last executing test programs:

1.273480111s ago: executing program 2 (id=1170):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)=ANY=[@ANYBLOB="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"], 0x10d0}}, 0x240484d0)

1.167681827s ago: executing program 2 (id=1174):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0)

1.080627812s ago: executing program 2 (id=1176):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x35}}, 0x8)

999.218098ms ago: executing program 2 (id=1180):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x6274a5ca71beadeb}, 0x4000000)

930.299803ms ago: executing program 2 (id=1182):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000e00"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000002e00000020000010000800000ac1414bbe0000001ac1414aa7f00000100000000ac14143ce0000002ac1414aa"], 0x30)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003300)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x0)
unshare(0x28040680)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff})
select(0x0, 0x0, 0x0, &(0x7f0000000140)={0x69f, 0xfffffffffffffffc, 0x3ff, 0x2, 0x7ff, 0xc1, 0x101, 0x8001}, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x41)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff59, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRES16=r5, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="274d107749f17dff"], 0x48}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c000780180001801400ff8400000000000000000000000000000002060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

689.026161ms ago: executing program 0 (id=1190):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74)

626.398118ms ago: executing program 0 (id=1192):
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00'})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000200)=0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x880)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)

380.605738ms ago: executing program 0 (id=1196):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28150000020000000c001aab0600058004c601"], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

329.761927ms ago: executing program 1 (id=1198):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14)
getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x4000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

329.611343ms ago: executing program 0 (id=1199):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0])

329.22701ms ago: executing program 1 (id=1200):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @exit, @jmp={0x5, 0x1, 0x9, 0x7, 0x1, 0x0, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfc30}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x90, &(0x7f0000000240)=""/144, 0x41100, 0x24, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x5}, 0xffffffffffffff42, 0x10, &(0x7f0000000480)={0x4, 0x9, 0x5, 0x8}, 0x10, 0xdcf6, r0, 0x3, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000600)=[{0x5, 0x2, 0x10, 0x7}, {0x3, 0x5, 0x1, 0xb}, {0x2, 0x4, 0x4, 0xc}], 0x10, 0x6}, 0x94)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r0, 0xe0, &(0x7f0000000b00)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map=r7, r0, 0x2d, 0x32, r6, @void, @void, @void, @value=r8}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_START(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d0802010000001c7e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700)
sendmsg$IPCTNL_MSG_CT_NEW(r11, 0x0, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78)

279.57429ms ago: executing program 0 (id=1201):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0400130006001200000000000600b500850100000a0006000802110000010000280011"], 0x64}}, 0x0)

279.267858ms ago: executing program 0 (id=1202):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d", 0x8b}], 0x1}, 0x8800)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040), 0x10)
listen(r3, 0x0)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x25, &(0x7f00000004c0)=0x8000, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRESDEC=r5, @ANYBLOB="020000000200", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0x4})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000346000/0x4000)=nil, 0x4000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)

208.754566ms ago: executing program 1 (id=1203):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0)

156.613593ms ago: executing program 1 (id=1204):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

122.684963ms ago: executing program 2 (id=1205):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)

67.441275ms ago: executing program 1 (id=1206):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)

