last executing test programs:

19.220240471s ago: executing program 0 (id=349):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10)

19.170304906s ago: executing program 0 (id=351):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
listen(0xffffffffffffffff, 0xffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004)

18.92065368s ago: executing program 0 (id=359):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, 0x0, 0x0)

14.229086199s ago: executing program 0 (id=359):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, 0x0, 0x0)

8.569582375s ago: executing program 0 (id=359):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, 0x0, 0x0)

3.169125707s ago: executing program 0 (id=359):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, 0x0, 0x0)

599.724311ms ago: executing program 1 (id=800):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x46}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x4010)

599.575658ms ago: executing program 2 (id=801):
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x0, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x3, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffb, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0xe, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x82, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0x2c, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x9, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x7ffffffc, 0xff, 0x7, 0x4da8e6f3, 0x5, 0xfffe, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}})

599.425256ms ago: executing program 2 (id=802):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

549.718631ms ago: executing program 2 (id=803):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0x2000000, 0x9, 0x0, &(0x7f0000000180)="91b90de4962e337161", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

549.315154ms ago: executing program 1 (id=804):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)

499.03528ms ago: executing program 1 (id=805):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@hopopts_2292={{0x18, 0x29, 0xb, {0x9b}}}, @pktinfo={{0x19, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}}}}], 0x68}, 0x0)

498.819418ms ago: executing program 2 (id=806):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000680)="451a67771f25a3", 0x7}], 0x1)

498.677837ms ago: executing program 1 (id=807):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50)

426.446155ms ago: executing program 2 (id=808):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)

360.216196ms ago: executing program 1 (id=809):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x190}}}}]}, 0x38}}, 0x0)

6.547771ms ago: executing program 1 (id=810):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2b, 0x10000, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xf}, @TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x5c}}, 0x0)

