last executing test programs:

1m7.48984754s ago: executing program 2 (id=735):
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0xfffffffe, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x100}, 0x0, 0x0, 0x0, 0x9, 0xfff, 0x800, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f3c00db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa0afbc9"], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef)

1m7.409772597s ago: executing program 2 (id=736):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000000)="b9ff0300600d698cff9e14f008004de7f9c7646b0b06e3e1360000003200135437f6e31e17128c4407ca814f7bb551fe5f4607b819670c56c81411ac051c387f00c8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m7.409258169s ago: executing program 2 (id=737):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x100)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20)
write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0xfe33)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000d00008500000001000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)='%+9llu \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
socket$kcm(0x29, 0x5, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x15, 0x5, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003300010000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa00000000000000000300060000000000"], 0x80}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0xd, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x4000000)
socket$kcm(0x10, 0x2, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000080))
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20071, &(0x7f00000004c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB])

1m6.43498974s ago: executing program 2 (id=751):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

1m6.315956192s ago: executing program 2 (id=752):
r0 = socket(0x840000000002, 0x3, 0xff)
sendmsg$rds(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040}, 0x40004)

1m6.090488788s ago: executing program 2 (id=753):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002340)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000600142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)

1m5.972416368s ago: executing program 32 (id=753):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002340)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000600142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)

1.882713279s ago: executing program 3 (id=1516):
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)="1c000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015", 0x1f}], 0x1}, 0x20040800)

1.738083015s ago: executing program 3 (id=1521):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x73)
socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000600)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0)

1.737737624s ago: executing program 0 (id=1522):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60640c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1.674121722s ago: executing program 0 (id=1524):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3}, 0x94)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8)

1.352881993s ago: executing program 1 (id=1528):
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x3442, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0)

1.212969848s ago: executing program 1 (id=1529):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f, 0x0, 0x0, @void, @value=r0}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r2=>0x0}, 0x8)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r1, 0x4, r0}, 0x10)

1.148661656s ago: executing program 1 (id=1530):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)

330.846132ms ago: executing program 3 (id=1531):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYRES32, @ANYBLOB="f8ffffff000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0100"/21], 0x50)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00'}, 0x18)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c86", 0x80}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40002000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x17, 0x0, &(0x7f0000000840)='GPL\x00', 0x80000008, 0x36, &(0x7f0000000c00)=""/54, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0xf, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, r1, r1, 0x1], 0x0, 0x10, 0x7}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

269.361104ms ago: executing program 0 (id=1532):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206010006000006021c0000000000000e0003006269746d61703a697000000005000400000008000900020073797a30000000001c000780180001800b0002400000000000000000000000000000000105000500020000000500010006"], 0x64}}, 0x0)

268.752446ms ago: executing program 0 (id=1533):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4)

268.395546ms ago: executing program 1 (id=1534):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="7a0af8ff75253073bfa100000000000007010000f9ffffffb702000005000000bf1300008b0f480eb52365daea8993000000008500000023000000b70000000c000000950000ff00000000b2595285faa6ead0169191d54f81d9217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f61171c8edd3aa5d6ee7ab10b1a297cf52000051ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65"], 0x0}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004802c"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

216.944614ms ago: executing program 0 (id=1535):
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x7ff, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)

216.686164ms ago: executing program 1 (id=1536):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0)

214.845429ms ago: executing program 3 (id=1537):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0)

132.73893ms ago: executing program 0 (id=1538):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x8, 0x0, 0x0)
recvmsg$kcm(r1, 0x0, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'erspan0\x00'})
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x7e, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab440c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b", 0x0, 0xfe, 0x60000000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000055"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6, 0x0, 0x1, 0x0, 0x6, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x80000000}, 0x8)
close(r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

132.359207ms ago: executing program 3 (id=1539):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xb7, 0xb, 0x6, 0x30, 0x0, 0x25, 0x51161, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8400, 0xfffffffffffffff8, 0x6, 0x7, 0x3, 0xffffffff, 0x10, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x10000000000802, 0xffffffffffffffff, 0x2)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})

356.707µs ago: executing program 1 (id=1540):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000700)=@newsa={0x144, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0x33}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x3, 0x1000}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc}]}, 0x144}, 0x1, 0x0, 0x0, 0x4075}, 0x4800)