0s ago: executing program 1 (id=1207):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15356' (ED25519) to the list of known hosts.
syzkaller login: [   50.939824][ T5807] cgroup: Unknown subsys name 'net'
[   51.045174][ T5807] cgroup: Unknown subsys name 'cpuset'
[   51.050694][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   53.202884][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.564489][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.571197][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.595933][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.595994][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.598865][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.601364][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.604483][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.607220][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.609756][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.612876][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.615533][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.618355][ T5222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.629110][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.630213][ T5222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.642859][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.905938][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   58.066988][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   58.083163][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   58.140737][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.145734][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.148784][ T5831] bridge_slave_0: entered allmulticast mode
[   58.152884][ T5831] bridge_slave_0: entered promiscuous mode
[   58.175517][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.178477][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.181291][ T5831] bridge_slave_1: entered allmulticast mode
[   58.186913][ T5831] bridge_slave_1: entered promiscuous mode
[   58.287392][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.291158][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.294200][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.296902][ T5836] bridge_slave_0: entered allmulticast mode
[   58.299505][ T5836] bridge_slave_0: entered promiscuous mode
[   58.318207][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.321226][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.324636][ T5828] bridge_slave_0: entered allmulticast mode
[   58.328638][ T5828] bridge_slave_0: entered promiscuous mode
[   58.336226][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.340033][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.343438][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.345671][ T5836] bridge_slave_1: entered allmulticast mode
[   58.349365][ T5836] bridge_slave_1: entered promiscuous mode
[   58.366678][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.369713][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.374617][ T5828] bridge_slave_1: entered allmulticast mode
[   58.378382][ T5828] bridge_slave_1: entered promiscuous mode
[   58.427578][ T5831] team0: Port device team_slave_0 added
[   58.442026][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.449959][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.455447][ T5831] team0: Port device team_slave_1 added
[   58.460214][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.465108][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.519287][ T5828] team0: Port device team_slave_0 added
[   58.537857][ T5836] team0: Port device team_slave_0 added
[   58.541428][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.546070][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.556292][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.564769][ T5828] team0: Port device team_slave_1 added
[   58.567600][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.570511][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.581143][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.594368][ T5836] team0: Port device team_slave_1 added
[   58.626409][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.628639][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.644231][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.663635][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.666413][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.676898][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.683954][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.686795][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.697511][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.716054][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.718417][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.727672][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.754455][ T5831] hsr_slave_0: entered promiscuous mode
[   58.757702][ T5831] hsr_slave_1: entered promiscuous mode
[   58.798852][ T5828] hsr_slave_0: entered promiscuous mode
[   58.801327][ T5828] hsr_slave_1: entered promiscuous mode
[   58.804153][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.807140][ T5828] Cannot create hsr debugfs directory
[   58.839968][ T5836] hsr_slave_0: entered promiscuous mode
[   58.843285][ T5836] hsr_slave_1: entered promiscuous mode
[   58.846170][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.849242][ T5836] Cannot create hsr debugfs directory
