last executing test programs:

1.563335119s ago: executing program 0 (id=875):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
unshare(0x24040400)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0xfffffffffffffd20}, 0x10)

1.49279178s ago: executing program 0 (id=876):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC], 0x27)

1.423127094s ago: executing program 0 (id=877):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x1400c004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)

1.12563074s ago: executing program 0 (id=878):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmmsg$sock(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x2004000c)

361.108267ms ago: executing program 2 (id=900):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x5, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x3}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x83, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000240)={0x10})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000800)={0xa0000006})
close(r1)

242.542722ms ago: executing program 1 (id=903):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="183f000000000000000000000000000004000000f0ffffffc3a20000a10000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f00000002c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x28}, 0x22)

242.034468ms ago: executing program 1 (id=904):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
socket$alg(0x26, 0x5, 0x0)
socket(0x1, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x3, 0x2, 0x4e, @local, @loopback, 0x10, 0x40, 0x0, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080))
syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000)
epoll_create1(0x0)
epoll_create1(0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0)

233.695053ms ago: executing program 2 (id=905):
openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0)
getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300"], 0x48}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r3, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f00"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)

172.847371ms ago: executing program 0 (id=906):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000400000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

172.247836ms ago: executing program 0 (id=907):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @private1, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000002440), &(0x7f0000002480)=0xe)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(0x0, r1)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x48, r2, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20048090)
bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00'})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="5606090000000000e000128009000100766c616e00000000d000028006000100040000000600010004000000400003800c00010003000000040000000c00010000100020875700000c0001005d2900ed675625800c00010001000000fbffffff0c000100090000000b000000700004800c01010015080000010000000c0001000a000000e80af9450c00010000005805050000007efe01000f000000001000000c00010001800000608500000c00010000000000fdffffff0c0001004303000064b100009bc0cdd109f95400fbffffff0c00010002000000001000000c00", @ANYRES32=0x0], 0x110}, 0x1, 0x0, 0x0, 0x600}, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000140), 0x0)
r10 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r10, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3cf3bca3953e47a6a4e824cea1729d5ca87b0771ef4e34898fe954ee15cee4bd8cdf3dc2b52ac70fe1241ecc51411e39e47c99baefe8442664417b837104c89596a1b32e17595fcf16fa8c41a06dbf302c6428f22fe5b99e796c4bbb31ad4cbbbd", @ANYRES16=0x0, @ANYBLOB="040029bd7000fcdbdf250500000014000680060005004e200000060001000200000008000400000200003c00068008000300ac14141c060005004e240000060005004e20000008000300ac1414aa060001000a000000080006000000000008000700", @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x4400)
r11 = socket$isdn(0x22, 0x3, 0x22)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x1401, 0x300, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48)
getsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

151.793886ms ago: executing program 2 (id=908):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x206}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x30}, 0x4048800)

143.60532ms ago: executing program 1 (id=909):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x5, 0x2, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000340), &(0x7f00000004c0)}, 0x20)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

61.087421ms ago: executing program 2 (id=910):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000040), 0x4)

60.833184ms ago: executing program 1 (id=911):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000005c0))

60.641118ms ago: executing program 2 (id=912):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
listen(r0, 0x50)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
listen(r1, 0x50)
listen(r1, 0x0)

2.17895ms ago: executing program 1 (id=913):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0)

1.721262ms ago: executing program 2 (id=914):
syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xd, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x1, 0x8000, 0x0, 0xfffb, 0x0, 0x2f, 0x1, @local, @remote}, '@\x00\x00\b\x00\x00\x00\x00'}}}}}, 0x0)