0s ago: executing program 2 (id=816):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x1, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x80, 0x41, 0x4, [0x2, 0xd, 0xe18, 0x172d, 0x3, 0x7, 0x6, 0x3]}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52548' (ED25519) to the list of known hosts.
syzkaller login: [   40.758766][ T5758] cgroup: Unknown subsys name 'net'
[   40.874449][ T5758] cgroup: Unknown subsys name 'cpuset'
[   40.878165][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.278631][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.507432][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.511368][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.514071][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.516981][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.519768][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.527766][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.532595][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.537850][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.540918][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.543778][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.567797][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.570669][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.573787][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.576532][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.579047][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.724680][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   45.814962][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   45.831715][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   45.864341][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.867048][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.869370][ T5834] bridge_slave_0: entered allmulticast mode
[   45.872893][ T5834] bridge_slave_0: entered promiscuous mode
[   45.900740][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.903545][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.905789][ T5834] bridge_slave_1: entered allmulticast mode
[   45.908401][ T5834] bridge_slave_1: entered promiscuous mode
[   45.944087][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.969437][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.972537][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.974796][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.977035][ T5838] bridge_slave_0: entered allmulticast mode
[   45.979753][ T5838] bridge_slave_0: entered promiscuous mode
[   45.983355][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.985563][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.987814][ T5830] bridge_slave_0: entered allmulticast mode
[   45.990467][ T5830] bridge_slave_0: entered promiscuous mode
[   45.994249][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.996483][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.998706][ T5830] bridge_slave_1: entered allmulticast mode
[   46.001312][ T5830] bridge_slave_1: entered promiscuous mode
[   46.018425][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.020684][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.023225][ T5838] bridge_slave_1: entered allmulticast mode
[   46.026048][ T5838] bridge_slave_1: entered promiscuous mode
[   46.044687][ T5834] team0: Port device team_slave_0 added
[   46.061664][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.066371][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.077587][ T5834] team0: Port device team_slave_1 added
[   46.080759][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.105636][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.110304][ T5830] team0: Port device team_slave_0 added
[   46.113206][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.115456][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.124306][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.136039][ T5830] team0: Port device team_slave_1 added
[   46.146067][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.148353][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.156846][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.168435][ T5838] team0: Port device team_slave_0 added
[   46.182939][ T5838] team0: Port device team_slave_1 added
[   46.185540][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.187769][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.196040][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.216284][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.218504][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.226881][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.238080][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.240535][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.249660][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.273960][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.276191][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.284458][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.301519][ T5830] hsr_slave_0: entered promiscuous mode
[   46.304530][ T5830] hsr_slave_1: entered promiscuous mode
[   46.309640][ T5834] hsr_slave_0: entered promiscuous mode
[   46.312790][ T5834] hsr_slave_1: entered promiscuous mode
[   46.314932][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.317423][ T5834] Cannot create hsr debugfs directory
[   46.366510][ T5838] hsr_slave_0: entered promiscuous mode
[   46.368768][ T5838] hsr_slave_1: entered promiscuous mode
[   46.371183][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.374584][ T5838] Cannot create hsr debugfs directory
[   46.555015][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.560826][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.566796][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.575632][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.599390][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.612416][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.623104][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.627601][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.634366][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.636774][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.639514][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.641976][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.674664][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.682643][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.685079][ T5834] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.687511][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.689794][ T5834] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.694650][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.700478][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.717915][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.735519][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.738580][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.743131][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.746317][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.758829][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.786552][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   46.794097][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.796498][ T3644] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.805655][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.813122][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.815396][ T3644] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.839211][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   46.855995][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.858493][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.864542][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.866875][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.893663][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.934928][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   46.943473][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.945751][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.963560][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.965878][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.997608][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.025607][ T5830] veth0_vlan: entered promiscuous mode
