last executing test programs:

2.337011654s ago: executing program 0 (id=455):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x3}}]}}]}, 0x7c}}, 0x20040054)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)

2.22582161s ago: executing program 0 (id=456):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c00028008"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.117704721s ago: executing program 0 (id=458):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000140)=0xfff, 0x4)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r0, 0x1ad72f7)
accept4(r0, 0x0, 0x0, 0x80000)
r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000)
writev(r2, &(0x7f0000001b40)=[{&(0x7f0000000600)="16f6", 0x2}], 0x1)

1.866431051s ago: executing program 2 (id=462):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_connect\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket$unix(0x1, 0x1, 0x0)

1.64619119s ago: executing program 2 (id=463):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r3=>r2, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2, 0x80, 0x80, 0xfffffffc, 0xdc64}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r3, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}})

1.517486721s ago: executing program 2 (id=464):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20)

1.436517296s ago: executing program 2 (id=465):
r0 = socket$tipc(0x1e, 0x4, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x18}, 0xb7}], 0x1, 0x40002021, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0)

1.197371538s ago: executing program 0 (id=466):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
unshare(0x2c060000)
unshare(0x24020400)
connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.147796537s ago: executing program 0 (id=467):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x7, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0)

587.947042ms ago: executing program 2 (id=471):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x53, 0xfffff02c}, {0x6, 0x1, 0x8, 0x1}]}, 0x10)

527.194728ms ago: executing program 2 (id=474):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7", 0xd3}], 0x1}}], 0x1, 0x4044805)
sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)="d70843d0d3a7d851fad0b53f714b67cbace5aee79f641ae72cab5f6a2e16496deeeffee47b5b0e284efef0fff2ae8848abba01f5f8ab6fa8db3c059cb91ff7cd99d1d925df5fbe5d1ad490e319cc0e10535f0134f3c95c488fe6f60a778dbe81a23b3d1215791c6eb6e3778ee28fe1c7a65994519a168eac54dcf849875eb792708c0c6440ff50b0477f4047f7c6eaa171a4252ece9054006724eaf6db6b59ba3a7f4d743486a5205a2dbbffd79501ea9345c6ca2047840006b9aaeec65c78f57e329c2923a6e0c78819bf55e3a5b6542c70a286ab5a39f481fd61836877338a06d7a071a2f764374537c44d9823", 0xee}, {&(0x7f0000000740)="e16fdb2f41db56208b1bdab9839d8b764d15b9a34928b8358799ea0e330a378ed09fa94fcf366c381e8a474883e9dee976f8dcf68b85d9b463ff0118701821bf49683f3616becebbfb9737f46352fd2680ebbc428ef004cd9bfdbb05e4741a0cd5fc693f2472ae31", 0x68}, {&(0x7f00000007c0)="b5008d9a75143e8db609e26250d4a0d2a5e0cb18e7978806eee6e3d75ba24c995453d7ee398cfad992082e185c965cb517e873d20b696726d33b7e6785c283009939f1e4b38241674f382c1d4684c68a09a833a0597ae4996995", 0x5a}, {&(0x7f0000000180)="25ee0292a0d058acd5fe18495c8f1317c4b4d14d25daa0b78cce05022e957b4a939ed513bc110fa0481d9ce536b255f92b86447e5870081f9394", 0x3a}, {&(0x7f0000000840)="2d739656d65997a1dbb426a3db01627c4988ff8c7db6b28b691059ac13431304c759c5cc503c4d5f6d36451fad3b7f60190f78267f7a76fb57358d1b5e06e8d427ce0f6f17ac1900ceff151c212874faf2c0eade90f052e3c4f0b04dc9421b92a1788450bdd69ff8d24b224fa6d01117766c7ee7ffc8a61ccb397f24fbdef1d1f10e0db03ecee8ef4dba08e57c0362fd0f31d54ba23f48dc9c82a93b81f28401b00a54623316d40fb50da3e58e47859298983b15a69dcda7494443b4b73430ac81bc043c8e3e18c729d5dc978df91286036fd5b2b3d191746877b24026982ed808e3ef100d3b3005b74a2dc4f10e0452dfdc", 0xf2}, {&(0x7f0000001500)="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", 0x41e}], 0x6}, 0x4000040)