0s ago: executing program 1 (id=915):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x7, 0x0, 0x9}, {0x2, 0x5, 0x2c, 0x40006}, {0xfac3, 0xfe, 0x4, 0x5}, {0x0, 0x7f, 0x1, 0x80000002}]})
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002030500000000000000000000000000090002"], 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:7029' (ED25519) to the list of known hosts.
syzkaller login: [   56.820616][ T5825] cgroup: Unknown subsys name 'net'
[   56.945565][ T5825] cgroup: Unknown subsys name 'cpuset'
[   56.950329][ T5825] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.813946][ T5825] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.620765][ T5854] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.898199][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   68.983496][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.986261][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.988572][ T5860] bridge_slave_0: entered allmulticast mode
[   68.991490][ T5860] bridge_slave_0: entered promiscuous mode
[   69.000527][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.003253][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.005508][ T5860] bridge_slave_1: entered allmulticast mode
[   69.008261][ T5860] bridge_slave_1: entered promiscuous mode
[   69.047692][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.140856][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.159058][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.213657][ T5860] team0: Port device team_slave_0 added
[   69.217967][ T5860] team0: Port device team_slave_1 added
[   69.253072][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.255287][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.264786][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.270758][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.273522][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.281396][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.309588][ T5860] hsr_slave_0: entered promiscuous mode
[   69.312462][ T5860] hsr_slave_1: entered promiscuous mode
[   69.419143][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.426728][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.431561][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.437615][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.457651][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.459997][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.462742][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.464978][ T5860] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.501293][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.511168][  T417] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.514787][  T417] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.523553][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   69.529840][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.532187][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.540810][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.543165][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.651842][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.682838][ T5860] veth0_vlan: entered promiscuous mode
[   69.688650][ T5860] veth1_vlan: entered promiscuous mode
[   69.709381][ T5860] veth0_macvtap: entered promiscuous mode
[   69.714366][ T5860] veth1_macvtap: entered promiscuous mode
[   69.725066][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.731595][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.738585][ T5672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.741841][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.744771][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.747946][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.549343][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.644738][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.802359][ T5892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.806890][ T5892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.810287][ T5892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.815085][ T5892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.818398][ T5892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.878468][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.882253][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.885625][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.889436][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.895995][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.923512][ T5892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.932340][ T5892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.937051][ T5892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.940893][ T5892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.944450][ T5892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.249780][ T5891] chnl_net:caif_netlink_parms(): no params data found
[   71.326784][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.329736][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.378062][ T5894] chnl_net:caif_netlink_parms(): no params data found
[   71.419633][ T5896] chnl_net:caif_netlink_parms(): no params data found
[   71.449347][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.452904][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.455774][ T5891] bridge_slave_0: entered allmulticast mode
[   71.459509][ T5891] bridge_slave_0: entered promiscuous mode
[   71.490446][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.493970][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.496191][ T5891] bridge_slave_1: entered allmulticast mode
[   71.498864][ T5891] bridge_slave_1: entered promiscuous mode
[   71.566735][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.569953][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.574878][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.577774][ T5894] bridge_slave_0: entered allmulticast mode
[   71.580479][ T5894] bridge_slave_0: entered promiscuous mode
[   71.590155][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.608737][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.611478][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.614450][ T5894] bridge_slave_1: entered allmulticast mode
[   71.617541][ T5894] bridge_slave_1: entered promiscuous mode
[   71.689186][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.691875][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.695203][ T5896] bridge_slave_0: entered allmulticast mode
[   71.698161][ T5896] bridge_slave_0: entered promiscuous mode
[   71.702560][ T5891] team0: Port device team_slave_0 added
[   71.707138][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.713872][ T5891] team0: Port device team_slave_1 added
[   71.727050][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.729298][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.731576][ T5896] bridge_slave_1: entered allmulticast mode
[   71.739371][ T5896] bridge_slave_1: entered promiscuous mode