[   47.039525][ T5830] veth1_vlan: entered promiscuous mode
[   47.058365][ T5830] veth0_macvtap: entered promiscuous mode
[   47.064850][ T5830] veth1_macvtap: entered promiscuous mode
[   47.075577][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.081117][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.085645][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.088429][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.091124][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.095670][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.117682][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.174362][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.176887][ T5834] veth0_vlan: entered promiscuous mode
[   47.185119][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.187747][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.193559][ T5834] veth1_vlan: entered promiscuous mode
[   47.224981][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.227502][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.239392][ T5834] veth0_macvtap: entered promiscuous mode
[   47.244753][ T5834] veth1_macvtap: entered promiscuous mode
[   47.254771][ T5838] veth0_vlan: entered promiscuous mode
[   47.258539][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.263814][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.267543][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.270363][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.273996][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.276783][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.296443][ T5838] veth1_vlan: entered promiscuous mode
[   47.310637][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.355071][ T5838] veth0_macvtap: entered promiscuous mode
[   47.364457][ T5838] veth1_macvtap: entered promiscuous mode
[   47.376342][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.381596][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.385760][ T5895] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[   47.398556][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.416040][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.425461][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.428189][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.430900][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.437860][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.446715][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.449598][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.527082][ T4552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.531502][ T4552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.534717][ T5836] Bluetooth: hci0: command tx timeout
[   47.561593][ T4552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.569210][ T4552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.615512][ T5220] Bluetooth: hci1: command tx timeout
[   47.617536][ T5836] Bluetooth: hci2: command tx timeout
[   47.644696][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   47.824190][ T5927] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.110228][ T5936] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[   48.178829][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'.
[   48.227670][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[   48.327520][ T5954] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.483782][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'.
[   48.620029][ T5976] Zero length message leads to an empty skb
[   48.734512][ T5983] netlink: 'syz.0.42': attribute type 1 has an invalid length.
[   48.851434][ T5871] IPVS: starting estimator thread 0...
[   48.954485][ T5999] IPVS: using max 80 ests per chain, 192000 per kthread
[   49.080611][ T6025] warning: `syz.0.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.130347][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'.
[   49.141147][ T6034] netlink: 56 bytes leftover after parsing attributes in process `syz.0.59'.
[   49.401677][ T6064] netlink: 'syz.0.71': attribute type 16 has an invalid length.
[   49.407434][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.72'.
[   49.409195][ T6064] netlink: 'syz.0.71': attribute type 17 has an invalid length.
[   49.429496][ T6064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   49.518664][ T6080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'.
[   49.612194][ T5836] Bluetooth: hci0: command tx timeout
[   49.692040][ T5220] Bluetooth: hci1: command tx timeout
[   49.694194][ T5836] Bluetooth: hci2: command tx timeout
[   49.699279][ T6105] ieee802154 phy0 wpan0: encryption failed: -22
[   49.869437][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'.
[   49.996955][ T6145] netlink: 248 bytes leftover after parsing attributes in process `syz.2.106'.
[   50.561490][ T6191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   50.924302][ T6214] ieee802154 phy0 wpan0: encryption failed: -22
[   50.939526][ T6202] netlink: 'syz.1.117': attribute type 13 has an invalid length.
[   50.949617][ T6202] netlink: 'syz.1.117': attribute type 17 has an invalid length.
[   50.986955][ T6202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   51.093781][ T6202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.155191][ T6202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.220999][ T6202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.326283][ T6244] batadv1: entered promiscuous mode
[   51.479944][ T6248] syz_tun: entered promiscuous mode
[   51.481813][ T6248] vlan2: entered promiscuous mode
[   51.692888][ T5836] Bluetooth: hci0: command tx timeout
[   51.772577][ T5220] Bluetooth: hci1: command tx timeout
[   51.774517][ T5836] Bluetooth: hci2: command tx timeout
[   52.411120][ T6312] Illegal XDP return value 657893848 on prog  (id 26) dev N/A, expect packet loss!
[   52.471623][ T6257] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   52.657812][ T6336] vcan0: tx drop: invalid da for name 0x0000000000000002
[   52.727553][ T6340] bond0: entered promiscuous mode
[   52.729247][ T6340] bond_slave_0: entered promiscuous mode
[   52.731114][ T6340] bond_slave_1: entered promiscuous mode
[   52.934220][ T6363] __nla_validate_parse: 1 callbacks suppressed
[   52.934231][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'.
[   53.166832][ T6379] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[   53.402358][ T6391] syz.1.199 (6391) used greatest stack depth: 19048 bytes left
[   53.459927][ T6395] netlink: 'syz.1.200': attribute type 1 has an invalid length.
