last executing test programs:

1.108807137s ago: executing program 1 (id=562):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0)

1.108442115s ago: executing program 1 (id=565):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa)
poll(&(0x7f0000002000)=[{r0, 0x93d4}], 0x1, 0x9)

989.051472ms ago: executing program 0 (id=570):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0)

988.995802ms ago: executing program 0 (id=571):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)

907.993804ms ago: executing program 2 (id=572):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x184, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x158, 0xc, 0x0, 0x1, [{0x154, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x32}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x5c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x184}}, 0x0)

838.556298ms ago: executing program 2 (id=573):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000100010000000000000000000000000a20000000000a050000"], 0xc8}}, 0x0)

838.285788ms ago: executing program 2 (id=574):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x25, 0x0, 0x11, 0x4, @broadcast, 0x9, "306fcfea2f1077"}]}}}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x402}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x7, 0x77eb488a, 0x5}}]}, 0x48}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000faffffff00000000000000180100002e20000000020000000000007b1af8ff00000000bfa10000000000000701000062ffffffb702000008000000b703000000000000850000a78286b33037bbbad0df7f715d5a4a000600000095", @ANYBLOB="75b70a362932b36ab680056a121cb8f0c946339992e2db76d0271ba05b7413ca10d139f9483c3c3b44340487684edba93fdfb1373c58b58cca581d3116dce03e12903ad1c46c24949faa55bb956fb334f125f3b94e8d3fffd329dc224443aea461c3109e8caf6e120de6f5dc58d52991359feebc4facf326cdbd8df35e186f06f6924324f8b33cd6ce3d49b6998684ee304d31c113d7293944dbcf201158f818872d49029be50ff7222fcee51d002ba917eb4e1a6529"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r6 = accept(r4, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x10001, 0x9, 0x20184, 0xffffffffffffffff, 0x1000, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r6}, 0x47)
recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12020, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sys_exit\x00', r8}, 0x18)
getpeername$netlink(r6, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r6, 0x0, 0x40810)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r9)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r10, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)

769.585479ms ago: executing program 2 (id=575):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x0, 0x1, [@random="512c626c1527"]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

682.105434ms ago: executing program 2 (id=576):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0x3e, &(0x7f0000000000)={0xfffff000}, 0x8)

619.704075ms ago: executing program 2 (id=577):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000500)={r2, @in={{0x2, 0x4e21, @empty}}, 0xa, 0x401}, 0x90)

228.799027ms ago: executing program 1 (id=578):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @private2, 0x6}}}, 0x84)

228.639135ms ago: executing program 1 (id=579):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000002240)=ANY=[], 0x6a)

176.318801ms ago: executing program 1 (id=580):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x3)
close(0x4)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)

175.122956ms ago: executing program 1 (id=581):
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x44, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @multicast2}, "0e70a4b52dd6"}}}}}, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa0900"/518], 0x610)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
r4 = socket(0x8000000010, 0x2, 0x0)
write(r4, &(0x7f00000004c0)="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", 0xfc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r5, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
socket$packet(0x11, 0x3, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xf, 0x2, &(0x7f0000000300)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x56, '\x00', r8, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x3, 0xc, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)=[r0, r0, r0, 0xffffffffffffffff, r0], &(0x7f0000000dc0)=[{0x1, 0x3, 0x3, 0x7}, {0x2, 0x3, 0x2, 0x8}, {0x4, 0x1, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xc}, {0x0, 0x1, 0xf, 0x3}, {0x1, 0x1, 0xd}, {0x2, 0x5, 0x2, 0x8}, {0x2, 0x4, 0xe, 0x1}], 0x10, 0x1}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00'})

88.455167ms ago: executing program 0 (id=582):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0)

87.28576ms ago: executing program 0 (id=583):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

166.368µs ago: executing program 0 (id=584):
r0 = socket(0x1e, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0)