[   59.149540][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.160299][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.165161][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.177298][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.225654][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.234298][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.252151][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.268180][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.288945][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.298845][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.308077][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.323229][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.409487][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.456867][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.469385][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   59.481254][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.499937][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.503199][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.515822][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   59.530715][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.533742][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.545345][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   59.565218][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.568155][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.574184][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.577130][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.615250][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.618309][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.624159][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.627210][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.678872][ T5222] Bluetooth: hci2: command tx timeout
[   59.682534][ T5222] Bluetooth: hci1: command tx timeout
[   59.684875][ T5222] Bluetooth: hci0: command tx timeout
[   59.871256][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.930199][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.938261][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.959354][ T5831] veth0_vlan: entered promiscuous mode
[   59.972091][ T5831] veth1_vlan: entered promiscuous mode
[   60.011768][ T5828] veth0_vlan: entered promiscuous mode
[   60.036208][ T5828] veth1_vlan: entered promiscuous mode
[   60.041892][ T5836] veth0_vlan: entered promiscuous mode
[   60.056755][ T5831] veth0_macvtap: entered promiscuous mode
[   60.068508][ T5828] veth0_macvtap: entered promiscuous mode
[   60.078677][ T5831] veth1_macvtap: entered promiscuous mode
[   60.082177][ T5836] veth1_vlan: entered promiscuous mode
[   60.086505][ T5828] veth1_macvtap: entered promiscuous mode
[   60.109973][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.118672][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.130835][ T5836] veth0_macvtap: entered promiscuous mode
[   60.137663][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.146270][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.159432][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.165583][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.169370][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.175424][ T5836] veth1_macvtap: entered promiscuous mode
[   60.184918][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.200804][ T5861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.220152][ T5861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.224713][ T5861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.238075][ T5861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.259264][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.295038][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.317041][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.322989][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.339255][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.364764][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.369282][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.372239][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.395056][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.398352][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.445894][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.448715][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.455966][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.456914][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.490884][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.493710][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.523779][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.526941][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.539516][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.614864][ T5899] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3'.
[   60.741115][ T5903] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.790288][ T5907] bond_slave_0: entered promiscuous mode
[   60.792962][ T5907] bond_slave_1: entered promiscuous mode
[   60.799867][ T5907] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   60.808684][ T5907] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   61.401693][ T5930] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET)
[   61.756378][ T5839] Bluetooth: hci1: command tx timeout
[   61.756435][ T5222] Bluetooth: hci0: command tx timeout
[   61.758658][   T55] Bluetooth: hci2: command tx timeout
[   61.762220][ T5953] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.20'.
[   61.784170][    C0] vcan0: j1939_tp_rxtimer: 0xffff888038356800: rx timeout, send abort
[   61.787804][    C0] vcan0: j1939_tp_rxtimer: 0xffff888038356c00: rx timeout, send abort
[   61.790764][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888038356800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   61.796344][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888038356c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   61.820713][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'.
