e/0x440
[   57.468862][ T6439]  rose_rt_device_down+0x473/0x4c0
[   57.470566][ T6439]  rose_device_event+0x603/0x6a0
[   57.472191][ T6439]  notifier_call_chain+0x1b6/0x3e0
[   57.473869][ T6439]  __dev_notify_flags+0x18d/0x2e0
[   57.475501][ T6439]  netif_change_flags+0xe8/0x1a0
[   57.477133][ T6439]  dev_change_flags+0x130/0x260
[   57.478936][ T6439]  dev_ioctl+0x7b4/0x1150
[   57.480585][ T6439]  sock_do_ioctl+0x22c/0x300
[   57.482120][ T6439]  sock_ioctl+0x576/0x790
[   57.483529][ T6439]  __se_sys_ioctl+0xfc/0x170
[   57.485014][ T6439]  do_syscall_64+0xfa/0x3b0
[   57.486504][ T6439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.488527][ T6439] 
[   57.489417][ T6439] The buggy address belongs to the object at ffff88810929ac00
[   57.489417][ T6439]  which belongs to the cache kmalloc-512 of size 512
[   57.493922][ T6439] The buggy address is located 50 bytes inside of
[   57.493922][ T6439]  freed 512-byte region [ffff88810929ac00, ffff88810929ae00)
[   57.498385][ T6439] 
[   57.499427][ T6439] The buggy address belongs to the physical page:
[   57.501531][ T6439] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109298
[   57.504400][ T6439] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   57.507121][ T6439] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   57.509816][ T6439] page_type: f5(slab)
[   57.511135][ T6439] raw: 057ff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[   57.513891][ T6439] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   57.516636][ T6439] head: 057ff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[   57.519781][ T6439] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   57.522622][ T6439] head: 057ff00000000002 ffffea000424a601 00000000ffffffff 00000000ffffffff
[   57.525414][ T6439] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   57.528070][ T6439] page dumped because: kasan: bad access detected
[   57.530166][ T6439] page_owner tracks the page as allocated
[   57.531946][ T6439] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5872, tgid 5872 (kworker/u8:2), ts 47005080888, free_ts 46939757924
[   57.538921][ T6439]  post_alloc_hook+0x240/0x2a0
[   57.540655][ T6439]  get_page_from_freelist+0x21e4/0x22c0
[   57.542454][ T6439]  __alloc_frozen_pages_noprof+0x181/0x370
[   57.544348][ T6439]  alloc_pages_mpol+0x232/0x4a0
[   57.545969][ T6439]  allocate_slab+0x8a/0x370
[   57.547458][ T6439]  ___slab_alloc+0xbeb/0x1410
[   57.549065][ T6439]  __kmalloc_cache_noprof+0x296/0x3d0
[   57.550863][ T6439]  __ipv6_dev_mc_inc+0x44f/0xa50
[   57.552473][ T6439]  addrconf_dad_work+0x3d0/0x14b0
[   57.554112][ T6439]  process_scheduled_works+0xae1/0x17b0
[   57.556037][ T6439]  worker_thread+0x8a0/0xda0
[   57.557554][ T6439]  kthread+0x711/0x8a0
[   57.559184][ T6439]  ret_from_fork+0x3fc/0x770
[   57.560907][ T6439]  ret_from_fork_asm+0x1a/0x30
[   57.562482][ T6439] page last free pid 27 tgid 27 stack trace:
[   57.564401][ T6439]  __free_frozen_pages+0xbc4/0xd30
[   57.566039][ T6439]  __slab_free+0x303/0x3c0
[   57.567461][ T6439]  qlist_free_all+0x97/0x140
[   57.569116][ T6439]  kasan_quarantine_reduce+0x148/0x160
[   57.570950][ T6439]  __kasan_slab_alloc+0x22/0x80
[   57.572546][ T6439]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[   57.574443][ T6439]  __alloc_skb+0x112/0x2d0
[   57.575919][ T6439]  rtmsg_ifinfo_build_skb+0x84/0x260
[   57.577639][ T6439]  rtnetlink_event+0x1b7/0x270
[   57.579561][ T6439]  notifier_call_chain+0x1b6/0x3e0
[   57.581276][ T6439]  netdev_lower_state_changed+0xc6/0x140
[   57.583104][ T6439]  __team_port_change_send+0x1cc/0x4f0
[   57.584890][ T6439]  team_port_change_check+0x92/0x210
[   57.586608][ T6439]  team_device_event+0x49b/0x600
[   57.588304][ T6439]  notifier_call_chain+0x1b6/0x3e0
[   57.590020][ T6439]  netif_state_change+0x284/0x3a0
[   57.591695][ T6439] 
[   57.592495][ T6439] Memory state around the buggy address:
[   57.594324][ T6439]  ffff88810929ab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   57.596917][ T6439]  ffff88810929ab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   57.599849][ T6439] >ffff88810929ac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   57.602473][ T6439]                                      ^
[   57.604297][ T6439]  ffff88810929ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   57.606897][ T6439]  ffff88810929ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   57.609564][ T6439] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   57.663207][ T6439] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   57.665644][ T6439] CPU: 0 UID: 0 PID: 6439 Comm: syz.2.226 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   57.669687][ T6439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   57.673120][ T6439] Call Trace:
[   57.674254][ T6439]  <TASK>
[   57.675236][ T6439]  dump_stack_lvl+0x99/0x250
[   57.676774][ T6439]  ? __asan_memcpy+0x40/0x70
[   57.678318][ T6439]  ? __pfx_dump_stack_lvl+0x10/0x10
[   57.680047][ T6439]  ? __pfx__printk+0x10/0x10
[   57.681588][ T6439]  vpanic+0x281/0x750
[   57.682925][ T6439]  ? irqentry_exit+0x74/0x90
[   57.684460][ T6439]  ? __pfx_vpanic+0x10/0x10
[   57.685989][ T6439]  ? preempt_schedule_common+0x83/0xd0
[   57.687780][ T6439]  ? preempt_schedule+0xae/0xc0
[   57.689379][ T6439]  panic+0xb9/0xc0
[   57.690622][ T6439]  ? __pfx_panic+0x10/0x10
[   57.692040][ T6439]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   57.694092][ T6439]  ? rose_transmit_link+0x5c3/0x740
[   57.695825][ T6439]  check_panic_on_warn+0x89/0xb0
[   57.697464][ T6439]  ? rose_transmit_link+0x5c3/0x740
[   57.699178][ T6439]  end_report+0x78/0x160
[   57.700583][ T6439]  kasan_report+0x129/0x150
[   57.702100][ T6439]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   57.704110][ T6439]  ? rose_transmit_link+0x5c3/0x740
[   57.705832][ T6439]  rose_transmit_link+0x5c3/0x740
[   57.707489][ T6439]  ? skb_put+0x11b/0x210
[   57.708904][ T6439]  rose_write_internal+0x11dc/0x1ac0
[   57.710657][ T6439]  ? __pfx_rose_write_internal+0x10/0x10
[   57.712511][ T6439]  ? __timer_delete+0x5d/0x390
[   57.714076][ T6439]  rose_release+0x24e/0x520
[   57.715581][ T6439]  sock_close+0xc3/0x240
[   57.717002][ T6439]  ? __pfx_sock_close+0x10/0x10
[   57.718609][ T6439]  __fput+0x44c/0xa70
[   57.719947][ T6439]  task_work_run+0x1d4/0x260
[   57.721474][ T6439]  ? __pfx_task_work_run+0x10/0x10
[   57.723176][ T6439]  ? task_work_add+0x377/0x420
[   57.724750][ T6439]  ? __pfx_task_work_add+0x10/0x10
[   57.726454][ T6439]  get_signal+0x11ed/0x1340
[   57.727978][ T6439]  arch_do_signal_or_restart+0x9a/0x750
[   57.729815][ T6439]  ? __pfx___sys_connect+0x10/0x10
[   57.731507][ T6439]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   57.733536][ T6439]  ? exit_to_user_mode_loop+0x40/0x110
[   57.735332][ T6439]  exit_to_user_mode_loop+0x75/0x110
[   57.737066][ T6439]  do_syscall_64+0x2bd/0x3b0
[   57.738596][ T6439]  ? lockdep_hardirqs_on+0x9c/0x150
[   57.740314][ T6439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.742306][ T6439]  ? exc_page_fault+0x9f/0xf0
[   57.743891][ T6439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.745830][ T6439] RIP: 0033:0x7f520a38ebe9
[   57.747301][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.753529][ T6439] RSP: 002b:00007f520b285038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   57.756249][ T6439] RAX: fffffffffffffe00 RBX: 00007f520a5b5fa0 RCX: 00007f520a38ebe9
[   57.758847][ T6439] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000010
[   57.761429][ T6439] RBP: 00007f520a411e19 R08: 0000000000000000 R09: 0000000000000000
[   57.764027][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.766575][ T6439] R13: 00007f520a5b6038 R14: 00007f520a5b5fa0 R15: 00007ffda7681718
[   57.769171][ T6439]  </TASK>
[   57.770858][ T6439] Kernel Offset: disabled
[   57.772286][ T6439] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:53:08  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44d6b RBX=1ffff11026cc7f61 RCX=ffff88802fcc8000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900047df4c0 RSP=ffffc900047df340
R8 =ffffffff8fa34737 R9 =1ffffffff1f468e6 R10=dffffc0000000000 R11=fffffbfff1f468e7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44d53 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 306974765f367069
XMM02=00007f7887d87498 00007f7887d87470 XMM03=00007f7887d874a8 00007f7887d874a0
XMM04=00007f78888ed100 00007f7887d87460 XMM05=00007f7887d87478 00007f7887d874c0
XMM06=00007f7887d874b8 00007f7887d874b0 XMM07=00007f7887d874a8 00007f7887d874a0
XMM08=0000000000000000 00007f7887c12ee7 XMM09=0000000000000000 00007f7887c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015b9 RDI=00000000000015ba RBP=00000000000003f8 RSP=ffffc90003dbf210
R8 =ffff88801e800237 R9 =1ffff11003d00046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48f2 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f520b2856c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f01bfdacfc8 CR3=0000000112b38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c57e ffffffff8133c57e
XMM02=ffffffff89570434 ffffffff8133c57e XMM03=ffffffff823c7954 ffffffff823c77ed
XMM04=ffffffff823c7954 ffffffff823c77ed XMM05=ffffffff823c6e8c ffffffff823c6e04
XMM06=ffffffff823c6b42 ffffffff823c6aee XMM07=ffffffff823913c5 ffffffff82391378
XMM08=0000000000000000 00007f520a412ee7 XMM09=0000000000000000 00007f520a412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