[   53.485912][ T6395] netlink: 224 bytes leftover after parsing attributes in process `syz.1.200'.
[   53.530186][ T6396] xt_CT: No such helper "snmp"
[   53.772023][ T5836] Bluetooth: hci0: command tx timeout
[   53.851981][ T5836] Bluetooth: hci2: command tx timeout
[   53.852080][ T5220] Bluetooth: hci1: command tx timeout
[   53.870891][ T6423] veth1_to_team: entered promiscuous mode
[   53.985590][ T6434] netlink: 240 bytes leftover after parsing attributes in process `syz.1.209'.
[   54.275905][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.424625][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'.
[   54.583423][ T6482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'.
[   54.586385][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'.
[   54.859655][ T6498] ieee802154 phy1 wpan1: encryption failed: -22
[   55.247373][ T6529] team_slave_0: entered promiscuous mode
[   55.249297][ T6529] team_slave_1: entered promiscuous mode
[   55.255290][ T6529] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   55.257672][ T6529] team0: Device macvtap1 is already an upper device of the team interface
[   55.263234][ T6529] team_slave_0: left promiscuous mode
[   55.265042][ T6529] team_slave_1: left promiscuous mode
[   55.483170][ T6543] netlink: 'syz.0.264': attribute type 11 has an invalid length.
[   56.269462][ T6577] netlink: del zone limit has 4 unknown bytes
[   56.667287][ T6612] syz_tun: entered allmulticast mode
[   56.672249][ T6611] syz_tun: left allmulticast mode
[   56.780469][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'.
[   57.204982][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'.
[   57.598362][ T6696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.330'.
[   57.713304][ T6708] sctp: [Deprecated]: syz.2.335 (pid 6708) Use of int in max_burst socket option deprecated.
[   57.713304][ T6708] Use struct sctp_assoc_value instead
[   58.145809][ T6746] syz.2.354 uses obsolete (PF_INET,SOCK_PACKET)
[   58.295853][ T5879] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.343772][ T5879] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.393956][ T5879] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.448524][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'.
[   58.467426][ T5879] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.501183][ T6765] Bluetooth: MGMT ver 1.23
[   58.541669][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.545570][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.548446][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.555706][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.558627][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.596374][ T5879] bridge_slave_1: left promiscuous mode
[   58.598862][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.610136][ T5879] bridge_slave_0: left allmulticast mode
[   58.612209][ T5879] bridge_slave_0: left promiscuous mode
[   58.614230][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.905552][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.908690][ T5879] bond_slave_0: left promiscuous mode
[   58.913781][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.917238][ T5879] bond_slave_1: left promiscuous mode
[   58.919689][ T5879] bond0 (unregistering): Released all slaves
[   59.060770][ T6768] chnl_net:caif_netlink_parms(): no params data found
[   59.110881][ T6814] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   59.140098][ T5879] hsr_slave_0: left promiscuous mode
[   59.144346][ T5879] hsr_slave_1: left promiscuous mode
[   59.146503][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.149040][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.152291][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.154743][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.165160][ T5879] veth1_macvtap: left promiscuous mode
[   59.167142][ T5879] veth0_macvtap: left promiscuous mode
[   59.169108][ T5879] veth1_vlan: left promiscuous mode
[   59.171344][ T5879] veth0_vlan: left promiscuous mode
[   59.389718][ T5879] team0 (unregistering): Port device team_slave_1 removed
[   59.406796][ T5879] team0 (unregistering): Port device team_slave_0 removed
[   59.617805][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.620033][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.629197][ T6768] bridge_slave_0: entered allmulticast mode
[   59.631800][ T6768] bridge_slave_0: entered promiscuous mode
[   59.637231][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.639553][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.641739][ T6768] bridge_slave_1: entered allmulticast mode
[   59.644932][ T6823] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   59.648214][ T6768] bridge_slave_1: entered promiscuous mode
[   59.681805][ T6768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.686731][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'.
[   59.687679][ T6768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.713642][ T6826] bond_slave_0: entered promiscuous mode
[   59.715559][ T6826] bond_slave_1: entered promiscuous mode
[   59.717402][ T6826] macsec1: entered allmulticast mode
[   59.719112][ T6826] bond0: entered allmulticast mode
[   59.720697][ T6826] bond_slave_0: entered allmulticast mode
[   59.734726][ T6826] bond_slave_1: entered allmulticast mode
[   59.739499][ T6826] bond0: left allmulticast mode
[   59.741365][ T6826] bond_slave_0: left allmulticast mode
[   59.744241][ T6826] bond_slave_1: left allmulticast mode
[   59.746494][ T6826] bond_slave_0: left promiscuous mode
[   59.748328][ T6826] bond_slave_1: left promiscuous mode
[   59.751480][ T6829] tipc: Failed to remove unknown binding: 66,3,3/0:4110579013/4110579014
[   59.785678][ T6768] team0: Port device team_slave_0 added
[   59.793696][ T6768] team0: Port device team_slave_1 added
[   59.823142][ T6831] xt_CT: No such helper "netbios-ns"
[   59.823551][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.827069][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.841341][ T6768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.852288][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.854417][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.856868][ T6836] sctp: [Deprecated]: syz.1.391 (pid 6836) Use of struct sctp_assoc_value in delayed_ack socket option.
[   59.856868][ T6836] Use struct sctp_sack_info instead
[   59.867794][ T6768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.915856][ T6768] hsr_slave_0: entered promiscuous mode
[   59.918136][ T6768] hsr_slave_1: entered promiscuous mode
[   60.124809][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.127363][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.209656][ T6852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.226300][ T6852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.296611][ T6852] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.299556][ T6852] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.303005][ T6852] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.305930][ T6852] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.510493][ T6879] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   60.534119][ T6768] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.546680][ T6768] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.552612][ T6768] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.564782][ T6768] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.585265][ T5836] Bluetooth: hci0: command tx timeout