[   61.978173][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'.
[   62.007823][ T5965] vlan2: entered allmulticast mode
[   62.013875][ T5965] bridge0: entered allmulticast mode
[   62.024508][ T5965] bridge0: port 3(vlan2) entered blocking state
[   62.026831][ T5965] bridge0: port 3(vlan2) entered disabled state
[   62.054869][ T5967] tipc: Started in network mode
[   62.057742][ T5967] tipc: Node identity ac14140f, cluster identity 4711
[   62.061349][ T5967] tipc: New replicast peer: 255.255.255.255
[   62.068877][ T5967] tipc: Enabled bearer <udp:syz2>, priority 10
[   62.084203][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'.
[   62.089031][ T5970] tipc: Disabling bearer <udp:syz2>
[   62.354131][ T5986] netlink: 52 bytes leftover after parsing attributes in process `syz.2.36'.
[   62.357150][ T5986] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   62.474498][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'.
[   62.611818][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'.
[   62.616895][ T6012] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   62.620127][ T6012] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[   62.631541][ T6012] Zero length message leads to an empty skb
[   62.740241][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.55'.
[   62.799455][ T6030] netlink: 40 bytes leftover after parsing attributes in process `syz.2.57'.
[   63.832454][   T55] Bluetooth: hci0: command tx timeout
[   63.842885][ T5839] Bluetooth: hci1: command tx timeout
[   63.844859][   T55] Bluetooth: hci2: command tx timeout
[   63.939631][ T6060] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   63.945717][ T6060] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   63.951456][ T6062] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   64.005298][ T6065] tipc: Started in network mode
[   64.007154][ T6065] tipc: Node identity 3a000000000040120000006e70000001, cluster identity 4711
[   64.010923][ T6065] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   64.423806][ T6086] netlink: 'syz.1.83': attribute type 1 has an invalid length.
[   64.470613][ T6086] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.486817][ T6086] bond1: (slave geneve2): making interface the new active one
[   64.490244][ T6086] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   64.510917][ T6095] tipc: Started in network mode
[   64.513973][ T6095] tipc: Node identity 76dcd2c7b709, cluster identity 4711
[   64.519087][ T6095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.525113][ T6095] syzkaller0: entered promiscuous mode
[   64.527438][ T6095] syzkaller0: entered allmulticast mode
[   64.536965][ T6086] bond1: entered promiscuous mode
[   64.539109][ T6086] geneve2: entered promiscuous mode
[   64.562204][ T6095] tipc: Resetting bearer <eth:syzkaller0>
[   64.607942][ T6094] tipc: Resetting bearer <eth:syzkaller0>
[   64.647277][ T6094] tipc: Disabling bearer <eth:syzkaller0>
[   65.101432][   T47] IPVS: starting estimator thread 0...
[   65.114837][ T6144] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.212648][ T6140] IPVS: using max 42 ests per chain, 100800 per kthread
[   65.922610][ T5839] Bluetooth: hci2: command tx timeout
[   65.922672][ T5833] Bluetooth: hci0: command tx timeout
[   65.930610][ T5222] Bluetooth: hci1: command tx timeout
[   67.198131][ T6235] raw_sendmsg: syz.1.145 forgot to set AF_INET. Fix it!
[   67.313158][ T6241] __nla_validate_parse: 2 callbacks suppressed
[   67.313169][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.148'.
[   67.370571][ T6244] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   67.379609][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'.
[   67.465295][ T6250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.151'.
[   67.975316][ T6285] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   67.995814][ T5222] Bluetooth: hci2: command 0x0405 tx timeout
[   69.754992][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'.
[   69.856790][ T6388] netlink: 'syz.1.214': attribute type 83 has an invalid length.
[   69.883945][ T6390] netlink: 100 bytes leftover after parsing attributes in process `syz.2.215'.
[   69.958052][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'.
[   69.961278][ T6394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.217'.
[   69.964838][ T6394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.217'.
[   69.967758][ T6394] netlink: 540 bytes leftover after parsing attributes in process `syz.0.217'.
[   70.125474][ T6408] macsec1: entered promiscuous mode
[   70.185933][ T6415] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   70.238033][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.224'.
[   70.527857][ T6447] netlink: 'syz.1.238': attribute type 25 has an invalid length.
[   70.534133][ T6447] netlink: 'syz.1.238': attribute type 10 has an invalid length.
[   70.564311][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.568411][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.591954][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.595687][ T6447] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.599498][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.602586][ T6447] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.637541][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.640783][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.980226][ T6479] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   71.087960][ T6485] netlink: 'syz.1.255': attribute type 1 has an invalid length.
[   71.091438][ T6485] netlink: 'syz.1.255': attribute type 22 has an invalid length.
[   71.199255][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.202477][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.821759][ T6517] tc_dump_action: action bad kind