315.462341ms ago: executing program 0 (id=482):
r0 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

265.507147ms ago: executing program 1 (id=484):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000011c0), r0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, 0x0, 0x20040000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0)
sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x420}, 0x1, 0x0, 0x0, 0x800}, 0x20000840)
socket$inet6_sctp(0xa, 0x4, 0x84)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000005c0)='sched_switch\x00', r5, 0x0, 0x2}, 0x18)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
write$cgroup_int(r7, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r7, @ANYRESOCT=r6, @ANYRESOCT=r2, @ANYRES8=r3, @ANYRESOCT], 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)

116.226706ms ago: executing program 1 (id=485):
syz_emit_ethernet(0x22, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv4={0x88fb, @generic={{0x5, 0x4, 0x1, 0x16, 0x14, 0x64, 0x0, 0x2, 0x21, 0x0, @broadcast, @multicast2}}}}}, 0x0)

116.054668ms ago: executing program 1 (id=486):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000001f40)={0x6, 0xac, 0xffffff31}, 0xc)

57.465822ms ago: executing program 1 (id=487):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}], 0x1, 0x0, 0x0)

57.31078ms ago: executing program 1 (id=488):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
accept$alg(r0, 0x0, 0x0)
close(0x4)

0s ago: executing program 1 (id=489):
unshare(0x2c020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:24005' (ED25519) to the list of known hosts.
syzkaller login: [   41.470151][ T5768] cgroup: Unknown subsys name 'net'
[   41.579058][ T5768] cgroup: Unknown subsys name 'cpuset'
[   41.583257][ T5768] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.941295][ T5768] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.241573][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.244733][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.247780][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.251072][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.253945][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.303113][ T5221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.306613][ T5221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.309649][ T5221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.312982][ T5221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.316132][ T5221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.343669][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.346584][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.349512][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.352342][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.355003][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.491934][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   46.608578][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.611504][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.614072][ T5828] bridge_slave_0: entered allmulticast mode
[   46.617674][ T5828] bridge_slave_0: entered promiscuous mode
[   46.621470][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   46.638097][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.640530][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.642992][ T5828] bridge_slave_1: entered allmulticast mode
[   46.646841][ T5828] bridge_slave_1: entered promiscuous mode
[   46.671910][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   46.699381][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.715668][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.749783][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.752252][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.754680][ T5832] bridge_slave_0: entered allmulticast mode
[   46.758011][ T5832] bridge_slave_0: entered promiscuous mode
[   46.761564][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.763928][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.766526][ T5832] bridge_slave_1: entered allmulticast mode
[   46.769344][ T5832] bridge_slave_1: entered promiscuous mode
[   46.784691][ T5828] team0: Port device team_slave_0 added
[   46.791819][ T5828] team0: Port device team_slave_1 added
[   46.830460][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.834222][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.837162][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.845444][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.851630][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.854258][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.864129][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.876404][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.878956][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.881404][ T5834] bridge_slave_0: entered allmulticast mode
[   46.884338][ T5834] bridge_slave_0: entered promiscuous mode
[   46.890515][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.898099][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.900563][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.903130][ T5834] bridge_slave_1: entered allmulticast mode