[   71.759680][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.792079][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.823156][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.825844][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.835994][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.844972][ T5896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.848656][ T5894] team0: Port device team_slave_0 added
[   71.852908][ T5896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.857374][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.859936][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.870527][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.884601][ T5894] team0: Port device team_slave_1 added
[   71.933407][ T5896] team0: Port device team_slave_0 added
[   71.948963][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.951655][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.960614][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.968021][ T5896] team0: Port device team_slave_1 added
[   71.999594][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.002915][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.013529][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.048829][ T5891] hsr_slave_0: entered promiscuous mode
[   72.051238][ T5891] hsr_slave_1: entered promiscuous mode
[   72.054283][ T5891] debugfs: 'hsr0' already exists in 'hsr'
[   72.056613][ T5891] Cannot create hsr debugfs directory
[   72.059184][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.061782][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.073435][ T5896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.088287][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.091055][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.102176][ T5896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.156239][ T5894] hsr_slave_0: entered promiscuous mode
[   72.158998][ T5894] hsr_slave_1: entered promiscuous mode
[   72.161528][ T5894] debugfs: 'hsr0' already exists in 'hsr'
[   72.163633][ T5894] Cannot create hsr debugfs directory
[   72.233604][ T5896] hsr_slave_0: entered promiscuous mode
[   72.236005][ T5896] hsr_slave_1: entered promiscuous mode
[   72.238249][ T5896] debugfs: 'hsr0' already exists in 'hsr'
[   72.240152][ T5896] Cannot create hsr debugfs directory
[   72.477935][ T5891] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.485978][ T5891] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.491660][ T5891] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.497767][ T5891] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.554765][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.570592][ T5891] 8021q: adding VLAN 0 to HW filter on device team0
[   72.578909][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.581276][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.591874][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.594697][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.764067][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.803137][ T5891] veth0_vlan: entered promiscuous mode
[   72.820996][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.836688][ T5891] veth1_vlan: entered promiscuous mode
[   72.843558][ T5892] Bluetooth: hci0: command tx timeout
[   72.862878][ T5891] veth0_macvtap: entered promiscuous mode
[   72.868933][ T5891] veth1_macvtap: entered promiscuous mode
[   72.886578][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.897717][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.907846][ T5900] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.913540][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.917319][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.922780][ T5892] Bluetooth: hci1: command tx timeout
[   72.933669][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.995856][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.003334][ T5892] Bluetooth: hci2: command tx timeout
[   73.004480][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.029677][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.033672][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.108905][   T13] bridge_slave_1: left allmulticast mode
[   73.111488][   T13] bridge_slave_1: left promiscuous mode
[   73.126776][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.140712][   T13] bridge_slave_0: left allmulticast mode
[   73.151619][   T13] bridge_slave_0: left promiscuous mode
[   73.155256][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.384011][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.391426][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.396495][   T13] bond0 (unregistering): Released all slaves
[   73.542195][   T13] hsr_slave_0: left promiscuous mode
[   73.557209][   T13] hsr_slave_1: left promiscuous mode
[   73.559846][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.574042][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.583837][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.586207][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.607410][   T13] veth1_macvtap: left promiscuous mode
[   73.609810][   T13] veth0_macvtap: left promiscuous mode
[   73.613737][   T13] veth1_vlan: left promiscuous mode
[   73.616358][   T13] veth0_vlan: left promiscuous mode
[   73.986005][   T13] team0 (unregistering): Port device team_slave_1 removed
[   74.010161][   T13] team0 (unregistering): Port device team_slave_0 removed
[   74.317847][ T5948] pim6reg1: entered promiscuous mode
[   74.320271][ T5948] pim6reg1: entered allmulticast mode
[   74.657408][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'.
[   74.661132][ T5962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'.
[   74.690094][ T5894] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.706834][ T5894] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.720370][ T5894] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.738829][ T5894] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.903870][ T5896] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.917775][ T5896] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.922425][ T5892] Bluetooth: hci0: command tx timeout
[   74.940586][ T5896] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.946440][ T5896] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.002500][ T5892] Bluetooth: hci1: command tx timeout
[   75.037838][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.058744][ T5894] 8021q: adding VLAN 0 to HW filter on device team0
[   75.077614][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.080483][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.085771][ T5892] Bluetooth: hci2: command tx timeout
[   75.096490][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.098961][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.158164][ T5896] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.186001][ T5896] 8021q: adding VLAN 0 to HW filter on device team0