[   71.861642][ T6521] netlink: 'syz.2.272': attribute type 29 has an invalid length.
[   71.923565][ T6525] netlink: 'syz.0.273': attribute type 1 has an invalid length.
[   72.458935][ T6566] vlan0: entered promiscuous mode
[   74.665495][ T6645] __nla_validate_parse: 12 callbacks suppressed
[   74.665506][ T6645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.327'.
[   74.815985][ T6649] batadv_slave_1: entered promiscuous mode
[   74.819674][ T6648] batadv_slave_1: left promiscuous mode
[   74.835290][ T6651] netlink: 'syz.0.329': attribute type 1 has an invalid length.
[   74.838690][ T6651] netlink: 224 bytes leftover after parsing attributes in process `syz.0.329'.
[   74.937205][ T6657] netlink: 'syz.2.333': attribute type 4 has an invalid length.
[   74.940424][ T6657] netlink: 116 bytes leftover after parsing attributes in process `syz.2.333'.
[   74.960045][ T6659] netlink: 165 bytes leftover after parsing attributes in process `syz.0.334'.
[   75.132767][ T6665] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.288769][ T6677] netlink: 'syz.1.344': attribute type 1 has an invalid length.
[   75.292464][ T6677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.344'.
[   75.364407][ T6684] netlink: 'syz.2.346': attribute type 3 has an invalid length.
[   75.367144][ T6684] netlink: 'syz.2.346': attribute type 3 has an invalid length.
[   75.484540][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'.
[   75.521600][ T6687] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.541838][ T6687] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   75.871194][ T6711] netlink: 596 bytes leftover after parsing attributes in process `syz.1.358'.
[   76.258583][ T6733] warning: `syz.0.368' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.262582][ T6736] smc: net device bond0 applied user defined pnetid SYZ2
[   76.265487][ T6736] netlink: 14 bytes leftover after parsing attributes in process `syz.2.369'.
[   76.446537][ T6736] smc: removing net device bond0 with user defined pnetid SYZ2
[   76.450716][ T6736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.464248][ T6736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.469553][ T6736] bond0 (unregistering): Released all slaves
[   76.869162][ T6756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.873597][ T6756] syzkaller0: entered promiscuous mode
[   76.875859][ T6756] syzkaller0: entered allmulticast mode
[   76.891304][ T6756] tipc: Resetting bearer <eth:syzkaller0>
[   76.898044][ T6755] tipc: Resetting bearer <eth:syzkaller0>
[   76.908000][ T6755] tipc: Disabling bearer <eth:syzkaller0>
[   77.799582][ T6800] netlink: 14 bytes leftover after parsing attributes in process `syz.1.399'.
[   77.882442][ T6804] netlink: 14 bytes leftover after parsing attributes in process `syz.0.400'.
[   77.902867][ T6800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.915337][ T6800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.920686][ T6800] bond0 (unregistering): Released all slaves
[   77.939450][ T6802] smc: net device bond0 applied user defined pnetid SYZ2
[   77.945580][ T6803] veth1_macvtap: left promiscuous mode
[   77.947860][ T6803] macsec0: entered promiscuous mode
[   77.963579][ T6804] bond_slave_0: left promiscuous mode
[   77.966863][ T6804] bond_slave_1: left promiscuous mode
[   78.069416][ T6804] bond1: (slave macvlan2): Removing an active aggregator
[   78.079618][ T6804] bond1: (slave macvlan2): Releasing backup interface
[   78.093388][ T6804] smc: removing net device bond0 with user defined pnetid SYZ2
[   78.098025][ T6804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.105880][ T6804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.112013][ T6804] bond0 (unregistering): Released all slaves
[   78.385472][ T6823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.533794][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.543555][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.610272][ T6823] syzkaller0: entered promiscuous mode
[   78.616117][ T6823] syzkaller0: entered allmulticast mode
[   78.634068][ T6829] ip6tnl1: entered promiscuous mode
[   78.635836][ T6829] ip6tnl1: entered allmulticast mode
[   78.643619][ T6830] tipc: Resetting bearer <eth:syzkaller0>
[   78.653829][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.664301][ T6822] tipc: Resetting bearer <eth:syzkaller0>
[   78.679018][ T6822] tipc: Disabling bearer <eth:syzkaller0>
[   78.695120][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.698005][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.710369][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.730965][ T6835] netlink: 'syz.2.412': attribute type 1 has an invalid length.
[   79.063945][ T6857] block nbd0: server does not support multiple connections per device.
[   79.068664][ T6857] block nbd0: shutting down sockets
[   79.129621][ T6864] bridge0: port 3(syz_tun) entered blocking state
[   79.133213][ T6864] bridge0: port 3(syz_tun) entered disabled state
[   79.136053][ T6864] syz_tun: entered allmulticast mode
[   79.140219][ T6864] syz_tun: entered promiscuous mode
[   79.149191][ T6864] bridge0: port 3(syz_tun) entered blocking state
[   79.152685][ T6864] bridge0: port 3(syz_tun) entered forwarding state
[   79.185693][ T6868] nbd: must specify at least one socket
[   79.238843][ T6872] netlink: 'syz.1.426': attribute type 1 has an invalid length.
[   79.804293][ T6912] __nla_validate_parse: 5 callbacks suppressed
[   79.804304][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'.
[   80.055407][ T6930] netlink: 48 bytes leftover after parsing attributes in process `syz.2.455'.
[   80.600279][ T6976] veth0_macvtap: left promiscuous mode
[   80.609241][ T6976] macvtap0: entered allmulticast mode
[   80.961817][ T6997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.965865][ T6997] syzkaller0: entered promiscuous mode