0s ago: executing program 0 (id=585):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58800' (ED25519) to the list of known hosts.
syzkaller login: [   40.767384][ T5753] cgroup: Unknown subsys name 'net'
[   40.850264][ T5753] cgroup: Unknown subsys name 'cpuset'
[   40.859389][ T5753] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.104347][ T5753] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   49.102980][ T5839] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.851821][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.855205][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.858607][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.862231][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.865263][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   51.898990][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.902025][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.904845][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.907791][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.911364][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.970568][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.974035][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.977188][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.981562][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.988201][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.264190][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   52.276524][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   52.309704][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   52.416007][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.418894][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.421195][ T5859] bridge_slave_0: entered allmulticast mode
[   52.423874][ T5859] bridge_slave_0: entered promiscuous mode
[   52.427387][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.429773][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.432144][ T5859] bridge_slave_1: entered allmulticast mode
[   52.434670][ T5859] bridge_slave_1: entered promiscuous mode
[   52.478526][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.480937][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.483256][ T5854] bridge_slave_0: entered allmulticast mode
[   52.486087][ T5854] bridge_slave_0: entered promiscuous mode
[   52.498803][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.501681][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.503927][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.506117][ T5857] bridge_slave_0: entered allmulticast mode
[   52.509564][ T5857] bridge_slave_0: entered promiscuous mode
[   52.512225][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.514402][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.516601][ T5854] bridge_slave_1: entered allmulticast mode
[   52.519731][ T5854] bridge_slave_1: entered promiscuous mode
[   52.531255][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.535139][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.538537][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.541296][ T5857] bridge_slave_1: entered allmulticast mode
[   52.544035][ T5857] bridge_slave_1: entered promiscuous mode
[   52.573904][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.592579][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.597727][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.603693][ T5859] team0: Port device team_slave_0 added
[   52.615519][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.620214][ T5859] team0: Port device team_slave_1 added
[   52.642961][ T5854] team0: Port device team_slave_0 added
[   52.665111][ T5854] team0: Port device team_slave_1 added
[   52.671055][ T5857] team0: Port device team_slave_0 added
[   52.682158][ T5857] team0: Port device team_slave_1 added
[   52.697524][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.701149][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.708888][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.735674][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.738108][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.745873][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.750924][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.753037][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.760729][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.764290][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.766363][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.774318][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.778223][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.780722][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.791515][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.806391][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.808617][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.816315][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.839308][ T5859] hsr_slave_0: entered promiscuous mode
[   52.841522][ T5859] hsr_slave_1: entered promiscuous mode
[   52.893336][ T5857] hsr_slave_0: entered promiscuous mode
[   52.896038][ T5857] hsr_slave_1: entered promiscuous mode
[   52.898767][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.901485][ T5857] Cannot create hsr debugfs directory