0s ago: executing program 3 (id=1541):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000180), 0x0}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52780' (ED25519) to the list of known hosts.
syzkaller login: [   55.882986][ T5824] cgroup: Unknown subsys name 'net'
[   55.988798][ T5824] cgroup: Unknown subsys name 'cpuset'
[   55.994902][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.688684][ T5824] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.903577][ T5856] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.183014][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.574706][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.580418][ T5893] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.583606][ T5893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.594963][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.605414][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.632769][ T5895] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.634788][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.637408][ T5895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.639624][ T5893] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.642204][ T5895] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.645422][ T5893] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.650754][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.659046][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.662080][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.666084][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.095126][ T5885] chnl_net:caif_netlink_parms(): no params data found
[   70.128183][ T5886] chnl_net:caif_netlink_parms(): no params data found
[   70.153560][ T5889] chnl_net:caif_netlink_parms(): no params data found
[   70.297623][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.300621][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.303187][ T5885] bridge_slave_0: entered allmulticast mode
[   70.306128][ T5885] bridge_slave_0: entered promiscuous mode
[   70.331391][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.333846][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.336406][ T5885] bridge_slave_1: entered allmulticast mode
[   70.339886][ T5885] bridge_slave_1: entered promiscuous mode
[   70.412200][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.415247][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.417905][ T5886] bridge_slave_0: entered allmulticast mode
[   70.420781][ T5886] bridge_slave_0: entered promiscuous mode
[   70.423647][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.428810][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.432325][ T5889] bridge_slave_0: entered allmulticast mode
[   70.436155][ T5889] bridge_slave_0: entered promiscuous mode
[   70.439500][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.441730][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.443928][ T5889] bridge_slave_1: entered allmulticast mode
[   70.447968][ T5889] bridge_slave_1: entered promiscuous mode
[   70.453302][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.459118][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.470372][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.472655][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.475211][ T5886] bridge_slave_1: entered allmulticast mode
[   70.478681][ T5886] bridge_slave_1: entered promiscuous mode
[   70.514139][ T5885] team0: Port device team_slave_0 added
[   70.543556][ T5885] team0: Port device team_slave_1 added
[   70.550248][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.558818][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.584522][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.590873][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.604298][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.606760][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.614714][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.638636][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.640855][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.649855][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.669910][ T5886] team0: Port device team_slave_0 added
[   70.673750][ T5889] team0: Port device team_slave_0 added
[   70.686111][ T5886] team0: Port device team_slave_1 added
[   70.690252][ T5889] team0: Port device team_slave_1 added
[   70.762612][ T5885] hsr_slave_0: entered promiscuous mode
[   70.765702][ T5885] hsr_slave_1: entered promiscuous mode
[   70.777713][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.780207][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.789484][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.794053][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.796847][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.806296][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.812101][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.815047][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.825297][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.830202][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.832800][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.842781][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.958896][ T5889] hsr_slave_0: entered promiscuous mode
[   70.961838][ T5889] hsr_slave_1: entered promiscuous mode
[   70.964912][ T5889] debugfs: 'hsr0' already exists in 'hsr'
[   70.966660][ T5889] Cannot create hsr debugfs directory
[   70.976666][ T5886] hsr_slave_0: entered promiscuous mode
[   70.979268][ T5886] hsr_slave_1: entered promiscuous mode
[   70.981552][ T5886] debugfs: 'hsr0' already exists in 'hsr'
[   70.983441][ T5886] Cannot create hsr debugfs directory