[   46.906376][ T5834] bridge_slave_1: entered promiscuous mode
[   46.940737][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.952277][ T5832] team0: Port device team_slave_0 added
[   46.956462][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.968414][ T5832] team0: Port device team_slave_1 added
[   46.981130][ T5828] hsr_slave_0: entered promiscuous mode
[   46.983599][ T5828] hsr_slave_1: entered promiscuous mode
[   47.009337][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.011614][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.020272][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.024688][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.027186][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.035494][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.040612][ T5834] team0: Port device team_slave_0 added
[   47.055804][ T5834] team0: Port device team_slave_1 added
[   47.101115][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.103370][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.112414][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.117377][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.119817][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.128244][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.154328][ T5832] hsr_slave_0: entered promiscuous mode
[   47.159029][ T5832] hsr_slave_1: entered promiscuous mode
[   47.161908][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.164545][ T5832] Cannot create hsr debugfs directory
[   47.197614][ T5834] hsr_slave_0: entered promiscuous mode
[   47.200081][ T5834] hsr_slave_1: entered promiscuous mode
[   47.202269][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.204775][ T5834] Cannot create hsr debugfs directory
[   47.379327][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.391214][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.397242][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.408602][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.439391][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.444347][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.450102][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.455288][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.490047][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.492449][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.495290][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.497722][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.504524][ T3611] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.509329][ T3611] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.540576][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.554199][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.558938][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.564196][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.635147][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.666799][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.674652][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   47.692385][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.694797][ T3611] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.701812][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   47.710497][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.716900][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.719288][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.732656][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   47.739610][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.742032][ T3611] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.750422][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.752930][ T3611] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.769786][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.772129][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.775483][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.778014][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.871245][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.961248][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.969223][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.013156][ T5828] veth0_vlan: entered promiscuous mode
[   48.030156][ T5832] veth0_vlan: entered promiscuous mode
[   48.036816][ T5828] veth1_vlan: entered promiscuous mode
[   48.047073][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.052992][ T5832] veth1_vlan: entered promiscuous mode
[   48.073102][ T5828] veth0_macvtap: entered promiscuous mode
[   48.083366][ T5828] veth1_macvtap: entered promiscuous mode
[   48.097210][ T5832] veth0_macvtap: entered promiscuous mode
[   48.111603][ T5832] veth1_macvtap: entered promiscuous mode
[   48.116846][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.130438][ T5834] veth0_vlan: entered promiscuous mode
[   48.135451][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.141063][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.151786][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.157616][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.162360][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.167232][ T5834] veth1_vlan: entered promiscuous mode