[   52.909614][ T5854] hsr_slave_0: entered promiscuous mode
[   52.911805][ T5854] hsr_slave_1: entered promiscuous mode
[   52.913970][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.916255][ T5854] Cannot create hsr debugfs directory
[   53.143315][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.152720][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.158571][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.168798][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.199917][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.211916][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.222397][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.225141][ T5859] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.228123][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.230587][ T5859] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.236155][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.247490][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.256972][  T502] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.260833][  T502] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.294069][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.309212][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.315380][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.321356][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.363317][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.381202][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   53.398653][  T502] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.401222][  T502] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.421751][  T502] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.424060][  T502] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.449046][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.474182][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.480745][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   53.490403][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.492698][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.502629][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.504877][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.524589][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   53.533652][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.535871][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.555757][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.558050][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.694666][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.700364][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.735796][ T5857] veth0_vlan: entered promiscuous mode
[   53.753578][ T5857] veth1_vlan: entered promiscuous mode
[   53.785180][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.787621][ T5859] veth0_vlan: entered promiscuous mode
[   53.805935][ T5857] veth0_macvtap: entered promiscuous mode
[   53.812305][ T5859] veth1_vlan: entered promiscuous mode
[   53.820968][ T5857] veth1_macvtap: entered promiscuous mode
[   53.849375][ T5854] veth0_vlan: entered promiscuous mode
[   53.862591][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.872750][ T5859] veth0_macvtap: entered promiscuous mode
[   53.876898][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.880705][ T5854] veth1_vlan: entered promiscuous mode
[   53.889302][ T5856] Bluetooth: hci0: command tx timeout
[   53.893725][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.896751][ T5857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.902268][ T5857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.904987][ T5857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.914094][ T5859] veth1_macvtap: entered promiscuous mode
[   53.928577][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.934314][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.940462][ T5854] veth0_macvtap: entered promiscuous mode
[   53.955194][ T5854] veth1_macvtap: entered promiscuous mode
[   53.961333][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.964099][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.966748][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.971445][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.978047][ T5856] Bluetooth: hci1: command tx timeout
[   53.996406][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.023258][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.048070][ T5856] Bluetooth: hci2: command tx timeout
[   54.052573][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.056110][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.062454][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.065577][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.071997][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.076821][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.115336][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.119251][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.119745][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.121742][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.159327][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.162546][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.175618][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   54.189168][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.193905][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.215191][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.217723][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.687466][ T5953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   55.235916][ T5960] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.39'.