[   80.968741][ T6997] syzkaller0: entered allmulticast mode
[   80.996677][ T6997] tipc: Resetting bearer <eth:syzkaller0>
[   81.001463][ T6996] tipc: Resetting bearer <eth:syzkaller0>
[   81.010089][ T6996] tipc: Disabling bearer <eth:syzkaller0>
[   81.451098][    T9] cfg80211: failed to load regulatory.db
[   81.489657][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'.
[   81.498337][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'.
[   81.509483][ T7041] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   81.539733][ T7045] gtp0: entered promiscuous mode
[   82.366970][ T7080] netlink: 56 bytes leftover after parsing attributes in process `syz.1.522'.
[   82.370739][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'.
[   82.425802][ T7082] openvswitch: netlink: Key type 30 is not supported
[   82.563546][ T7087] netlink: 'syz.1.525': attribute type 10 has an invalid length.
[   82.630793][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'.
[   82.875462][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'.
[   83.100295][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'.
[   83.156558][ T7126] tc_dump_action: action bad kind
[   83.399160][ T7151] veth0: entered promiscuous mode
[   83.401506][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'.
[   83.538035][   T47] IPVS: starting estimator thread 0...
[   83.643935][ T7161] IPVS: using max 77 ests per chain, 184800 per kthread
[   83.959987][ T7211] netlink: 'syz.0.577': attribute type 3 has an invalid length.
[   84.161258][ T7233] bridge0: port 3(syz_tun) entered disabled state
[   84.171413][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.175237][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.313281][ T7233] bridge0: port 3(syz_tun) entered disabled state
[   84.401523][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.408524][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.505137][ T5702] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.521263][ T5702] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.526901][ T5702] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.528036][ T7252] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   84.529805][ T5702] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.013293][ T7282] ieee802154 phy0 wpan0: encryption failed: -22
[   86.564470][ T7354] Driver unsupported XDP return value 0 on prog  (id 90) dev N/A, expect packet loss!
[   86.626690][ T7361] netlink: 'syz.0.647': attribute type 1 has an invalid length.
[   86.629772][ T7361] __nla_validate_parse: 3 callbacks suppressed
[   86.629783][ T7361] netlink: 228 bytes leftover after parsing attributes in process `syz.0.647'.
[   86.640503][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'.
[   86.665480][ T7363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.671272][ T7363] syzkaller0: entered promiscuous mode
[   86.677382][ T7363] syzkaller0: entered allmulticast mode
[   86.716043][ T7363] tipc: Resetting bearer <eth:syzkaller0>
[   86.720147][ T7362] tipc: Resetting bearer <eth:syzkaller0>
[   86.743746][ T7362] tipc: Disabling bearer <eth:syzkaller0>
[   86.837750][ T7373] 8021q: adding VLAN 0 to HW filter on device team0
[   86.876681][ T7374] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[   86.894321][ T7373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.007325][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'.
[   87.017211][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'.
[   87.096008][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'.
[   87.110380][ T7392] team0: entered promiscuous mode
[   87.112115][ T7392] team_slave_0: entered promiscuous mode
[   87.117379][ T7392] team_slave_1: entered promiscuous mode
[   87.125261][ T7392] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   87.128586][ T7392] team0: left promiscuous mode
[   87.130328][ T7392] team_slave_0: left promiscuous mode
[   87.132169][ T7392] team_slave_1: left promiscuous mode
[   87.146304][ T7397] !: renamed from dummy0 (while UP)
[   88.603958][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   89.760613][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'.
[   90.689895][ T7587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.716'.
[   90.741876][ T7589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.717'.
[   90.747301][ T7589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.717'.
[   90.864508][ T7593] ip6erspan0: entered allmulticast mode
[   91.055528][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'.
[   91.963980][ T7613] __nla_validate_parse: 6 callbacks suppressed
[   91.963993][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'.
[   91.970634][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'.
[   91.979186][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'.
[   91.986993][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'.
[   91.993276][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'.
[   91.996218][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'.
[   92.003905][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'.
[   92.006856][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'.
[   92.017816][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'.
[   92.020771][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'.
[   92.045485][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.048173][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.115417][ T7625] netlink: 'syz.1.735': attribute type 11 has an invalid length.
[   92.322519][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.446681][ T7642] netlink: 'syz.0.743': attribute type 1 has an invalid length.
[   92.450066][ T7642] netlink: 'syz.0.743': attribute type 4 has an invalid length.