[   48.177427][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.180397][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.191199][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.208366][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.219494][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.234597][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.259641][ T5834] veth0_macvtap: entered promiscuous mode
[   48.265034][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.272542][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.277355][ T5834] veth1_macvtap: entered promiscuous mode
[   48.286494][ T5829] Bluetooth: hci0: command tx timeout
[   48.299768][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.303639][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.314188][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.331416][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.344160][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.353499][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.365133][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.368054][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.368245][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.371197][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.376311][ T5829] Bluetooth: hci2: command tx timeout
[   48.378577][ T5829] Bluetooth: hci1: command tx timeout
[   48.382852][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.416783][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.424921][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.472082][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.474768][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.508932][ T3611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.511574][ T3611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.778769][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'.
[   48.782947][ T5926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15'.
[   49.034667][ T5949] syz.2.25 uses obsolete (PF_INET,SOCK_PACKET)
[   49.344156][ T5973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   49.400474][ T5977] tipc: Started in network mode
[   49.402383][ T5977] tipc: Node identity f221b1698f7, cluster identity 4711
[   49.405391][ T5977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.409413][ T5977] syzkaller0: entered promiscuous mode
[   49.411250][ T5977] syzkaller0: entered allmulticast mode
[   49.424606][ T5977] tipc: Resetting bearer <eth:syzkaller0>
[   49.430238][ T5976] tipc: Resetting bearer <eth:syzkaller0>
[   49.437456][ T5976] tipc: Disabling bearer <eth:syzkaller0>
[   49.778571][ T6001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.781335][ T6001] syzkaller0: entered promiscuous mode
[   49.783260][ T6001] syzkaller0: entered allmulticast mode
[   49.806991][ T6001] tipc: Resetting bearer <eth:syzkaller0>
[   49.812112][ T6000] tipc: Resetting bearer <eth:syzkaller0>
[   49.833762][ T6000] tipc: Disabling bearer <eth:syzkaller0>
[   50.229725][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[   50.232752][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'.
[   50.366660][ T5829] Bluetooth: hci0: command tx timeout
[   50.445964][ T5221] Bluetooth: hci2: command tx timeout
[   50.447867][ T5829] Bluetooth: hci1: command tx timeout
[   50.705940][ T6074] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.917275][ T6089] team_slave_0: entered promiscuous mode
[   50.919382][ T6089] team_slave_1: entered promiscuous mode
[   50.921868][ T6089] vlan2: entered promiscuous mode
[   50.923516][ T6089] team0: entered promiscuous mode
[   51.088745][ T6108] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[   51.160060][ T6116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.97'.
[   51.293888][ T6122] warning: `syz.0.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.644433][ T6142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.108'.
[   51.680712][ T6144] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.904881][ T6160] Bluetooth: MGMT ver 1.23
[   52.198648][ T6183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.129'.
[   52.450756][ T5829] Bluetooth: hci0: command tx timeout
[   52.525943][ T5829] Bluetooth: hci1: command tx timeout
[   52.525977][ T5221] Bluetooth: hci2: command tx timeout
[   52.682916][ T6201] netlink: 'syz.0.135': attribute type 1 has an invalid length.
[   52.687450][ T6201] netlink: 224 bytes leftover after parsing attributes in process `syz.0.135'.
[   52.759964][ T6206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.135'.
[   52.765123][ T6205] Illegal XDP return value 456334528 on prog  (id 25) dev N/A, expect packet loss!
[   52.973634][ T6219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.143'.
[   53.042789][ T6222] tipc: Started in network mode
[   53.044418][ T6222] tipc: Node identity 7acde68c7314, cluster identity 4711
[   53.046871][ T6222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.071222][ T6222] syzkaller0: entered promiscuous mode
[   53.073204][ T6222] syzkaller0: entered allmulticast mode
[   53.075363][ T6222] tipc: Resetting bearer <eth:syzkaller0>