[   71.209862][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.212338][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.255985][ T5885] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.268674][ T5885] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.290388][ T5885] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.307631][ T5885] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.352812][ T5889] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.358227][ T5889] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.367334][ T5889] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.377948][ T5889] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.457841][ T5886] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.466656][ T5886] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.477132][ T5886] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.484303][ T5886] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.575661][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.599831][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.607466][ T5885] 8021q: adding VLAN 0 to HW filter on device team0
[   71.631028][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.634164][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.653412][ T5889] 8021q: adding VLAN 0 to HW filter on device team0
[   71.659193][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.661881][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.676164][ T5236] Bluetooth: hci0: command tx timeout
[   71.681913][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.684582][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.689301][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.691655][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.719289][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.755443][ T5236] Bluetooth: hci1: command tx timeout
[   71.759056][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[   71.764996][ T5236] Bluetooth: hci2: command tx timeout
[   71.782440][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.785377][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.803767][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.806584][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.975004][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.005548][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.033838][ T5885] veth0_vlan: entered promiscuous mode
[   72.055527][ T5885] veth1_vlan: entered promiscuous mode
[   72.081160][ T5889] veth0_vlan: entered promiscuous mode
[   72.089316][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.098624][ T5889] veth1_vlan: entered promiscuous mode
[   72.123252][ T5885] veth0_macvtap: entered promiscuous mode
[   72.130178][ T5885] veth1_macvtap: entered promiscuous mode
[   72.160952][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.167541][ T5886] veth0_vlan: entered promiscuous mode
[   72.176377][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.182325][ T5889] veth0_macvtap: entered promiscuous mode
[   72.188722][ T5886] veth1_vlan: entered promiscuous mode
[   72.193137][ T5889] veth1_macvtap: entered promiscuous mode
[   72.202012][ T5923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.215444][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.218803][ T5923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.222326][ T5923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.254218][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.286964][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.292897][ T5886] veth0_macvtap: entered promiscuous mode
[   72.303834][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.312633][ T5886] veth1_macvtap: entered promiscuous mode
[   72.326211][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.348242][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.351817][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.387917][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.412954][  T457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.419278][  T457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.424104][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.448578][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.451466][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.459780][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.478356][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.521781][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.531109][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.569540][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.572745][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.625079][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.630045][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.639513][ T5953] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16'.
[   72.665600][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.669357][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.699902][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.708790][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.755592][ T5236] Bluetooth: hci0: command tx timeout
[   73.778640][ T5999] netlink: 'syz.0.35': attribute type 39 has an invalid length.
[   73.837066][ T5236] Bluetooth: hci2: command tx timeout
[   73.839303][ T5236] Bluetooth: hci1: command tx timeout
[   74.133175][ T6014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.41'.
[   74.139473][ T6014] netlink: 'syz.1.41': attribute type 7 has an invalid length.
[   74.142752][ T6014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.41'.
[   74.164419][    C1] hrtimer: interrupt took 31093 ns
[   75.835696][ T5888] Bluetooth: hci0: command tx timeout
[   75.914802][ T5888] Bluetooth: hci1: command tx timeout
[   75.916955][ T5888] Bluetooth: hci2: command tx timeout
[   75.988561][ T6083] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.74'.
[   75.996984][ T6083] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.74'.
[   76.428809][ T6113] syz.1.90 uses obsolete (PF_INET,SOCK_PACKET)
[   76.446248][ T6115] netlink: 'syz.0.91': attribute type 4 has an invalid length.
[   76.612315][ T6123] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.95'.