[   60.634539][ T6768] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.636728][ T6902] netlink: 'syz.2.420': attribute type 7 has an invalid length.
[   60.639313][ T6902] netlink: 'syz.2.420': attribute type 8 has an invalid length.
[   60.649423][ T6902] netlink: 'syz.2.420': attribute type 15 has an invalid length.
[   60.677196][ T6768] 8021q: adding VLAN 0 to HW filter on device team0
[   60.682531][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.684777][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.695202][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.697577][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.815773][ T6768] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.840497][ T6768] veth0_vlan: entered promiscuous mode
[   60.846354][ T6768] veth1_vlan: entered promiscuous mode
[   60.861730][ T6768] veth0_macvtap: entered promiscuous mode
[   60.868437][ T6768] veth1_macvtap: entered promiscuous mode
[   60.877915][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.885315][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.890067][ T6768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.893344][ T6768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.897133][ T6768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.899911][ T6768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.939443][ T4552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.944906][ T4552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.958130][ T4552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.960543][ T4552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.170412][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.174189][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.244810][ T6980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.847034][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'.
[   63.035407][ T5680] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.053052][ T7000] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.459'.
[   63.056282][ T6999] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.459'.
[   63.184317][ T7007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.462'.
[   63.226412][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.229323][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.233133][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.236231][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.238878][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.368602][ T7010] chnl_net:caif_netlink_parms(): no params data found
[   63.429195][ T7010] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.432483][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.435270][ T7010] bridge_slave_0: entered allmulticast mode
[   63.438349][ T7010] bridge_slave_0: entered promiscuous mode
[   63.441795][ T7010] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.445717][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.448340][ T7010] bridge_slave_1: entered allmulticast mode
[   63.454136][ T7010] bridge_slave_1: entered promiscuous mode
[   63.479719][ T7010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.485650][ T7010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.527736][ T7010] team0: Port device team_slave_0 added
[   63.532829][ T7010] team0: Port device team_slave_1 added
[   63.561741][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.564455][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.576382][ T7010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.580727][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.583091][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.595311][ T7010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.650248][ T7010] hsr_slave_0: entered promiscuous mode
[   63.655458][ T7010] hsr_slave_1: entered promiscuous mode
[   63.657621][ T7010] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.660349][ T7010] Cannot create hsr debugfs directory
[   63.710127][ T7047] netlink: 240 bytes leftover after parsing attributes in process `syz.1.475'.
[   64.122708][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'.
[   64.220233][ T7118] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[   64.614882][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'.
[   64.617944][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'.
[   64.620786][ T7160] netlink: 52 bytes leftover after parsing attributes in process `syz.2.524'.
[   64.679802][ T5680] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.722495][ T5680] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.793846][ T5680] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.794598][ T7169] xt_CT: No such helper "pptp"
[   64.825256][ T7172] netlink: 92 bytes leftover after parsing attributes in process `syz.2.529'.
[   64.828304][ T7172] tc_dump_action: action bad kind
[   64.898810][ T5680] bridge_slave_1: left allmulticast mode
[   64.900710][ T5680] bridge_slave_1: left promiscuous mode
[   64.909776][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.915834][ T5680] bridge_slave_0: left allmulticast mode
[   64.917607][ T5680] bridge_slave_0: left promiscuous mode
[   64.919441][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.099563][ T5680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.104992][ T5680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.108663][ T5680] bond0 (unregistering): Released all slaves
[   65.138623][ T7190] macvlan0: entered promiscuous mode
[   65.144299][ T7190] netlink: 'syz.2.537': attribute type 1 has an invalid length.
[   65.147221][ T7190] netlink: 'syz.2.537': attribute type 2 has an invalid length.
[   65.293838][ T5220] Bluetooth: hci0: command tx timeout
[   65.346071][ T5680] hsr_slave_0: left promiscuous mode
[   65.348149][ T5680] hsr_slave_1: left promiscuous mode
[   65.353542][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.355825][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.364009][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.366368][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.376734][ T5680] veth1_macvtap: left promiscuous mode
[   65.378510][ T5680] veth0_macvtap: left promiscuous mode
[   65.382810][ T5680] veth1_vlan: left promiscuous mode
[   65.384710][ T5680] veth0_vlan: left promiscuous mode
[   65.598309][ T5680] team0 (unregistering): Port device team_slave_1 removed
[   65.615360][ T5680] team0 (unregistering): Port device team_slave_0 removed
[   65.898160][ T7010] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.903140][ T7010] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.907405][ T7010] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.911558][ T7010] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.993190][ T7010] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.003426][ T7010] 8021q: adding VLAN 0 to HW filter on device team0
[   66.008416][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.011016][ T3644] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.019557][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.022418][ T3644] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.119592][ T7010] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.148990][ T7010] veth0_vlan: entered promiscuous mode
[   66.156330][ T7010] veth1_vlan: entered promiscuous mode
[   66.173947][ T7010] veth0_macvtap: entered promiscuous mode
[   66.178816][ T7010] veth1_macvtap: entered promiscuous mode