[   53.110741][   T27] tipc: Resetting bearer <eth:syzkaller0>
[   53.114175][ T6217] tipc: Resetting bearer <eth:syzkaller0>
[   54.116952][  T789] tipc: Node number set to 165275276
[   54.526425][ T5221] Bluetooth: hci0: command tx timeout
[   54.606435][ T5221] Bluetooth: hci1: command tx timeout
[   54.606457][ T5829] Bluetooth: hci2: command tx timeout
[   54.721723][ T6217] tipc: Disabling bearer <eth:syzkaller0>
[   55.582383][ T6331] netlink: 'syz.0.169': attribute type 1 has an invalid length.
[   56.317750][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.420027][ T6411] __nla_validate_parse: 3 callbacks suppressed
[   56.420040][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'.
[   56.424992][ T6411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.187'.
[   56.428387][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'.
[   56.431860][ T6411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.187'.
[   56.437986][ T6411] netlink: 'syz.2.187': attribute type 6 has an invalid length.
[   56.570728][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'.
[   56.591172][ T6428] netlink: 'syz.2.194': attribute type 39 has an invalid length.
[   56.613294][ T6428] veth0_macvtap: left promiscuous mode
[   56.644508][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'.
[   56.726571][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'.
[   56.749603][ T6433] syzkaller0: entered promiscuous mode
[   56.751503][ T6433] syzkaller0: entered allmulticast mode
[   57.417405][ T6443] Zero length message leads to an empty skb
[   57.456729][ T6451] netlink: 'syz.0.205': attribute type 29 has an invalid length.
[   57.464505][ T6451] netlink: 'syz.0.205': attribute type 29 has an invalid length.
[   57.481558][ T6451] netlink: 500 bytes leftover after parsing attributes in process `syz.0.205'.
[   57.483827][ T6454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.206'.
[   57.560410][ T6462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.044404][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'.
[   59.550998][ T6560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.553931][ T6560] syzkaller0: entered promiscuous mode
[   59.556759][ T6560] syzkaller0: entered allmulticast mode
[   59.579659][ T6560] tipc: Resetting bearer <eth:syzkaller0>
[   59.587731][ T6559] tipc: Resetting bearer <eth:syzkaller0>
[   59.594921][ T6559] tipc: Disabling bearer <eth:syzkaller0>
[   59.823984][ T6579] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   59.832638][ T6579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.770263][ T6675] syzkaller0: entered promiscuous mode
[   60.772202][ T6675] syzkaller0: entered allmulticast mode
[   61.543078][ T6719] __nla_validate_parse: 1 callbacks suppressed
[   61.543090][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'.
[   61.650364][ T6710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.756827][ T6719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.172768][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'.
[   62.200147][ T6756] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   62.274035][ T6760] tipc: Enabled bearer <eth:team0>, priority 10
[   62.315754][ T6762] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[   62.618524][ T6775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.623463][ T6775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.630082][ T6775] bond0 (unregistering): Released all slaves
[   62.735454][ T6782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.334'.
[   63.026071][ T6805] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[   63.118572][ T6809] netlink: 'syz.2.347': attribute type 12 has an invalid length.
[   63.151457][ T6815] tipc: Started in network mode
[   63.153115][ T6815] tipc: Node identity ca93e546b299, cluster identity 4711
[   63.159675][ T6815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.168269][ T6815] syzkaller0: entered promiscuous mode
[   63.170127][ T6815] syzkaller0: entered allmulticast mode
[   63.235203][ T6815] tipc: Resetting bearer <eth:syzkaller0>
[   63.244066][ T6814] tipc: Resetting bearer <eth:syzkaller0>
[   63.258093][ T6814] tipc: Disabling bearer <eth:syzkaller0>
[   63.385971][ T5869] tipc: Node number set to 2102505833
[   63.448567][ T6834] netlink: 2 bytes leftover after parsing attributes in process `syz.1.358'.
[   63.523594][ T6842] syzkaller1: tun_chr_ioctl cmd 1074025673
[   63.988327][ T6898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.101191][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'.
[   64.110856][ T6910] batadv0: entered promiscuous mode
[   64.112992][ T6910] macvtap1: entered promiscuous mode
[   64.115032][ T6910] macvtap1: entered allmulticast mode
[   64.118242][ T6910] batadv0: entered allmulticast mode
[   64.120929][ T6910] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   64.134323][ T6910] batadv0: left allmulticast mode
[   64.137861][ T6910] batadv0: left promiscuous mode
[   64.632207][ T6952] netlink: 128 bytes leftover after parsing attributes in process `syz.1.408'.
[   64.635849][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'.
[   64.664654][ T6954] openvswitch: netlink: Message has 4 unknown bytes.