[   75.205662][  T417] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.208432][  T417] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.222712][  T417] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.225922][  T417] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.455680][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.487612][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.538056][ T5894] veth0_vlan: entered promiscuous mode
[   75.558322][ T5894] veth1_vlan: entered promiscuous mode
[   75.577147][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'.
[   75.586531][ T5896] veth0_vlan: entered promiscuous mode
[   75.609241][ T5896] veth1_vlan: entered promiscuous mode
[   75.636553][ T5894] veth0_macvtap: entered promiscuous mode
[   75.646294][ T5894] veth1_macvtap: entered promiscuous mode
[   75.667469][ T5896] veth0_macvtap: entered promiscuous mode
[   75.672612][ T6006] netlink: 'syz.1.32': attribute type 1 has an invalid length.
[   75.676224][ T6006] netlink: 'syz.1.32': attribute type 3 has an invalid length.
[   75.676755][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.679461][ T6006] netlink: 'syz.1.32': attribute type 1 has an invalid length.
[   75.686805][ T6006] netlink: 204 bytes leftover after parsing attributes in process `syz.1.32'.
[   75.687537][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.690625][ T6006] NCSI netlink: No device for ifindex 0
[   75.700496][ T5896] veth1_macvtap: entered promiscuous mode
[   75.711410][ T5900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.717034][ T5900] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.725669][ T5900] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.728596][ T5900] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.765670][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.801245][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.835876][ T6008] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET)
[   75.840411][ T5900] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.845776][ T5900] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.849485][ T5900] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.863489][  T417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.870019][ T5900] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.874221][  T417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.900055][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.905682][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.023720][  T417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.028891][  T417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.144195][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.147336][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.211890][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.215513][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.707023][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'.
[   76.734251][ T6046] macsec1: entered promiscuous mode
[   76.736239][ T6046] macvlan1: entered promiscuous mode
[   76.747249][ T6046] macvlan1: left promiscuous mode
[   76.828984][ T6052] warning: `syz.0.50' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.976524][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'.
[   76.987384][ T6064] veth0_to_bond: entered allmulticast mode
[   77.002371][ T5892] Bluetooth: hci0: command tx timeout
[   77.071689][ T6072] GUP no longer grows the stack in syz.2.59 (6072): 200000006000-20000000a000 (200000005000)
[   77.076356][ T6072] CPU: 1 UID: 0 PID: 6072 Comm: syz.2.59 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[   77.076379][ T6072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.076388][ T6072] Call Trace:
[   77.076404][ T6072]  <TASK>
[   77.076418][ T6072]  dump_stack_lvl+0x189/0x250
[   77.076441][ T6072]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.076451][ T6072]  ? __pfx__printk+0x10/0x10
[   77.076463][ T6072]  ? find_vma+0xe7/0x160
[   77.076484][ T6072]  __get_user_pages+0x24d0/0x2ce0
[   77.076494][ T6072]  ? __lock_acquire+0xab9/0xd20
[   77.076521][ T6072]  ? __gup_longterm_locked+0xc68/0x1660
[   77.076535][ T6072]  __gup_longterm_locked+0xde9/0x1660
[   77.076552][ T6072]  ? try_grab_folio_fast+0x1be/0x4f0
[   77.076577][ T6072]  ? gup_fast_fallback+0x195f/0x2010
[   77.076598][ T6072]  gup_fast_fallback+0x1e6a/0x2010
[   77.076642][ T6072]  ? __pfx_gup_fast_fallback+0x10/0x10
[   77.076658][ T6072]  ? __mutex_lock+0x335/0x1360
[   77.076676][ T6072]  ? rcu_is_watching+0x15/0xb0
[   77.076694][ T6072]  ? is_valid_gup_args+0x11f/0x200
[   77.076713][ T6072]  ? get_user_pages_fast+0x4d/0xb0
[   77.076731][ T6072]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   77.076755][ T6072]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   77.076787][ T6072]  ? wait_for_space+0x24d/0x2d0
[   77.076809][ T6072]  iov_iter_get_pages2+0x5e/0xa0
[   77.076829][ T6072]  __se_sys_vmsplice+0x548/0x10d0
[   77.076884][ T6072]  ? futex_private_hash_put+0x4b/0x280
[   77.076898][ T6072]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   77.076912][ T6072]  ? __pfx_futex_wake+0x10/0x10
[   77.076929][ T6072]  ? __lock_acquire+0xab9/0xd20
[   77.076958][ T6072]  ? do_pipe2+0xf7/0x170
[   77.076972][ T6072]  ? rcu_is_watching+0x15/0xb0
[   77.076982][ T6072]  ? do_syscall_64+0xbe/0x3b0
[   77.076996][ T6072]  do_syscall_64+0xfa/0x3b0
[   77.077009][ T6072]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.077026][ T6072]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.077040][ T6072]  ? exc_page_fault+0x9f/0xf0
[   77.077051][ T6072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.077059][ T6072] RIP: 0033:0x7f208118ebe9
[   77.077068][ T6072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.077075][ T6072] RSP: 002b:00007f2081f84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   77.077084][ T6072] RAX: ffffffffffffffda RBX: 00007f20813b5fa0 RCX: 00007f208118ebe9
[   77.077094][ T6072] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[   77.077102][ T6072] RBP: 00007f2081211e19 R08: 0000000000000000 R09: 0000000000000000
[   77.077110][ T6072] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   77.077117][ T6072] R13: 00007f20813b6038 R14: 00007f20813b5fa0 R15: 00007ffc2b7b2628
[   77.077140][ T6072]  </TASK>
[   77.178637][ T5892] Bluetooth: hci1: command tx timeout
[   77.180674][ T5892] Bluetooth: hci2: command tx timeout
[   77.367434][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'.
[   77.501352][ T6092] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   77.505363][ T6092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.508511][ T6094] netlink: 104 bytes leftover after parsing attributes in process `syz.1.70'.
[   77.801027][ T6118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.889661][ T5900] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   77.895639][ T5900] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   77.915612][ T5886] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   78.092391][  T792] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   78.275473][ T6154] netlink: 'syz.1.97': attribute type 7 has an invalid length.
[   78.689579][ T6193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.114'.