[   55.761169][ T5994] syz.0.53 uses obsolete (PF_INET,SOCK_PACKET)
[   55.968079][ T5856] Bluetooth: hci0: command tx timeout
[   56.048083][ T5856] Bluetooth: hci1: command tx timeout
[   56.128253][   T54] Bluetooth: hci2: command tx timeout
[   56.193468][ T6019] sctp: [Deprecated]: syz.1.66 (pid 6019) Use of int in max_burst socket option.
[   56.193468][ T6019] Use struct sctp_assoc_value instead
[   56.228391][ T6027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'.
[   56.253611][ T6030] ieee802154 phy0 wpan0: encryption failed: -22
[   57.232675][ T6055] IPv6: Can't replace route, no match found
[   57.437772][ T6063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.80'.
[   57.610087][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'.
[   57.692013][ T6070] macvlan2: entered promiscuous mode
[   57.693823][ T6070] macvlan2: entered allmulticast mode
[   57.952899][ T6076] Zero length message leads to an empty skb
[   58.051729][   T54] Bluetooth: hci0: command tx timeout
[   58.128081][   T54] Bluetooth: hci1: command tx timeout
[   58.208297][   T54] Bluetooth: hci2: command 0x040f tx timeout
[   58.514857][ T6111] netlink: 204 bytes leftover after parsing attributes in process `syz.1.102'.
[   58.719713][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'.
[   58.722832][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'.
[   58.912962][ T6136] netlink: 240 bytes leftover after parsing attributes in process `syz.2.113'.
[   58.971877][ T6140] warning: `syz.2.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.032459][ T6142] netlink: 'syz.2.116': attribute type 2 has an invalid length.
[   59.034612][ T6144] netlink: 10 bytes leftover after parsing attributes in process `syz.0.117'.
[   59.080631][ T6146] netlink: 'syz.0.118': attribute type 4 has an invalid length.
[   59.905739][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'.
[   60.026748][ T6175] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 45972 - 0
[   60.033384][ T6175] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 45972 - 0
[   60.039291][ T6175] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 45972 - 0
[   60.042996][ T6175] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 45972 - 0
[   60.046620][ T6175] geneve2: entered promiscuous mode
[   60.049545][ T6175] geneve2: entered allmulticast mode
[   60.086561][ T5863] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[   60.139418][ T5856] Bluetooth: hci0: command tx timeout
[   60.208078][ T5856] Bluetooth: hci1: command tx timeout
[   60.298515][ T5856] Bluetooth: hci2: command 0x040f tx timeout
[   61.010032][ T6233] __nla_validate_parse: 2 callbacks suppressed
[   61.010042][ T6233] netlink: 44 bytes leftover after parsing attributes in process `syz.2.153'.
[   61.017991][ T6233] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   61.041526][ T6235] syzkaller0: entered promiscuous mode
[   61.043315][ T6235] syzkaller0: entered allmulticast mode
[   61.095236][ T6243] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.239226][ T6247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.160'.
[   61.806056][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'.
[   61.948914][ T6255] netlink: 132 bytes leftover after parsing attributes in process `syz.1.164'.
[   61.990052][ T6270] Illegal XDP return value 4294967274 on prog  (id 48) dev N/A, expect packet loss!
[   62.368886][ T5856] Bluetooth: hci2: command 0x040f tx timeout
[   62.503072][ T6297] netlink: 256 bytes leftover after parsing attributes in process `syz.1.182'.
[   62.505976][ T6297] netlink: 72 bytes leftover after parsing attributes in process `syz.1.182'.
[   62.714088][ T6309] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.188'.
[   62.717149][ T6309] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.188'.
[   63.077284][ T6353] netlink: 'syz.2.203': attribute type 1 has an invalid length.
[   63.196713][ T6361] syzkaller1: entered promiscuous mode
[   63.201716][ T6361] syzkaller1: entered allmulticast mode
[   63.596559][ T6397] tap0: tun_chr_ioctl cmd 1074025676
[   63.600961][ T6397] tap0: owner set to 0
[   63.643186][ T6401] netlink: 1 bytes leftover after parsing attributes in process `syz.1.226'.
[   63.929134][ T6432] netlink: 48 bytes leftover after parsing attributes in process `syz.1.239'.
[   64.665134][ T6488] tap0: tun_chr_ioctl cmd 1074025677
[   64.667071][ T6488] tap0: linktype set to 776
[   65.062418][ T6524] macvlan2: entered allmulticast mode
[   65.064225][ T6524] veth1_vlan: entered allmulticast mode
[   65.067232][ T6524] veth1_vlan: left allmulticast mode
[   65.263835][ T6473] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   65.313744][ T6533] netlink: 'syz.2.281': attribute type 1 has an invalid length.
[   65.341052][ T6535] netlink: 'syz.0.282': attribute type 21 has an invalid length.