[   64.666985][ T6954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.789107][ T6962] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[   64.920935][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'.
[   64.924462][ T6968] netlink: 'syz.1.415': attribute type 20 has an invalid length.
[   64.937432][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.937486][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'.
[   64.941112][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.945769][ T6968] netlink: 'syz.1.415': attribute type 20 has an invalid length.
[   64.947442][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.952373][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.439771][    T9] IPVS: starting estimator thread 0...
[   65.443354][ T5869] IPVS: starting estimator thread 0...
[   65.518253][ T7000] bridge0: entered allmulticast mode
[   65.524298][ T7000] pim6reg: entered allmulticast mode
[   65.526006][ T6991] IPVS: using max 79 ests per chain, 189600 per kthread
[   65.535883][ T6992] IPVS: using max 78 ests per chain, 187200 per kthread
[   65.548325][ T7002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   66.101463][ T7038] TCP: TCP_TX_DELAY enabled
[   66.535800][ T7062] netlink: 'syz.1.453': attribute type 39 has an invalid length.
[   66.688318][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'.
[   66.691834][ T7068] netlink: 'syz.0.456': attribute type 14 has an invalid length.
[   66.701294][ T5889] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.701388][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'.
[   66.710215][ T7068] netlink: 'syz.0.456': attribute type 14 has an invalid length.
[   66.715260][ T7069] bond_slave_0: entered promiscuous mode
[   66.717729][ T7069] bond_slave_1: entered promiscuous mode
[   66.721341][ T7069] vlan2: entered promiscuous mode
[   66.726447][ T7069] bond0: entered promiscuous mode
[   66.744796][ T5889] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.748956][ T5889] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.756610][ T5889] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.241531][ T7122] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   68.398715][ T7144] syzkaller1: entered promiscuous mode
[   68.400576][ T7144] syzkaller1: entered allmulticast mode
Connection to localhost closed by remote host.
[   69.248188][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.251581][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.316408][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.319695][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.392656][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.397080][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.444617][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.449291][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.576357][   T12] bridge_slave_1: left allmulticast mode
[   69.579076][   T12] bridge_slave_1: left promiscuous mode
[   69.582826][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.588450][   T12] bridge_slave_0: left allmulticast mode
[   69.591349][   T12] bridge_slave_0: left promiscuous mode
[   69.593314][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.715122][   T12] bridge0 (unregistering): left allmulticast mode
[   69.782761][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.789332][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.792936][   T12] bond0 (unregistering): Released all slaves
[   69.861323][   T12] tipc: Left network mode
[   70.037180][   T12] hsr_slave_0: left promiscuous mode
[   70.039517][   T12] hsr_slave_1: left promiscuous mode
[   70.041683][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.044130][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.049204][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.051566][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.062044][   T12] veth1_macvtap: left promiscuous mode
[   70.064016][   T12] veth0_macvtap: left promiscuous mode
[   70.067411][   T12] veth1_vlan: left promiscuous mode
[   70.069287][   T12] veth0_vlan: left promiscuous mode
[   70.125746][   T12] pim6reg (unregistering): left allmulticast mode
[   70.286796][ T5221] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   70.332486][   T12] team_slave_1 (unregistering): left promiscuous mode
[   70.335177][   T12] team0 (unregistering): Port device team_slave_1 removed
[   70.355321][   T12] team_slave_0 (unregistering): left promiscuous mode
[   70.360220][   T12] team0 (unregistering): Port device team_slave_0 removed
[   70.849331][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.850298][   T12] IPVS: stop unused estimator thread 0...
[   70.925510][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.929916][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.001336][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.004633][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.071932][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.077641][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.150631][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.154077][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.253993][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.318139][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.367743][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.416546][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.478978][   T12] bridge_slave_1: left allmulticast mode