[   78.758344][ T6200] netlink: 'syz.1.117': attribute type 3 has an invalid length.
[   78.762530][ T6200] netlink: 'syz.1.117': attribute type 3 has an invalid length.
[   79.002300][  T792] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   79.082399][   T54] Bluetooth: hci0: command tx timeout
[   79.111353][ T6225] netlink: 'syz.1.127': attribute type 3 has an invalid length.
[   79.243457][   T54] Bluetooth: hci2: command tx timeout
[   79.245824][ T5892] Bluetooth: hci1: command tx timeout
[   79.791265][ T6239] Driver unsupported XDP return value 0 on prog  (id 19) dev N/A, expect packet loss!
[   80.316058][ T6263] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   80.515339][ T6278] netlink: 'syz.1.151': attribute type 21 has an invalid length.
[   80.519303][ T6278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.151'.
[   80.551617][ T6280] netlink: 830 bytes leftover after parsing attributes in process `syz.2.152'.
[   81.038554][ T6307] vlan2: entered promiscuous mode
[   81.040820][ T6307] bond0: entered promiscuous mode
[   81.044685][ T6307] bond_slave_0: entered promiscuous mode
[   81.048920][ T6307] bond_slave_1: entered promiscuous mode
[   81.229416][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   81.236657][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   81.240188][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   81.246188][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   81.249880][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   81.254740][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   81.259052][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   81.262973][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   81.443285][ T6342] netlink: 'syz.0.182': attribute type 3 has an invalid length.
[   82.122157][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   82.713973][ T6443] Zero length message leads to an empty skb
[   82.782676][ T6446] vlan0: entered promiscuous mode
[   83.829197][ T5861] IPVS: starting estimator thread 0...
[   83.922186][ T6512] IPVS: using max 49 ests per chain, 117600 per kthread
[   83.941260][ T6519] netlink: 'syz.2.251': attribute type 6 has an invalid length.
[   84.372679][ T6553] netlink: 'syz.1.269': attribute type 6 has an invalid length.
[   84.664735][ T6575] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   84.677276][ T6575] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   85.049299][ T6614] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   86.339288][ T6707] delete_channel: no stack
[   86.358630][ T6657] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   86.361327][ T6657] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   86.430361][ T6657] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   86.440513][ T6657] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   86.455491][ T6657] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   86.466509][ T6657] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   86.687813][    T9] cfg80211: failed to load regulatory.db
[   87.064353][ T6762] __nla_validate_parse: 63 callbacks suppressed
[   87.064377][ T6762] netlink: 212 bytes leftover after parsing attributes in process `syz.1.348'.
[   87.073605][ T6762] netlink: 'syz.1.348': attribute type 1 has an invalid length.
[   87.217212][ T6775] netlink: 'syz.1.351': attribute type 2 has an invalid length.
[   87.224412][ T6775] netlink: 64 bytes leftover after parsing attributes in process `syz.1.351'.
[   87.410502][ T6793] netlink: 87 bytes leftover after parsing attributes in process `syz.2.362'.
[   87.537516][ T6803] netem: change failed
[   87.970575][ T6828] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   87.978044][ T6828] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   88.090282][ T6834] netlink: 'syz.2.379': attribute type 1 has an invalid length.
[   88.110334][ T6834] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.129584][ T6834] 8021q: adding VLAN 0 to HW filter on device batadv1
[   88.133596][ T6834] bond1: (slave batadv1): making interface the new active one
[   88.137680][ T6834] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   88.787837][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'.
[   88.804546][ T6875] Bluetooth: MGMT ver 1.23
[   88.847378][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'.
[   88.857835][ T6877] pim6reg: entered allmulticast mode
[   88.863569][ T6877] pim6reg: left allmulticast mode
[   89.386842][ T6912] geneve2: entered allmulticast mode
[   89.391043][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   89.395756][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   89.406561][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   89.410076][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   89.418574][ T6913] netlink: 2 bytes leftover after parsing attributes in process `syz.0.415'.
[   89.803338][ T6941] geneve2: entered promiscuous mode
[   90.522153][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   90.724326][ T6984] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[   91.153023][ T7015] lo speed is unknown, defaulting to 1000
[   91.155678][ T7015] lo speed is unknown, defaulting to 1000
[   91.160178][ T7015] lo speed is unknown, defaulting to 1000
[   91.190689][ T7015] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   91.213956][ T7015] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   91.260856][ T7015] lo speed is unknown, defaulting to 1000
[   91.274048][ T7015] lo speed is unknown, defaulting to 1000
[   91.277261][ T7015] lo speed is unknown, defaulting to 1000
[   91.464206][ T7043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.477'.
[   91.667823][ T7059] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.730187][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'.
[   91.754195][ T5861] IPVS: starting estimator thread 0...
[   91.852017][ T7066] IPVS: using max 64 ests per chain, 153600 per kthread
[   92.123300][ T7098] netlink: 48 bytes leftover after parsing attributes in process `syz.1.498'.
[   92.277704][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'.
[   92.280517][ T7118] nbd: couldn't find a device at index 65546
[   92.286895][ T7119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   92.289586][ T7119] IPv6: NLM_F_CREATE should be set when creating new route
[   92.291782][ T7119] IPv6: NLM_F_CREATE should be set when creating new route
[   92.578046][ T7150] bridge_slave_0: left allmulticast mode
[   92.580274][ T7150] bridge_slave_0: left promiscuous mode
[   92.583725][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.590607][ T7150] bridge_slave_1: left allmulticast mode
[   92.594542][ T7150] bridge_slave_1: left promiscuous mode
[   92.596842][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.607157][ T7150] bond0: (slave bond_slave_0): Releasing backup interface
[   92.617151][ T7150] bond0: (slave bond_slave_1): Releasing backup interface
[   92.630396][ T7150] team0: Port device team_slave_0 removed
[   92.636774][ T7150] team0: Port device team_slave_1 removed