[   66.187968][ T7010] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.194494][ T7010] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.199320][ T7010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.202421][ T7010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.205208][ T7010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.207956][ T7010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.250248][ T3644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.256602][ T3644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.269575][ T4522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.273211][ T4522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.754941][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'.
[   66.770067][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.384696][ T7288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.575'.
[   67.457651][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'.
[   67.545270][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'.
[   67.889939][ T7322] netlink: 'syz.1.591': attribute type 2 has an invalid length.
[   68.180048][ T7339] xt_CT: No such helper "snmp"
[   68.720817][ T5680] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.867526][   T33] audit: type=1800 audit(1752031648.560:2): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.621" name=25705320202020 dev="tmpfs" ino=1397 res=0 errno=0
[   68.951796][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.954928][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.957443][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.960716][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.967237][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.116384][ T7408] chnl_net:caif_netlink_parms(): no params data found
[   69.183253][ T7408] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.186590][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.189744][ T7408] bridge_slave_0: entered allmulticast mode
[   69.194014][ T7408] bridge_slave_0: entered promiscuous mode
[   69.197843][ T7408] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.200208][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.203915][ T7408] bridge_slave_1: entered allmulticast mode
[   69.207001][ T7408] bridge_slave_1: entered promiscuous mode
[   69.230025][ T7408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.234855][ T7408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.263252][ T7408] team0: Port device team_slave_0 added
[   69.267654][ T7408] team0: Port device team_slave_1 added
[   69.286183][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.288515][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.297483][ T7408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.301757][ T7408] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.304672][ T7408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.312973][ T7408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.341569][ T7408] hsr_slave_0: entered promiscuous mode
[   69.344092][ T7408] hsr_slave_1: entered promiscuous mode
[   69.413955][ T7454] tipc: Started in network mode
[   69.415621][ T7454] tipc: Node identity 72a8498071b7, cluster identity 4711
[   69.417888][ T7454] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.444153][ T7454] syzkaller0: entered promiscuous mode
[   69.445929][ T7454] syzkaller0: entered allmulticast mode
[   69.447936][ T7454] tipc: Resetting bearer <eth:syzkaller0>
[   69.453297][ T7453] tipc: Resetting bearer <eth:syzkaller0>
[   70.118631][ T7453] tipc: Disabling bearer <eth:syzkaller0>
[   70.128687][ T7468] __nla_validate_parse: 5 callbacks suppressed
[   70.128697][ T7468] netlink: 5 bytes leftover after parsing attributes in process `syz.2.647'.
[   70.217559][ T7471] tipc: Started in network mode
[   70.219172][ T7471] tipc: Node identity 722e0355725d, cluster identity 4711
[   70.223104][ T7471] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.225609][ T7471] syzkaller0: entered promiscuous mode
[   70.227344][ T7471] syzkaller0: entered allmulticast mode
[   70.238152][ T7471] tipc: Resetting bearer <eth:syzkaller0>
[   70.241558][ T7469] tipc: Resetting bearer <eth:syzkaller0>
[   70.248628][ T7469] tipc: Disabling bearer <eth:syzkaller0>
[   70.372302][ T7490] xt_CT: No such helper "syz1"
[   70.533850][ T5680] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.583843][ T5680] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.622512][ T5680] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.712305][ T5680] bridge_slave_1: left allmulticast mode
[   70.714153][ T5680] bridge_slave_1: left promiscuous mode
[   70.716243][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.720394][ T5680] bridge_slave_0: left allmulticast mode
[   70.724822][ T5680] bridge_slave_0: left promiscuous mode
[   70.726654][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.827730][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.897586][ T5680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.901663][ T5680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.906293][ T5680] bond0 (unregistering): Released all slaves
[   71.051967][ T5220] Bluetooth: hci0: command tx timeout
[   71.173408][ T5680] hsr_slave_0: left promiscuous mode
[   71.175907][ T5680] hsr_slave_1: left promiscuous mode
[   71.178139][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.180857][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.185651][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.188227][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.199950][ T5680] veth1_macvtap: left promiscuous mode
[   71.203727][ T5680] veth0_macvtap: left promiscuous mode
[   71.205647][ T5680] veth1_vlan: left promiscuous mode
[   71.207464][ T5680] veth0_vlan: left promiscuous mode
[   71.416852][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'.
[   71.529894][ T5680] team0 (unregistering): Port device team_slave_1 removed
[   71.547049][ T5680] team0 (unregistering): Port device team_slave_0 removed
[   71.771318][ T7408] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.794550][ T7408] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.805083][ T7408] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.810627][ T7408] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.846453][ T7527] netlink: 60 bytes leftover after parsing attributes in process `syz.1.666'.
[   71.849465][ T7520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.666'.
[   71.853437][ T7529] netlink: 'syz.2.667': attribute type 13 has an invalid length.
[   71.855849][ T7529] netlink: 'syz.2.667': attribute type 17 has an invalid length.
[   71.863334][ T7529] netlink: 'syz.2.667': attribute type 27 has an invalid length.
[   71.893114][ T7408] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.929238][ T7408] 8021q: adding VLAN 0 to HW filter on device team0
[   71.952512][ T4522] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.954824][ T4522] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.957961][ T4522] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.960217][ T4522] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.971644][ T7408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   71.980174][ T7408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.145180][ T7408] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.184587][ T7408] veth0_vlan: entered promiscuous mode
[   72.194290][ T7408] veth1_vlan: entered promiscuous mode
[   72.216259][ T7408] veth0_macvtap: entered promiscuous mode