[   65.473978][ T6551] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   65.491313][ T6553] netlink: 'syz.2.285': attribute type 13 has an invalid length.
[   65.494854][ T6553] netlink: 'syz.2.285': attribute type 17 has an invalid length.
[   65.533345][ T6553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.376472][ T6633] __nla_validate_parse: 5 callbacks suppressed
[   66.376483][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'.
[   66.384140][ T6631] netlink: 228 bytes leftover after parsing attributes in process `syz.1.323'.
[   66.450730][   T54] Bluetooth: hci0: command 0x0401 tx timeout
[   66.588058][ T6655] netlink: 'syz.1.334': attribute type 1 has an invalid length.
[   66.602041][ T6655] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.616323][ T6655] bond1: (slave ip6gretap1): making interface the new active one
[   66.624056][ T6655] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   66.645413][ T6655] veth3: entered promiscuous mode
[   66.649610][ T6655] bond1: (slave veth3): Enslaving as an active interface with a down link
[   66.657251][ T6655] erspan0: entered allmulticast mode
[   66.665583][ T6655] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   66.733824][ T6661] netlink: 'syz.1.337': attribute type 21 has an invalid length.
[   66.736380][ T6661] netlink: 'syz.1.337': attribute type 22 has an invalid length.
[   66.739958][ T6661] netlink: 'syz.1.337': attribute type 23 has an invalid length.
[   66.742851][ T6661] netlink: 'syz.1.337': attribute type 25 has an invalid length.
[   66.745372][ T6661] netlink: 96 bytes leftover after parsing attributes in process `syz.1.337'.
[   66.807588][ T6665] erspan0: left allmulticast mode
[   66.817011][ T6665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.209036][   T10] cfg80211: failed to load regulatory.db
[   67.297102][ T6698] SET target dimension over the limit!
[   68.004549][ T6762] netlink: 'syz.1.375': attribute type 1 has an invalid length.
[   68.008417][ T6762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.375'.
[   68.607088][ T6807] netlink: 244 bytes leftover after parsing attributes in process `syz.1.395'.
[   68.827919][ T6829] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   68.876720][ T6836] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[   68.920402][ T6844] tipc: Started in network mode
[   68.922645][ T6844] tipc: Node identity ac1414aa, cluster identity 4711
[   68.925097][ T6844] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   69.205479][ T6882] sctp: [Deprecated]: syz.0.431 (pid 6882) Use of int in maxseg socket option.
[   69.205479][ T6882] Use struct sctp_assoc_value instead
[   69.522855][ T6927] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   69.701467][ T6950] Unknown options in mask 700
[   69.826582][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'.
[   69.832245][ T6962] netlink: 40 bytes leftover after parsing attributes in process `syz.1.470'.
[   69.935856][ T6978] netlink: 224 bytes leftover after parsing attributes in process `syz.1.478'.
[   70.441017][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'.
[   70.509008][ T7047] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.523339][ T7047] syzkaller0: entered promiscuous mode
[   70.525160][ T7047] syzkaller0: entered allmulticast mode
[   70.561197][ T7047] tipc: Resetting bearer <eth:syzkaller0>
[   70.577019][ T7046] tipc: Resetting bearer <eth:syzkaller0>
[   70.587084][ T7046] tipc: Disabling bearer <eth:syzkaller0>
[   70.631775][ T7057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.514'.
[   70.700879][ T7062] ieee802154 phy0 wpan0: encryption failed: -22
[   70.730324][ T7049] validate_nla: 8 callbacks suppressed
[   70.730335][ T7049] netlink: 'syz.1.511': attribute type 2 has an invalid length.
[   70.930760][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.934179][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.126128][ T7108] netlink: 'syz.2.538': attribute type 13 has an invalid length.
[   71.132542][ T7108] netlink: 'syz.2.538': attribute type 17 has an invalid length.
[   71.149046][ T7108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   71.260132][ T7108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.315267][ T7108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.390328][ T7125] nbd: socks must be embedded in a SOCK_ITEM attr
[   71.406296][ T7108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.611176][ T7144] sctp: [Deprecated]: syz.0.554 (pid 7144) Use of int in max_burst socket option deprecated.
[   71.611176][ T7144] Use struct sctp_assoc_value instead
[   71.717107][ T7156] netlink: 'syz.1.560': attribute type 12 has an invalid length.
[   71.981425][ T7181] __nla_validate_parse: 4 callbacks suppressed
[   71.981438][ T7181] netlink: 304 bytes leftover after parsing attributes in process `syz.2.572'.
[   72.025162][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'.
[   72.097233][ T7187] tipc: Started in network mode
[   72.099013][ T7187] tipc: Node identity 8e8c1d6d6666, cluster identity 4711
[   72.101397][ T7187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.104937][ T7187] syzkaller0: entered promiscuous mode
[   72.106823][ T7187] syzkaller0: entered allmulticast mode
[   72.116614][ T7187] tipc: Resetting bearer <eth:syzkaller0>
[   72.123900][ T7186] tipc: Resetting bearer <eth:syzkaller0>