[   92.639151][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.641568][ T7150] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.653316][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.655777][ T7150] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.668570][ T7150] bond1: (slave batadv1): Releasing active interface
[   92.684110][  T792] lo speed is unknown, defaulting to 1000
[   92.686005][ T7154] team0: Mode changed to "broadcast"
[   92.694757][  T792] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   92.705291][ T7150] team0: Port device vlan0 added
[   92.708826][ T7150] tipc: Started in network mode
[   92.710679][ T7150] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   92.714740][ T7150] tipc: Enabled bearer <eth:team0>, priority 0
[   92.755120][ T7162] netlink: 'syz.2.529': attribute type 3 has an invalid length.
[   92.758183][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'.
[   92.763845][ T7162] netlink: 'syz.2.529': attribute type 3 has an invalid length.
[   92.766884][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'.
[   92.787481][  T792] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   93.093504][ T7190] netlink: 48 bytes leftover after parsing attributes in process `syz.2.543'.
[   93.096471][ T7190] bridge_slave_0: entered allmulticast mode
[   93.201519][ T7200] netlink: 96 bytes leftover after parsing attributes in process `syz.2.548'.
[   93.331584][ T7211] netlink: 104 bytes leftover after parsing attributes in process `syz.1.554'.
[   93.492443][ T7219] nbd0: detected capacity change from 0 to 127
[   93.497981][   T56] block nbd0: Receive control failed (result -32)
[   93.505532][ T6532] block nbd0: Dead connection, failed to find a fallback
[   93.508308][ T6532] block nbd0: shutting down sockets
[   93.511787][ T6532] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.518387][ T7225] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   93.527038][ T6532] Buffer I/O error on dev nbd0, logical block 0, async page read
[   93.530743][ T6532] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.537012][ T6532] Buffer I/O error on dev nbd0, logical block 1, async page read
[   93.540523][ T6532] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.559089][ T6532] Buffer I/O error on dev nbd0, logical block 2, async page read
[   93.567861][ T6532] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.571281][ T6532] Buffer I/O error on dev nbd0, logical block 3, async page read
[   93.589383][ T6532] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.595783][ T6532] Buffer I/O error on dev nbd0, logical block 0, async page read
[   93.599025][ T6532] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.599200][ T7232] netlink: 'syz.0.561': attribute type 9 has an invalid length.
[   93.605304][ T6532] Buffer I/O error on dev nbd0, logical block 1, async page read
[   93.609405][ T6532] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.611723][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'.
[   93.616215][ T6532] Buffer I/O error on dev nbd0, logical block 2, async page read
[   93.623933][ T7232] hsr0: entered promiscuous mode
[   93.626153][ T7232] macvlan2: entered promiscuous mode
[   93.628496][ T7232] macvlan2: entered allmulticast mode
[   93.630945][ T6532] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.638195][ T6532] Buffer I/O error on dev nbd0, logical block 3, async page read
[   93.642570][ T6532] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.646727][ T7232] hsr0: entered allmulticast mode
[   93.649712][ T7232] hsr_slave_0: entered allmulticast mode
[   93.654953][ T6532] Buffer I/O error on dev nbd0, logical block 0, async page read
[   93.658136][ T7232] hsr_slave_1: entered allmulticast mode
[   93.663143][ T6532] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.666421][ T6532] Buffer I/O error on dev nbd0, logical block 1, async page read
[   93.684048][ T6532] ldm_validate_partition_table(): Disk read failed.
[   93.698803][ T6532] Dev nbd0: unable to read RDB block 0
[   93.710076][ T6532]  nbd0: unable to read partition table
[   93.736174][ T6532] ldm_validate_partition_table(): Disk read failed.
[   93.747647][ T6532] Dev nbd0: unable to read RDB block 0
[   93.751812][ T6532]  nbd0: unable to read partition table
[   93.769165][ T7241] netlink: 'syz.1.566': attribute type 1 has an invalid length.
[   93.796368][ T7241] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.827641][ T7241] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.831004][ T7241] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   93.836558][ T5861] tipc: Node number set to 11578026
[   93.841214][ T7241] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   93.870512][ T7247] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   93.876204][ T7249] netlink: 'syz.0.569': attribute type 16 has an invalid length.
[   93.879420][ T7249] netlink: 'syz.0.569': attribute type 17 has an invalid length.
[   93.945791][ T7241] veth3: entered promiscuous mode
[   93.987421][ T7247] erspan0: entered allmulticast mode
[   94.034673][ T7253] sctp: [Deprecated]: syz.0.571 (pid 7253) Use of int in max_burst socket option.
[   94.034673][ T7253] Use struct sctp_assoc_value instead
[   96.193686][ T7335] netlink: 156 bytes leftover after parsing attributes in process `syz.0.606'.
[   96.197015][ T7335] netlink: 'syz.0.606': attribute type 3 has an invalid length.
[   96.298734][ T7345] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   96.424311][ T7360] netlink: 'syz.1.612': attribute type 13 has an invalid length.
[   96.437005][ T7360] netlink: 'syz.1.612': attribute type 17 has an invalid length.
[   96.470244][ T7360] erspan0: left allmulticast mode
[   96.537165][ T7360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.544105][ T7366] netlink: 'syz.0.619': attribute type 15 has an invalid length.
[   96.547303][ T7366] netlink: 666 bytes leftover after parsing attributes in process `syz.0.619'.
[   96.589283][ T7346] lo speed is unknown, defaulting to 1000
[   96.650707][ T7360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.740474][ T7346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.127067][ T7406] bridge0: port 3(ipvlan2) entered blocking state
[   97.130042][ T7406] bridge0: port 3(ipvlan2) entered disabled state
[   97.133783][ T7406] ipvlan2: entered allmulticast mode
[   97.136571][ T7406] bridge0: entered allmulticast mode
[   97.140048][ T7406] ipvlan2: left allmulticast mode
[   97.142031][ T7406] bridge0: left allmulticast mode
[   97.419291][ T7412] bond_slave_0: entered promiscuous mode
[   97.421363][ T7412] bond_slave_1: entered promiscuous mode
[   97.423742][ T7412] vlan2: entered promiscuous mode
[   97.425405][ T7412] bond0: entered promiscuous mode
[   97.766675][ T7431] __nla_validate_parse: 2 callbacks suppressed
[   97.766689][ T7431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.646'.
[   97.774360][ T7431] validate_nla: 1 callbacks suppressed
[   97.774393][ T7431] netlink: 'syz.2.646': attribute type 7 has an invalid length.
[   97.780019][ T7431] netlink: 'syz.2.646': attribute type 8 has an invalid length.