[   93.189733][ T7688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   93.193206][ T7688] IPv6: NLM_F_CREATE should be set when creating new route
[   93.196284][ T7688] IPv6: NLM_F_CREATE should be set when creating new route
[   93.288955][ T7690] syzkaller0: entered promiscuous mode
[   93.291314][ T7690] syzkaller0: entered allmulticast mode
[   93.695256][ T7706] ieee802154 phy0 wpan0: encryption failed: -22
[   94.208217][    T9] hid-generic 0005:04F3:100C.0001: item fetching failed at offset 0/1
[   94.219309][    T9] hid-generic 0005:04F3:100C.0001: probe with driver hid-generic failed with error -22
[   95.953488][ T7808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.979201][ T7810] netlink: 'syz.2.813': attribute type 1 has an invalid length.
[   95.981898][ T7810] netlink: 'syz.2.813': attribute type 2 has an invalid length.
[   96.432216][ T7850] pimreg: entered allmulticast mode
[   97.058278][ T7901] __nla_validate_parse: 22 callbacks suppressed
[   97.058289][ T7901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.850'.
[   97.680159][ T7928] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.862'.
[   97.968488][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'.
[   98.370418][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'.
[   98.398813][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'.
[   98.434938][ T7970] bridge_slave_1 (unregistering): left allmulticast mode
[   98.438590][ T7970] bridge_slave_1 (unregistering): left promiscuous mode
[   98.442386][ T7970] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.760623][ T7988] netlink: 'syz.1.889': attribute type 11 has an invalid length.
[   98.885933][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'.
[   98.898802][ T7998] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.894'.
[   98.902132][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'.
[   98.937969][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'.
[   98.941119][ T8000] netlink: 'syz.1.895': attribute type 1 has an invalid length.
[   99.218291][ T8020] Bluetooth: MGMT ver 1.23
[   99.276896][ T8024] tap0: tun_chr_ioctl cmd 35108
[   99.902237][ T8054] netlink: 96 bytes leftover after parsing attributes in process `syz.0.919'.
[  100.451863][ T8088] Bluetooth: MGMT ver 1.23
[  100.600271][ T8099] ip6gretap1: entered promiscuous mode
[  100.604148][ T8099] ip6gretap1: entered allmulticast mode
[  101.305715][ T8139] netlink: 'syz.0.958': attribute type 1 has an invalid length.
[  101.814750][ T8153] veth0: entered promiscuous mode
[  102.075998][ T8162] __nla_validate_parse: 10 callbacks suppressed
[  102.076016][ T8162] netlink: 104 bytes leftover after parsing attributes in process `syz.2.968'.
[  103.075651][ T8204] tipc: Trying to set illegal importance in message
[  103.326481][ T8225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.451748][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'.
[  103.456957][ T8233] nbd: couldn't find a device at index 65546
[  103.494868][ T8237] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1000'.
[  103.554745][ T8241] veth1_to_team: entered allmulticast mode
[  103.557023][ T8241] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  103.585371][ T8245] netlink: 'syz.2.1005': attribute type 58 has an invalid length.
[  103.601398][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'.
[  103.660412][ T8249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.671942][ T8249] syzkaller0: entered promiscuous mode
[  103.674495][ T8249] syzkaller0: entered allmulticast mode
[  103.687293][ T8249] tipc: Resetting bearer <eth:syzkaller0>
[  103.690713][ T8248] tipc: Resetting bearer <eth:syzkaller0>
[  103.710149][ T8248] tipc: Disabling bearer <eth:syzkaller0>
[  103.841092][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'.
[  104.269318][ T8303] netlink: 'syz.1.1031': attribute type 23 has an invalid length.
[  105.568916][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'.
[  105.583538][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'.
[  105.586415][ T8344] netlink: 'syz.1.1051': attribute type 1 has an invalid length.
[  105.611340][ T8344] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1051'.
[  105.642453][ T8344] nbd: socks must be embedded in a SOCK_ITEM attr
[  105.652216][ T8344] block nbd0: shutting down sockets
[  106.125533][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'.
[  106.129095][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'.
[  106.730295][ T8414] netlink: 'syz.0.1079': attribute type 7 has an invalid length.
[  106.733880][ T8414] netlink: 'syz.0.1079': attribute type 3 has an invalid length.
[  106.826123][ T8422] ieee802154 phy0 wpan0: encryption failed: -22
[  106.828895][ T8422] ieee802154 phy0 wpan0: encryption failed: -22
[  107.089396][ T8441] __nla_validate_parse: 2 callbacks suppressed
[  107.089414][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'.
[  107.104249][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'.
[  107.364181][ T8457] netlink: 'syz.2.1100': attribute type 15 has an invalid length.
[  107.368124][ T8457] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1100'.
[  107.464420][ T8459] bridge0: port 3(syz_tun) entered disabled state
[  107.475669][ T8459] syz_tun (unregistering): left allmulticast mode
[  107.477911][ T8459] syz_tun (unregistering): left promiscuous mode
[  107.480231][ T8459] bridge0: port 3(syz_tun) entered disabled state
[  107.632194][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'.
[  107.648993][ T8473] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1107'.
[  108.176825][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1122'.
[  108.181026][ T8513] openvswitch: netlink: Missing key (keys=40, expected=80)
[  108.217889][ T8518] netlink: 'syz.0.1124': attribute type 1 has an invalid length.
[  108.581933][ T5884] IPVS: starting estimator thread 0...