[   72.222810][ T7408] veth1_macvtap: entered promiscuous mode
[   72.238715][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.249484][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.259855][ T7408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.264227][ T7408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.267087][ T7408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.271374][ T7408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.327968][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.336650][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.355917][ T4522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.358398][ T4522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.632340][ T7592] nbd0: detected capacity change from 0 to 127
[   72.637219][   T55] block nbd0: Receive control failed (result -32)
[   72.641089][ T5910] block nbd0: Dead connection, failed to find a fallback
[   72.655402][ T5910] block nbd0: shutting down sockets
[   72.656086][ T7599] netlink: 'syz.2.699': attribute type 5 has an invalid length.
[   72.657326][ T5910] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.668534][ T5910] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.676995][ T5910] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.679849][ T5910] Buffer I/O error on dev nbd0, logical block 1, async page read
[   72.683575][ T5910] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.687155][ T5910] Buffer I/O error on dev nbd0, logical block 2, async page read
[   72.689607][ T5910] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.700741][ T5910] Buffer I/O error on dev nbd0, logical block 3, async page read
[   72.704958][ T5910] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.707799][ T5910] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.710266][ T5910] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.722107][ T5910] Buffer I/O error on dev nbd0, logical block 1, async page read
[   72.725631][ T5910] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.728457][ T5910] Buffer I/O error on dev nbd0, logical block 2, async page read
[   72.730914][ T5910] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.736457][ T5910] Buffer I/O error on dev nbd0, logical block 3, async page read
[   72.739027][ T5910] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.751944][ T5910] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.754541][ T5910] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.763527][ T5910] Buffer I/O error on dev nbd0, logical block 1, async page read
[   72.767719][ T5910] ldm_validate_partition_table(): Disk read failed.
[   72.771413][ T5910] Dev nbd0: unable to read RDB block 0
[   72.778115][ T5910]  nbd0: unable to read partition table
[   72.785158][ T5910] ldm_validate_partition_table(): Disk read failed.
[   72.789327][ T5910] Dev nbd0: unable to read RDB block 0
[   72.794751][ T5910]  nbd0: unable to read partition table
[   72.880234][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'.
[   72.917607][ T7630] netlink: 'syz.2.714': attribute type 1 has an invalid length.
[   72.948832][ T7634] netlink: 'syz.2.716': attribute type 1 has an invalid length.
[   72.974941][ T7638] netlink: 'syz.1.718': attribute type 1 has an invalid length.
[   73.207548][ T7670] xt_CT: You must specify a L4 protocol and not use inversions on it
[   73.519839][ T7688] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   73.840202][ T7703] ieee802154 phy1 wpan1: encryption failed: -22
[   74.149237][ T5680] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.734621][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.738254][ T7730] xt_hashlimit: size too large, truncated to 1048576
[   74.744388][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.747239][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.755150][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.757946][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.866594][ T7727] chnl_net:caif_netlink_parms(): no params data found
[   74.918379][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.920699][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.924706][ T7727] bridge_slave_0: entered allmulticast mode
[   74.927428][ T7727] bridge_slave_0: entered promiscuous mode
[   74.930717][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.934708][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.937281][ T7727] bridge_slave_1: entered allmulticast mode
[   74.940311][ T7727] bridge_slave_1: entered promiscuous mode
[   74.999676][ T7727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.009514][ T7727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.041629][ T7727] team0: Port device team_slave_0 added
[   75.047275][ T7727] team0: Port device team_slave_1 added
[   75.067432][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.069766][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.079238][ T7727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.094780][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.097102][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.105943][ T7727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.160653][ T7727] hsr_slave_0: entered promiscuous mode
[   75.163859][ T7727] hsr_slave_1: entered promiscuous mode
[   75.166054][ T7727] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.169228][ T7727] Cannot create hsr debugfs directory
[   75.754567][ T5680] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.824781][ T5680] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.882638][ T5680] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.982631][ T5680] bridge_slave_1: left allmulticast mode
[   75.984488][ T5680] bridge_slave_1: left promiscuous mode
[   75.986383][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.996354][ T5680] bridge_slave_0: left allmulticast mode
[   75.999854][ T5680] bridge_slave_0: left promiscuous mode
[   76.001672][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.118218][ T7806] Cannot find set identified by id 0 to match
[   76.283940][ T5680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.288116][ T5680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.291591][ T5680] bond0 (unregistering): Released all slaves
[   76.640886][ T5680] hsr_slave_0: left promiscuous mode
[   76.648076][ T5680] hsr_slave_1: left promiscuous mode
[   76.653080][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.656106][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.663155][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.665606][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.682240][ T5680] veth1_macvtap: left promiscuous mode
[   76.684092][ T5680] veth0_macvtap: left promiscuous mode
[   76.685897][ T5680] veth1_vlan: left promiscuous mode
[   76.687784][ T5680] veth0_vlan: left promiscuous mode
[   76.814338][ T5836] Bluetooth: hci0: command tx timeout
[   76.968484][ T5680] team0 (unregistering): Port device team_slave_1 removed
[   76.989869][ T5680] team0 (unregistering): Port device team_slave_0 removed
[   77.262475][ T7727] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   77.267873][ T7727] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   77.282781][ T7727] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   77.296155][ T7727] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   77.350567][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.360649][ T7727] 8021q: adding VLAN 0 to HW filter on device team0