[   71.480928][   T12] bridge_slave_1: left promiscuous mode
[   71.482862][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.490793][   T12] bridge_slave_0: left allmulticast mode
[   71.492667][   T12] bridge_slave_0: left promiscuous mode
[   71.494614][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.500313][   T12] bridge_slave_1: left allmulticast mode
[   71.502169][   T12] bridge_slave_1: left promiscuous mode
[   71.504117][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.509127][   T12] bridge_slave_0: left allmulticast mode
[   71.510998][   T12] bridge_slave_0: left promiscuous mode
[   71.512944][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.812409][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.815405][   T12] bond_slave_0: left promiscuous mode
[   71.818678][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.821642][   T12] bond_slave_1: left promiscuous mode
[   71.824898][   T12] bond0 (unregistering): Released all slaves
[   72.029884][   T12] tipc: Left network mode
[   72.045794][   T12] tipc: Disabling bearer <eth:team0>
[   72.060755][   T12] tipc: Left network mode
[   72.320682][   T12] hsr_slave_0: left promiscuous mode
[   72.322899][   T12] hsr_slave_1: left promiscuous mode
[   72.324867][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.327976][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.331132][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.333502][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.339777][   T12] hsr_slave_0: left promiscuous mode
[   72.342030][   T12] hsr_slave_1: left promiscuous mode
[   72.344074][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.347549][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.350386][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.352769][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.366489][   T12] veth1_macvtap: left promiscuous mode
[   72.368286][   T12] veth0_macvtap: left promiscuous mode
[   72.370080][   T12] veth1_vlan: left promiscuous mode
[   72.371756][   T12] veth0_vlan: left promiscuous mode
[   72.374336][   T12] veth1_macvtap: left promiscuous mode
[   72.376768][   T12] veth1_vlan: left promiscuous mode
[   72.378485][   T12] veth0_vlan: left promiscuous mode
[   72.662806][   T12] team0 (unregistering): Port device team_slave_1 removed
[   72.681696][   T12] team0 (unregistering): Port device team_slave_0 removed
[   73.043407][   T12] team0 (unregistering): Port device team_slave_1 removed
[   73.060362][   T12] team0 (unregistering): Port device team_slave_0 removed
[   73.678584][   T12] IPVS: stop unused estimator thread 0...
[   73.708000][   T12] ------------[ cut here ]------------
[   73.709867][   T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[   73.712967][   T12] Modules linked in:
[   73.714486][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[   73.719706][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.722970][   T12] Workqueue: netns cleanup_net
[   73.724590][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[   73.726538][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 48 5e 0c f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 2c ed f7 e8 91 4e aa f7 90 <0f> 0b 90 e9 fd fd ff ff e8 83 4e aa f7 90 0f 0b 90 e9 60 fe ff ff
[   73.732668][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[   73.734623][   T12] RAX: ffffffff8a15d99f RBX: ffff888111988000 RCX: ffff88801c6bd640
[   73.737468][   T12] RDX: 0000000000000000 RSI: ffffffff8db87667 RDI: ffff88801c6bd640
[   73.740035][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa1f6f7 R09: 1ffffffff1f43ede
[   73.742582][   T12] R10: dffffc0000000000 R11: fffffbfff1f43edf R12: ffffffff8f6182e0
[   73.745183][   T12] R13: 1ffff9200001ef40 R14: ffff888111989480 R15: dffffc0000000000
[   73.748024][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[   73.750961][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   73.753181][   T12] CR2: 00007f8a0a8d3ff8 CR3: 0000000028bfa000 CR4: 00000000000006f0
[   73.756041][   T12] Call Trace:
[   73.757176][   T12]  <TASK>
[   73.758178][   T12]  xfrm_net_exit+0x2d/0x70
[   73.759655][   T12]  ops_undo_list+0x49a/0x990
[   73.761146][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[   73.762787][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[   73.764493][   T12]  cleanup_net+0x4c5/0x800
[   73.766208][   T12]  ? __pfx_cleanup_net+0x10/0x10
[   73.767867][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.769603][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   73.771499][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   73.773317][   T12]  process_scheduled_works+0xae1/0x17b0
[   73.775091][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[   73.777199][   T12]  worker_thread+0x8a0/0xda0
[   73.778766][   T12]  kthread+0x711/0x8a0
[   73.780128][   T12]  ? __pfx_worker_thread+0x10/0x10
[   73.781857][   T12]  ? __pfx_kthread+0x10/0x10