[  108.596367][ T8551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.599210][ T8551] syzkaller0: entered promiscuous mode
[  108.601078][ T8551] syzkaller0: entered allmulticast mode
[  108.624253][ T8551] tipc: Resetting bearer <eth:syzkaller0>
[  108.628727][ T8550] tipc: Resetting bearer <eth:syzkaller0>
[  108.639743][ T8550] tipc: Disabling bearer <eth:syzkaller0>
[  108.673784][ T8549] IPVS: using max 77 ests per chain, 184800 per kthread
[  108.943821][ T8583] netlink: zone id is out of range
[  108.947119][ T8583] netlink: zone id is out of range
[  108.949042][ T8583] netlink: zone id is out of range
[  108.950747][ T8583] netlink: zone id is out of range
[  108.953970][ T8583] netlink: zone id is out of range
[  108.956839][ T8583] netlink: zone id is out of range
[  108.959254][ T8583] netlink: zone id is out of range
[  108.967745][ T8583] netlink: zone id is out of range
[  108.971465][ T8583] netlink: zone id is out of range
[  108.974085][ T8583] netlink: zone id is out of range
[  108.998735][ T8587] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1153'.
[  109.079052][ T8593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1156'.
[  109.085960][ T8595] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1157'.
[  109.996005][ T8661] ieee802154 phy0 wpan0: encryption failed: -90
[  110.115491][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'.
[  110.466766][ T8688] netlink: 'syz.1.1200': attribute type 12 has an invalid length.
[  110.495545][ T8692] TCP: TCP_TX_DELAY enabled
[  110.612702][ T8701] netlink: 'syz.1.1206': attribute type 5 has an invalid length.
[  110.619106][ T8701] geneve3: entered promiscuous mode
[  110.620880][ T8701] geneve3: entered allmulticast mode
[  110.626769][ T5702] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  110.629528][ T5702] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  110.632166][ T5702] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
Connection to localhost closed by remote host.
[  110.809422][ T5702] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  111.221672][ T5702] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  111.319927][ T5702] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  111.377935][ T5702] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  111.448848][ T5702] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  111.564257][ T5702] bridge_slave_1: left allmulticast mode
[  111.567022][ T5702] bridge_slave_1: left promiscuous mode
[  111.570961][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.576582][ T5702] bridge_slave_0: left allmulticast mode
[  111.579051][ T5702] bridge_slave_0: left promiscuous mode
[  111.581669][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.785130][ T5702] bond1 (unregistering): (slave geneve2): Releasing active interface
[  111.787853][ T5702] geneve2 (unregistering): left promiscuous mode
[  112.030572][ T5702] bond1 (unregistering): Released all slaves
[  112.115455][ T5702] tipc: Left network mode
[  112.156916][ T5702] IPVS: stopping backup sync thread 6415 ...
[  112.280039][ T5702] hsr_slave_0: left promiscuous mode
[  112.283117][ T5702] hsr_slave_1: left promiscuous mode
[  112.285530][ T5702] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.288653][ T5702] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.528978][ T5702] team0 (unregistering): Port device team_slave_1 removed
[  112.548342][ T5702] team0 (unregistering): Port device team_slave_0 removed
[  113.096886][ T5702] IPVS: stop unused estimator thread 0...
[  113.155167][ T5702] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.250082][ T5702] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.307776][ T5702] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.381997][ T5702] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.504513][ T5702] bridge_slave_0: left allmulticast mode
[  113.506444][ T5702] bridge_slave_0: left promiscuous mode
[  113.508398][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.794438][ T5702] bond1 (unregistering): Released all slaves
[  113.861531][ T5702] tipc: Left network mode
[  114.023272][ T5702] hsr_slave_0: left promiscuous mode
[  114.026113][ T5702] hsr_slave_1: left promiscuous mode
[  114.028796][ T5702] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.031946][ T5702] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.036391][ T5702] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.039388][ T5702] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.053157][ T5702] veth1_macvtap: left promiscuous mode
[  114.056022][ T5702] veth1_vlan: left promiscuous mode
[  114.403963][ T5702] team0 (unregistering): Port device team_slave_1 removed
[  114.425252][ T5702] team0 (unregistering): Port device team_slave_0 removed
[  114.856938][ T5702] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
15:45:38  Registers:
info registers vcpu 0

CPU#0
RAX=c0f5e175081f8300 RBX=ffffffff81976a18 RCX=c0f5e175081f8300 RDX=0000000000000001
RSI=ffffffff8d999894 RDI=ffffffff8be28d00 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d24f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000346030 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000041 000000322f616973
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffff0000000000 XMM09=2f74656e2f30316d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=850666ee4dffac00 RBX=ffffffff81976a18 RCX=850666ee4dffac00 RDX=0000000000000001
RSI=ffffffff8d999894 RDI=ffffffff8be28d00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f6f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d3000
RIP=ffffffff8b6d24f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000100 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000d1c9898 000000000000000a XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