[   72.134143][ T7186] tipc: Disabling bearer <eth:syzkaller0>
[   72.764982][ T7201] netlink: 'syz.1.581': attribute type 12 has an invalid length.
[   72.819267][ T7206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.583'.
[   72.827571][ T7206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.583'.
[   72.918683][ T7211] 
[   72.919591][ T7211] ======================================================
[   72.921852][ T7211] WARNING: possible circular locking dependency detected
[   72.924221][ T7211] 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 Not tainted
[   72.927887][ T7211] ------------------------------------------------------
[   72.930224][ T7211] syz.0.585/7211 is trying to acquire lock:
[   72.932201][ T7211] ffff8881083d8988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   72.935800][ T7211] 
[   72.935800][ T7211] but task is already holding lock:
[   72.938261][ T7211] ffff8881083d8a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[   72.941358][ T7211] 
[   72.941358][ T7211] which lock already depends on the new lock.
[   72.941358][ T7211] 
[   72.944902][ T7211] 
[   72.944902][ T7211] the existing dependency chain (in reverse order) is:
[   72.947954][ T7211] 
[   72.947954][ T7211] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[   72.950564][ T7211]        lock_acquire+0x120/0x360
[   72.952274][ T7211]        __mutex_lock+0x182/0xe80
[   72.954002][ T7211]        refcount_dec_and_mutex_lock+0x30/0xa0
[   72.956058][ T7211]        nbd_config_put+0x2c/0x790
[   72.957844][ T7211]        nbd_release+0xfe/0x140
[   72.959523][ T7211]        bdev_release+0x536/0x650
[   72.961242][ T7211]        blkdev_release+0x15/0x20
[   72.962976][ T7211]        __fput+0x44c/0xa70
[   72.964515][ T7211]        fput_close_sync+0x119/0x200
[   72.966304][ T7211]        __x64_sys_close+0x7f/0x110
[   72.968072][ T7211]        do_syscall_64+0xfa/0x3b0
[   72.969758][ T7211]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.971894][ T7211] 
[   72.971894][ T7211] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[   72.974481][ T7211]        lock_acquire+0x120/0x360
[   72.976133][ T7211]        __mutex_lock+0x182/0xe80
[   72.977753][ T7211]        __del_gendisk+0x129/0x9e0
[   72.979505][ T7211]        del_gendisk+0xe8/0x160
[   72.981137][ T7211]        nbd_dev_remove_work+0x47/0xe0
[   72.982993][ T7211]        process_scheduled_works+0xae1/0x17b0
[   72.985074][ T7211]        worker_thread+0x8a0/0xda0
[   72.986827][ T7211]        kthread+0x711/0x8a0
[   72.988366][ T7211]        ret_from_fork+0x3fc/0x770
[   72.990118][ T7211]        ret_from_fork_asm+0x1a/0x30
[   72.991872][ T7211] 
[   72.991872][ T7211] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[   72.994834][ T7211]        validate_chain+0xb9b/0x2140
[   72.996683][ T7211]        __lock_acquire+0xab9/0xd20
[   72.998404][ T7211]        lock_acquire+0x120/0x360
[   73.000155][ T7211]        down_write+0x96/0x1f0
[   73.001781][ T7211]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   73.003931][ T7211]        nbd_start_device+0x16c/0xac0
[   73.005798][ T7211]        nbd_genl_connect+0x135b/0x18f0
[   73.007609][ T7211]        genl_family_rcv_msg_doit+0x215/0x300
[   73.009702][ T7211]        genl_rcv_msg+0x60e/0x790
[   73.011435][ T7211]        netlink_rcv_skb+0x208/0x470
[   73.013251][ T7211]        genl_rcv+0x28/0x40
[   73.014802][ T7211]        netlink_unicast+0x75c/0x8e0
[   73.016543][ T7211]        netlink_sendmsg+0x805/0xb30
[   73.018401][ T7211]        __sock_sendmsg+0x21c/0x270
[   73.020164][ T7211]        ____sys_sendmsg+0x505/0x830
[   73.022013][ T7211]        ___sys_sendmsg+0x21f/0x2a0
[   73.023830][ T7211]        __x64_sys_sendmsg+0x19b/0x260
[   73.025766][ T7211]        do_syscall_64+0xfa/0x3b0
[   73.027484][ T7211]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.029732][ T7211] 
[   73.029732][ T7211] other info that might help us debug this:
[   73.029732][ T7211] 
[   73.032973][ T7211] Chain exists of:
[   73.032973][ T7211]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[   73.032973][ T7211] 
[   73.037503][ T7211]  Possible unsafe locking scenario:
[   73.037503][ T7211] 
[   73.039957][ T7211]        CPU0                    CPU1
[   73.041726][ T7211]        ----                    ----
[   73.043482][ T7211]   lock(&nbd->config_lock);
[   73.045076][ T7211]                                lock(&disk->open_mutex);
[   73.047413][ T7211]                                lock(&nbd->config_lock);
[   73.049765][ T7211]   lock(&set->update_nr_hwq_lock);
[   73.051688][ T7211] 
[   73.051688][ T7211]  *** DEADLOCK ***
[   73.051688][ T7211] 
[   73.054395][ T7211] 3 locks held by syz.0.585/7211:
[   73.056042][ T7211]  #0: ffffffff8f581f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[   73.058878][ T7211]  #1: ffffffff8f581d48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[   73.061865][ T7211]  #2: ffff8881083d8a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[   73.065196][ T7211] 
[   73.065196][ T7211] stack backtrace:
[   73.067182][ T7211] CPU: 0 UID: 0 PID: 7211 Comm: syz.0.585 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[   73.067194][ T7211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.067200][ T7211] Call Trace:
[   73.067205][ T7211]  <TASK>