[   73.783406][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.785126][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[   73.786939][   T12]  ? __pfx_kthread+0x10/0x10
[   73.788492][   T12]  ret_from_fork+0x3fc/0x770
[   73.790034][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[   73.791739][   T12]  ? __switch_to_asm+0x39/0x70
[   73.793349][   T12]  ? __switch_to_asm+0x33/0x70
[   73.794940][   T12]  ? __pfx_kthread+0x10/0x10
[   73.796617][   T12]  ret_from_fork_asm+0x1a/0x30
[   73.798204][   T12]  </TASK>
[   73.799233][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   73.801562][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[   73.805494][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.808709][   T12] Workqueue: netns cleanup_net
[   73.810302][   T12] Call Trace:
[   73.811392][   T12]  <TASK>
[   73.812365][   T12]  dump_stack_lvl+0x99/0x250
[   73.813896][   T12]  ? __asan_memcpy+0x40/0x70
[   73.815440][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.817164][   T12]  ? __pfx__printk+0x10/0x10
[   73.818648][   T12]  panic+0x2db/0x790
[   73.819930][   T12]  ? __pfx_panic+0x10/0x10
[   73.821373][   T12]  ? ret_from_fork_asm+0x1a/0x30
[   73.822956][   T12]  __warn+0x31b/0x4b0
[   73.824247][   T12]  ? xfrm_state_fini+0x270/0x2f0
[   73.825820][   T12]  ? xfrm_state_fini+0x270/0x2f0
[   73.827411][   T12]  report_bug+0x2be/0x4f0
[   73.828835][   T12]  ? xfrm_state_fini+0x270/0x2f0
[   73.830485][   T12]  ? xfrm_state_fini+0x270/0x2f0
[   73.832138][   T12]  ? xfrm_state_fini+0x272/0x2f0
[   73.833789][   T12]  handle_bug+0x84/0x160
[   73.835206][   T12]  exc_invalid_op+0x1a/0x50
[   73.836727][   T12]  asm_exc_invalid_op+0x1a/0x20
[   73.838332][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[   73.840172][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 48 5e 0c f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 2c ed f7 e8 91 4e aa f7 90 <0f> 0b 90 e9 fd fd ff ff e8 83 4e aa f7 90 0f 0b 90 e9 60 fe ff ff
[   73.846202][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[   73.848088][   T12] RAX: ffffffff8a15d99f RBX: ffff888111988000 RCX: ffff88801c6bd640
[   73.850578][   T12] RDX: 0000000000000000 RSI: ffffffff8db87667 RDI: ffff88801c6bd640
[   73.853033][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa1f6f7 R09: 1ffffffff1f43ede
[   73.855505][   T12] R10: dffffc0000000000 R11: fffffbfff1f43edf R12: ffffffff8f6182e0
[   73.857981][   T12] R13: 1ffff9200001ef40 R14: ffff888111989480 R15: dffffc0000000000
[   73.860494][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[   73.862065][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[   73.863681][   T12]  xfrm_net_exit+0x2d/0x70
[   73.865124][   T12]  ops_undo_list+0x49a/0x990
[   73.866629][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[   73.868328][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[   73.869988][   T12]  cleanup_net+0x4c5/0x800
[   73.871459][   T12]  ? __pfx_cleanup_net+0x10/0x10
[   73.873070][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.874749][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   73.876550][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   73.878342][   T12]  process_scheduled_works+0xae1/0x17b0
[   73.880110][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[   73.882032][   T12]  worker_thread+0x8a0/0xda0
[   73.883543][   T12]  kthread+0x711/0x8a0
[   73.884864][   T12]  ? __pfx_worker_thread+0x10/0x10
[   73.886519][   T12]  ? __pfx_kthread+0x10/0x10
[   73.887982][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.889670][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[   73.891398][   T12]  ? __pfx_kthread+0x10/0x10
[   73.892971][   T12]  ret_from_fork+0x3fc/0x770
[   73.894462][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[   73.896087][   T12]  ? __switch_to_asm+0x39/0x70
[   73.897644][   T12]  ? __switch_to_asm+0x33/0x70
[   73.899200][   T12]  ? __pfx_kthread+0x10/0x10
[   73.900761][   T12]  ret_from_fork_asm+0x1a/0x30
[   73.902359][   T12]  </TASK>
[   73.904044][   T12] Kernel Offset: disabled
[   73.905441][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:57:34  Registers:
info registers vcpu 0

CPU#0
RAX=d13df9793e1a3a00 RBX=ffff88802202fb00 RCX=d13df9793e1a3a00 RDX=0000000000000006
RSI=ffffffff8d999894 RDI=ffffffff8be28d00 RBP=ffffc90002e9f9e0 RSP=ffffc90002e9f8a0
R8 =ffffffff8fa1f6f7 R9 =1ffffffff1f43ede R10=dffffc0000000000 R11=fffffbfff1f43edf
R12=dffffc0000000000 R13=1ffff920005d3f24 R14=1ffff11009607606 R15=00000000000001a1
RIP=ffffffff81a74e3e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffb4b1d0b8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ffffffff 0000000100000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffffffffffff00ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7030
R8 =ffff888107e38237 R9 =1ffff11020fc7046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99af188f R14=ffffffff99df64c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8a0a8d3ff8 CR3=0000000028bfa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000002 0000000000003031
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffff0000 XMM09=0000000000000081 0000000000003031
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