[   77.373140][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.375430][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.392961][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.395279][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.479489][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.503735][ T7727] veth0_vlan: entered promiscuous mode
[   77.508768][ T7727] veth1_vlan: entered promiscuous mode
[   77.522582][ T7727] veth0_macvtap: entered promiscuous mode
[   77.526318][ T7727] veth1_macvtap: entered promiscuous mode
[   77.534719][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.540635][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.546985][ T7727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.549772][ T7727] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.554060][ T7727] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.556786][ T7727] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.590554][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.593589][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.613231][  T283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.615782][  T283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.660119][ T7727] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[   77.663861][ T7727] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[   77.667206][ T7727] CPU: 1 UID: 0 PID: 7727 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   77.671110][ T7727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.674324][ T7727] RIP: 0010:klist_remove+0x14a/0x340
[   77.676028][ T7727] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 c9 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a c9 be f6 49 8b 44 24 58 48 89 44 24 08
[   77.682086][ T7727] RSP: 0018:ffffc9000300f840 EFLAGS: 00010202
[   77.684015][ T7727] RAX: 000000000000000b RBX: ffff888028c30000 RCX: 0000000000000000
[   77.686681][ T7727] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[   77.689307][ T7727] RBP: ffffc9000300f928 R08: ffffffff8f885f83 R09: 1ffffffff1f10bf0
[   77.691795][ T7727] R10: dffffc0000000000 R11: fffffbfff1f10bf1 R12: 0000000000000000
[   77.694309][ T7727] R13: 1ffff1102476110c R14: ffff888123b08860 R15: dffffc0000000000
[   77.696845][ T7727] FS:  0000555588ca9500(0000) GS:ffff8881a3c1d000(0000) knlGS:0000000000000000
[   77.699656][ T7727] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.701760][ T7727] CR2: 00007ffd808bd890 CR3: 000000002170e000 CR4: 00000000000006f0
[   77.704333][ T7727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   77.706967][ T7727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   77.709490][ T7727] Call Trace:
[   77.710562][ T7727]  <TASK>
[   77.711501][ T7727]  ? __pfx_klist_remove+0x10/0x10
[   77.713149][ T7727]  ? __pfx_kobject_move+0x10/0x10
[   77.714770][ T7727]  ? get_device_parent+0x366/0x3a0
[   77.716425][ T7727]  device_move+0x193/0x700
[   77.717881][ T7727]  hci_conn_del_sysfs+0xb8/0x170
[   77.719501][ T7727]  hci_conn_del+0x8ff/0xcb0
[   77.720990][ T7727]  hci_conn_hash_flush+0x191/0x230
[   77.722653][ T7727]  hci_dev_close_sync+0xaef/0x1330
[   77.724309][ T7727]  ? __pfx_hci_dev_close_sync+0x10/0x10
[   77.726080][ T7727]  ? up_write+0x1c4/0x420
[   77.727471][ T7727]  hci_unregister_dev+0x21a/0x510
[   77.729140][ T7727]  vhci_release+0x80/0xd0
[   77.730586][ T7727]  ? __pfx_vhci_release+0x10/0x10
[   77.732195][ T7727]  __fput+0x44c/0xa70
[   77.733482][ T7727]  task_work_run+0x1d4/0x260
[   77.734959][ T7727]  ? __pfx_task_work_run+0x10/0x10
[   77.736549][ T7727]  ? kmem_cache_free+0x18f/0x400
[   77.738112][ T7727]  do_exit+0x6b5/0x22e0
[   77.739431][ T7727]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   77.741104][ T7727]  ? __pfx_do_exit+0x10/0x10
[   77.742591][ T7727]  ? _raw_spin_unlock_irq+0x23/0x50
[   77.744242][ T7727]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.745915][ T7727]  do_group_exit+0x21c/0x2d0
[   77.747354][ T7727]  __x64_sys_exit_group+0x3f/0x40
[   77.748972][ T7727]  x64_sys_call+0x21ba/0x21c0
[   77.750591][ T7727]  do_syscall_64+0xfa/0x3b0
[   77.752138][ T7727]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.753815][ T7727]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.755737][ T7727]  ? exc_page_fault+0x9f/0xf0
[   77.757243][ T7727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.759153][ T7727] RIP: 0033:0x7fcdbd38e929
[   77.760594][ T7727] Code: Unable to access opcode bytes at 0x7fcdbd38e8ff.
[   77.762863][ T7727] RSP: 002b:00007ffd808bfa68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   77.765535][ T7727] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcdbd38e929
[   77.768069][ T7727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[   77.770577][ T7727] RBP: 00007fcdbd3ee8f0 R08: 00007ffd808bd807 R09: 0000000000000003
[   77.773183][ T7727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.775720][ T7727] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffd808bfc20
[   77.778254][ T7727]  </TASK>
[   77.779286][ T7727] Modules linked in:
[   77.781297][ T7727] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   77.790631][ T7727] RIP: 0010:klist_remove+0x14a/0x340
[   77.792481][ T7727] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 c9 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a c9 be f6 49 8b 44 24 58 48 89 44 24 08
[   77.798534][ T7727] RSP: 0018:ffffc9000300f840 EFLAGS: 00010202
[   77.800492][ T7727] RAX: 000000000000000b RBX: ffff888028c30000 RCX: 0000000000000000
[   77.803424][ T7727] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[   77.806001][ T7727] RBP: ffffc9000300f928 R08: ffffffff8f885f83 R09: 1ffffffff1f10bf0
[   77.808479][ T7727] R10: dffffc0000000000 R11: fffffbfff1f10bf1 R12: 0000000000000000
[   77.811007][ T7727] R13: 1ffff1102476110c R14: ffff888123b08860 R15: dffffc0000000000
[   77.814296][ T7727] FS:  0000555588ca9500(0000) GS:ffff8881a3c1d000(0000) knlGS:0000000000000000
[   77.817124][ T7727] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.819211][ T7727] CR2: 00007fdb936e7d60 CR3: 000000000df38000 CR4: 00000000000006f0
[   77.822213][ T7727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   77.824801][ T7727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   77.827313][ T7727] Kernel panic - not syncing: Fatal exception
[   77.829886][ T7727] Kernel Offset: disabled
[   77.831304][ T7727] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:27:37  Registers:
info registers vcpu 0

CPU#0
RAX=5d76d3b800889900 RBX=ffffffff81975d58 RCX=5d76d3b800889900 RDX=0000000000000001
RSI=ffffffff8be28fa0 RDI=ffffffff81975d58 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1def0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1a72965440 CR3=000000001faae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0000000000000051 000000000000302d
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffff0000 XMM09=78742f7365756575 712f3070656e622f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000300f070
R8 =ffff888107d58237 R9 =1ffff11020fab046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af7916 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555588ca9500 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd808bd890 CR3=000000002170e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000041 000000003600302d
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00ff0000 XMM09=78742f7365756575 712f3070656e622f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