[   97.787716][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'.
[   97.820598][ T7436] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   97.910324][ T7440] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   98.648679][ T7457] netlink: 'syz.1.660': attribute type 16 has an invalid length.
[   98.651273][ T7457] netlink: 'syz.1.660': attribute type 3 has an invalid length.
[   98.655105][ T7457] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.660'.
[   99.079307][ T7489] netlink: 182 bytes leftover after parsing attributes in process `syz.2.668'.
[   99.183247][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'.
[   99.189953][ T7498] bridge_slave_1: left allmulticast mode
[   99.200079][ T7498] bridge_slave_1: left promiscuous mode
[   99.204508][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.211768][ T7498] bridge_slave_0: left allmulticast mode
[   99.215050][ T7498] bridge_slave_0: left promiscuous mode
[   99.217665][ T7498] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.595506][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'.
[   99.599317][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.689'.
[   99.752890][ T7540] lo speed is unknown, defaulting to 1000
[   99.961169][ T7550] netlink: 'syz.2.694': attribute type 11 has an invalid length.
[   99.974100][ T7550] netlink: 224 bytes leftover after parsing attributes in process `syz.2.694'.
[  100.214645][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'.
[  100.358637][ T7577] openvswitch: netlink: Multiple metadata blocks provided
[  100.548330][ T7593] netlink: 27 bytes leftover after parsing attributes in process `syz.0.714'.
[  100.699242][ T7607] netlink: 'syz.1.720': attribute type 1 has an invalid length.
[  100.745254][ T7607] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  100.749804][ T7607] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  100.808898][ T7617] gretap1: entered promiscuous mode
[  100.820300][ T7617] bond2: (slave gretap1): making interface the new active one
[  100.825471][ T7617] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  100.939324][ T7625] lo speed is unknown, defaulting to 1000
[  101.274917][ T7653] lo speed is unknown, defaulting to 1000
[  101.277235][ T7653] lo speed is unknown, defaulting to 1000
[  101.279788][ T7653] lo speed is unknown, defaulting to 1000
[  101.290976][ T7653] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  101.322668][ T7653] lo speed is unknown, defaulting to 1000
[  101.325367][ T7653] lo speed is unknown, defaulting to 1000
[  101.332712][ T7653] lo speed is unknown, defaulting to 1000
[  101.815093][ T7712] netlink: 'syz.0.767': attribute type 83 has an invalid length.
[  101.861341][ T7713] sctp: [Deprecated]: syz.1.766 (pid 7713) Use of struct sctp_assoc_value in delayed_ack socket option.
[  101.861341][ T7713] Use struct sctp_sack_info instead
[  101.949391][ T7718] siw: device registration error -23
[  102.113006][ T7730] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  102.117092][ T7730] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  103.038825][ T7752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.116008][ T7759] lo speed is unknown, defaulting to 1000
[  103.119595][ T7759] lo speed is unknown, defaulting to 1000
[  103.385054][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'.
[  103.389885][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'.
[  103.418538][ T7776] netlink: 156 bytes leftover after parsing attributes in process `syz.1.793'.
[  103.843890][ T7807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.807'.
[  103.985679][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.810'.
[  103.998052][ T7816] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  104.348552][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'.
[  104.461813][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'.
[  106.405899][   T33] audit: type=1800 audit(1755511207.867:2): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.877" name="cgroup.controllers" dev="tmpfs" ino=1251 res=0 errno=0
[  106.725304][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.882'.
[  106.797467][ T7975] lo speed is unknown, defaulting to 1000
[  106.804949][ T7975] lo speed is unknown, defaulting to 1000
[  106.980965][ T7992] netlink: 32 bytes leftover after parsing attributes in process `syz.1.891'.
[  107.018997][ T7994] netlink: 'syz.2.892': attribute type 1 has an invalid length.
[  107.024306][ T7994] netlink: 168 bytes leftover after parsing attributes in process `syz.2.892'.
[  107.028181][ T7994] NCSI netlink: No device for ifindex 0
[  107.162120][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  107.335481][ T8011] macvtap1: entered promiscuous mode
[  107.338298][ T8011] bond0: entered promiscuous mode
[  107.348721][ T8011] macvtap1: entered allmulticast mode
[  107.351303][ T8011] bond0: entered allmulticast mode
[  107.354490][ T8011] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  107.365698][ T8011] macvtap1: left promiscuous mode
[  107.368382][ T8011] bond0: left promiscuous mode
[  107.371825][ T8011] macvtap1: left allmulticast mode
[  107.376435][ T8011] bond0: left allmulticast mode
Connection to localhost closed by remote host.
[  108.555435][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.559615][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  108.628455][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.631675][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  108.694919][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.699014][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  108.758559][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.762910][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  109.214559][   T13] bond0 (unregistering): Released all slaves
[  109.297522][   T13] bond1 (unregistering): Released all slaves
[  109.397466][   T13] tipc: Disabling bearer <eth:team0>
[  109.400159][   T13] tipc: Left network mode
[  109.587770][   T13] hsr_slave_0: left promiscuous mode
[  109.590703][   T13] hsr_slave_1: left promiscuous mode
[  109.600185][   T13] veth1_macvtap: left promiscuous mode
[  109.606131][   T13] veth0_macvtap: left promiscuous mode
[  109.608532][   T13] veth1_vlan: left promiscuous mode
[  109.753010][   T13] team0 (unregistering): Port device vlan0 removed
[  110.198311][  T792] lo speed is unknown, defaulting to 1000
[  110.200889][  T792] syz1: Port: 1 Link DOWN
[  110.494056][   T13] ------------[ cut here ]------------
[  110.496241][   T13] WARNING: CPU: 0 PID: 13 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  110.500019][   T13] Modules linked in:
[  110.502096][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  110.508027][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.512513][   T13] Workqueue: netns cleanup_net
[  110.514495][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  110.516949][   T13] Code: a8 81 df f7 4b 83 3c 2c 00 75 19 e8 4c 18 7c f7 49 81 fd f8 07 00 00 74 1d e8 3e 18 7c f7 49 83 c5 08 eb c9 e8 33 18 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  110.524950][   T13] RSP: 0018:ffffc900001078b0 EFLAGS: 00010293