[   73.067210][ T7211]  dump_stack_lvl+0x189/0x250
[   73.067222][ T7211]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.067231][ T7211]  ? __pfx__printk+0x10/0x10
[   73.067242][ T7211]  ? print_lock_name+0xde/0x100
[   73.067252][ T7211]  print_circular_bug+0x2ee/0x310
[   73.067264][ T7211]  check_noncircular+0x134/0x160
[   73.067275][ T7211]  validate_chain+0xb9b/0x2140
[   73.067289][ T7211]  __lock_acquire+0xab9/0xd20
[   73.067298][ T7211]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   73.067307][ T7211]  lock_acquire+0x120/0x360
[   73.067314][ T7211]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   73.067325][ T7211]  ? kernfs_add_one+0xf0/0x520
[   73.067333][ T7211]  down_write+0x96/0x1f0
[   73.067343][ T7211]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   73.067351][ T7211]  ? __pfx_down_write+0x10/0x10
[   73.067359][ T7211]  ? kernfs_add_one+0xf0/0x520
[   73.067366][ T7211]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   73.067375][ T7211]  ? sysfs_add_file_mode_ns+0x238/0x300
[   73.067385][ T7211]  ? sysfs_add_file_mode_ns+0x259/0x300
[   73.067395][ T7211]  nbd_start_device+0x16c/0xac0
[   73.067405][ T7211]  ? __nla_parse+0x40/0x60
[   73.067413][ T7211]  ? device_create_file+0xf4/0x1c0
[   73.067423][ T7211]  nbd_genl_connect+0x135b/0x18f0
[   73.067439][ T7211]  ? __pfx_nbd_genl_connect+0x10/0x10
[   73.067449][ T7211]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   73.067463][ T7211]  genl_family_rcv_msg_doit+0x215/0x300
[   73.067475][ T7211]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   73.067491][ T7211]  genl_rcv_msg+0x60e/0x790
[   73.067502][ T7211]  ? __pfx_genl_rcv_msg+0x10/0x10
[   73.067513][ T7211]  ? __pfx_nbd_genl_connect+0x10/0x10
[   73.067531][ T7211]  netlink_rcv_skb+0x208/0x470
[   73.067545][ T7211]  ? __pfx_genl_rcv_msg+0x10/0x10
[   73.067556][ T7211]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   73.067575][ T7211]  ? down_read+0x1ad/0x2e0
[   73.067589][ T7211]  genl_rcv+0x28/0x40
[   73.067600][ T7211]  netlink_unicast+0x75c/0x8e0
[   73.067613][ T7211]  netlink_sendmsg+0x805/0xb30
[   73.067624][ T7211]  ? __pfx_netlink_sendmsg+0x10/0x10
[   73.067660][ T7211]  ? aa_sock_msg_perm+0x94/0x160
[   73.067671][ T7211]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   73.067682][ T7211]  ? __pfx_netlink_sendmsg+0x10/0x10
[   73.067693][ T7211]  __sock_sendmsg+0x21c/0x270
[   73.067702][ T7211]  ____sys_sendmsg+0x505/0x830
[   73.067715][ T7211]  ? __pfx_____sys_sendmsg+0x10/0x10
[   73.067728][ T7211]  ? import_iovec+0x74/0xa0
[   73.067737][ T7211]  ___sys_sendmsg+0x21f/0x2a0
[   73.067748][ T7211]  ? __pfx____sys_sendmsg+0x10/0x10
[   73.067763][ T7211]  ? __fget_files+0x2a/0x420
[   73.067770][ T7211]  ? __fget_files+0x3a0/0x420
[   73.067777][ T7211]  __x64_sys_sendmsg+0x19b/0x260
[   73.067787][ T7211]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   73.067798][ T7211]  ? rcu_is_watching+0x15/0xb0
[   73.067807][ T7211]  ? do_syscall_64+0xbe/0x3b0
[   73.067816][ T7211]  do_syscall_64+0xfa/0x3b0
[   73.067823][ T7211]  ? lockdep_hardirqs_on+0x9c/0x150
[   73.067829][ T7211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.067838][ T7211]  ? exc_page_fault+0x9f/0xf0
[   73.067850][ T7211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.067862][ T7211] RIP: 0033:0x7efc20d8e9a9
[   73.067872][ T7211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.067882][ T7211] RSP: 002b:00007efc21c02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   73.067897][ T7211] RAX: ffffffffffffffda RBX: 00007efc20fb5fa0 RCX: 00007efc20d8e9a9
[   73.067906][ T7211] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005
[   73.067915][ T7211] RBP: 00007efc20e10d69 R08: 0000000000000000 R09: 0000000000000000
[   73.067924][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.067931][ T7211] R13: 0000000000000000 R14: 00007efc20fb5fa0 R15: 00007ffd435628c8
[   73.067943][ T7211]  </TASK>
[   73.249428][ T7211] nbd0: detected capacity change from 0 to 127
[   73.251610][ T7212] block nbd0: NBD_DISCONNECT
[   73.254473][ T7212] block nbd0: Disconnected due to user request.
[   73.257007][ T7212] block nbd0: shutting down sockets

VM DIAGNOSIS:
17:59:18  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001361 RDI=0000000000001362 RBP=00000000000003f8 RSP=ffffc90002bbe710
R8 =ffff888107428237 R9 =1ffff11020e85046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18a2 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efc21c026c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efc20d74a00 CR3=000000002842c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f1e05386478 00007f1e05386450 XMM03=00007f1e05386488 00007f1e05386480
XMM04=00007f1e05eed100 00007f1e05386440 XMM05=00007f1e05386458 00007f1e053864a0
XMM06=00007f1e05386498 00007f1e05386490 XMM07=00007f1e05386488 00007f1e05386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f1e05211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=89689fce1d48fd00 RBX=ffffffff81976a48 RCX=89689fce1d48fd00 RDX=0000000000000001
RSI=ffffffff8be28be0 RDI=ffffffff81976a48 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d6f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d3000
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001ac0 CR3=000000010f8bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