[  110.527474][   T13] RAX: ffffffff8a43935d RBX: ffff888111804000 RCX: ffff88801c6c0000
[  110.530615][   T13] RDX: 0000000000000000 RSI: ffffffff8dba6151 RDI: ffff8881118040b8
[  110.533987][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  110.537202][   T13] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888111804000
[  110.540357][   T13] R13: 00000000000000b8 R14: ffff88811615c880 R15: dffffc0000000000
[  110.543882][   T13] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  110.547559][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  110.550165][   T13] CR2: 000055bc78cd1000 CR3: 000000000df36000 CR4: 00000000000006f0
[  110.553463][   T13] Call Trace:
[  110.554875][   T13]  <TASK>
[  110.556100][   T13]  ops_undo_list+0x49a/0x990
[  110.557968][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  110.559979][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  110.562227][   T13]  cleanup_net+0x4c5/0x800
[  110.564083][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  110.566047][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  110.568143][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  110.570447][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  110.572910][   T13]  process_scheduled_works+0xae1/0x17b0
[  110.575160][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  110.577578][   T13]  worker_thread+0x8a0/0xda0
[  110.579476][   T13]  kthread+0x711/0x8a0
[  110.581082][   T13]  ? __pfx_worker_thread+0x10/0x10
[  110.583252][   T13]  ? __pfx_kthread+0x10/0x10
[  110.585107][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  110.587211][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.589287][   T13]  ? __pfx_kthread+0x10/0x10
[  110.591142][   T13]  ret_from_fork+0x3fc/0x770
[  110.593142][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  110.595214][   T13]  ? __switch_to_asm+0x39/0x70
[  110.597226][   T13]  ? __switch_to_asm+0x33/0x70
[  110.599198][   T13]  ? __pfx_kthread+0x10/0x10
[  110.601129][   T13]  ret_from_fork_asm+0x1a/0x30
[  110.603239][   T13]  </TASK>
[  110.604532][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  110.607460][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  110.612342][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.616349][   T13] Workqueue: netns cleanup_net
[  110.618289][   T13] Call Trace:
[  110.619637][   T13]  <TASK>
[  110.620886][   T13]  dump_stack_lvl+0x99/0x250
[  110.622759][   T13]  ? __asan_memcpy+0x40/0x70
[  110.624516][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.626636][   T13]  ? __pfx__printk+0x10/0x10
[  110.628569][   T13]  vpanic+0x281/0x750
[  110.630235][   T13]  ? __pfx__printk+0x10/0x10
[  110.632141][   T13]  ? __pfx_vpanic+0x10/0x10
[  110.633985][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  110.636143][   T13]  panic+0xb9/0xc0
[  110.637665][   T13]  ? __pfx_panic+0x10/0x10
[  110.639506][   T13]  __warn+0x31b/0x4b0
[  110.641152][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  110.643332][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  110.645507][   T13]  report_bug+0x2be/0x4f0
[  110.647185][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  110.649337][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  110.651481][   T13]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  110.653656][   T13]  handle_bug+0x84/0x160
[  110.655372][   T13]  exc_invalid_op+0x1a/0x50
[  110.657122][   T13]  asm_exc_invalid_op+0x1a/0x20
[  110.658626][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  110.660475][   T13] Code: a8 81 df f7 4b 83 3c 2c 00 75 19 e8 4c 18 7c f7 49 81 fd f8 07 00 00 74 1d e8 3e 18 7c f7 49 83 c5 08 eb c9 e8 33 18 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  110.666717][   T13] RSP: 0018:ffffc900001078b0 EFLAGS: 00010293
[  110.668644][   T13] RAX: ffffffff8a43935d RBX: ffff888111804000 RCX: ffff88801c6c0000
[  110.671098][   T13] RDX: 0000000000000000 RSI: ffffffff8dba6151 RDI: ffff8881118040b8
[  110.674071][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  110.677170][   T13] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888111804000
[  110.680231][   T13] R13: 00000000000000b8 R14: ffff88811615c880 R15: dffffc0000000000
[  110.683313][   T13]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  110.685512][   T13]  ops_undo_list+0x49a/0x990
[  110.687421][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  110.689511][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  110.691521][   T13]  cleanup_net+0x4c5/0x800
[  110.693374][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  110.695368][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  110.697469][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  110.699837][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  110.702137][   T13]  process_scheduled_works+0xae1/0x17b0
[  110.704320][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  110.706649][   T13]  worker_thread+0x8a0/0xda0
[  110.708545][   T13]  kthread+0x711/0x8a0
[  110.710165][   T13]  ? __pfx_worker_thread+0x10/0x10
[  110.712180][   T13]  ? __pfx_kthread+0x10/0x10
[  110.714062][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  110.716165][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.718258][   T13]  ? __pfx_kthread+0x10/0x10
[  110.720108][   T13]  ret_from_fork+0x3fc/0x770
[  110.721967][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  110.723960][   T13]  ? __switch_to_asm+0x39/0x70
[  110.725842][   T13]  ? __switch_to_asm+0x33/0x70
[  110.727745][   T13]  ? __pfx_kthread+0x10/0x10
[  110.729635][   T13]  ret_from_fork_asm+0x1a/0x30
[  110.731614][   T13]  </TASK>
[  110.733649][   T13] Kernel Offset: disabled
[  110.735464][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:00:12  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000050 RBX=0000000000000050 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107050
R8 =ffff888107f88237 R9 =1ffff11020ff1046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98d9 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bc78cd1000 CR3=000000003e7e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=0000000000000000 0000000000000000
XMM02=ffff000000000000 ffffffffffffff00 XMM03=00000000000000ff 000000000000ff00
XMM04=0000000000ff0000 0000ff0000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffd40001e3d85 RBX=ffffc900063bf580 RCX=ffff888107215640 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000f1ec00 RSP=ffffc900063bf368
R8 =0000000000000000 R9 =ffffffff820feb79 R10=dffffc0000000000 R11=fffff52000c77e54
R12=dffffc0000000000 R13=ffffea0000000000 R14=ffff88803c7b0818 R15=ffff888107beac60
RIP=ffffffff820ff0ef RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcfbf891380 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bc78cc4b40 CR3=000000003e7e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffff000000 ffffffffffffffff XMM01=0000000000706d63 0000000000000000
XMM02=0000000000ffffff 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ffffffffff000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