[   77.084747][ T6143] Zero length message leads to an empty skb
[   77.326617][ T6154] netlink: 16375 bytes leftover after parsing attributes in process `syz.0.108'.
[   77.337802][ T6150] netlink: 60 bytes leftover after parsing attributes in process `syz.1.106'.
[   77.464498][ T6157] : renamed from bond0 (while UP)
[   77.916966][ T5236] Bluetooth: hci0: command tx timeout
[   77.994562][ T5236] Bluetooth: hci2: command tx timeout
[   77.996252][ T5236] Bluetooth: hci1: command tx timeout
[   78.389729][ T6200] netlink: 'syz.1.128': attribute type 6 has an invalid length.
[   78.392793][ T6200] netlink: 140 bytes leftover after parsing attributes in process `syz.1.128'.
[   78.567571][ T6208] netlink: 'syz.2.131': attribute type 1 has an invalid length.
[   78.729787][ T6218] Driver unsupported XDP return value 0 on prog  (id 48) dev N/A, expect packet loss!
[   79.729586][ T6229] warning: `syz.2.141' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.768575][ T6229] netlink: 168 bytes leftover after parsing attributes in process `syz.2.141'.
[   79.780722][ T6229] netlink: 'syz.2.141': attribute type 4 has an invalid length.
[   79.783729][ T6229] netlink: 152 bytes leftover after parsing attributes in process `syz.2.141'.
[   79.815645][ T6229] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   80.001986][ T6240] netlink: 56 bytes leftover after parsing attributes in process `syz.2.145'.
[   80.106066][ T6248] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.149'.
[   80.364969][ T6262] =======================================================
[   80.364969][ T6262] WARNING: The mand mount option has been deprecated and
[   80.364969][ T6262]          and is ignored by this kernel. Remove the mand
[   80.364969][ T6262]          option from the mount to silence this warning.
[   80.364969][ T6262] =======================================================
[   80.501263][ T6272] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.160'.
[   80.508439][ T6272] netlink: 'syz.2.160': attribute type 4 has an invalid length.
[   80.522756][ T6274] netlink: 1 bytes leftover after parsing attributes in process `syz.0.161'.
[   80.570462][ T6276] netlink: 104 bytes leftover after parsing attributes in process `syz.0.162'.
[   80.649711][ T6272] netlink: 'syz.2.160': attribute type 10 has an invalid length.
[   80.665324][ T6282] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.771812][ T6272] team0: Port device dummy0 added
[   80.847963][ T6272] syz.2.160 (6272) used greatest stack depth: 19064 bytes left
[   81.243889][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'.
[   81.253148][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'.
[   81.898920][ T6330] sctp: [Deprecated]: syz.2.179 (pid 6330) Use of int in maxseg socket option.
[   81.898920][ T6330] Use struct sctp_assoc_value instead
[   82.206152][ T6339] netlink: 'syz.1.184': attribute type 3 has an invalid length.
[   84.555006][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'.
[   84.628633][ T6390] netlink: 'syz.0.203': attribute type 13 has an invalid length.
[   84.632088][ T6390] netlink: 'syz.0.203': attribute type 58 has an invalid length.
[   84.641371][ T6390] netlink: 152 bytes leftover after parsing attributes in process `syz.0.203'.
[   86.864284][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1239141109 wd_nsec: 1239125619
[   90.284153][   T24] cfg80211: failed to load regulatory.db
[   90.476930][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'.
[   90.480502][ T6407] openvswitch: netlink: Missing key (keys=40, expected=80)
[   90.993024][ T6435] netlink: 'syz.0.223': attribute type 10 has an invalid length.
[   91.138459][ T6435] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   91.216227][ T6444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.227'.
[   91.219221][ T6444] openvswitch: netlink: Missing key (keys=40, expected=100)
[   91.392556][ T6455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.167097][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'.
[   92.339318][ T6476] netlink: 'syz.2.239': attribute type 10 has an invalid length.
[   92.342967][ T6476] lo: entered promiscuous mode
[   92.348398][ T6476] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   92.715043][ T5888] Bluetooth: hci2: Opcode 0x206a failed: -110
[   92.804957][ T5888] Bluetooth: hci2: command 0x206a tx timeout
[   93.762899][ T6509] netlink: 164 bytes leftover after parsing attributes in process `syz.2.254'.
[   93.925360][ T6519] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.258'.
[   93.932124][ T6519] netlink: zone id is out of range
[   93.935575][ T6519] netlink: zone id is out of range
[   93.938463][ T6519] netlink: zone id is out of range
[   93.942312][ T6519] netlink: get zone limit has 8 unknown bytes
[   93.969350][ T6522] netlink: 'syz.1.260': attribute type 1 has an invalid length.
[   93.972389][ T6522] netlink: 'syz.1.260': attribute type 2 has an invalid length.
[   93.975959][ T6522] netlink: 'syz.1.260': attribute type 3 has an invalid length.
[   93.979061][ T6522] netlink: 'syz.1.260': attribute type 5 has an invalid length.
[   93.982106][ T6522] netlink: 'syz.1.260': attribute type 6 has an invalid length.
[   93.986117][ T6522] netlink: 'syz.1.260': attribute type 7 has an invalid length.
[   93.989348][ T6522] netlink: 9 bytes leftover after parsing attributes in process `syz.1.260'.
[   93.993082][ T6522] netlink: 130080 bytes leftover after parsing attributes in process `syz.1.260'.
[   93.998543][ T6522] netlink: 'syz.1.260': attribute type 1 has an invalid length.
[   94.002504][ T6522] netlink: 'syz.1.260': attribute type 2 has an invalid length.
[   94.008753][ T6522] netlink: 9 bytes leftover after parsing attributes in process `syz.1.260'.
[   94.648335][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'.
[   94.652123][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'.
[   96.920521][ T6609] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32
[  100.531155][ T6670] validate_nla: 7 callbacks suppressed
[  100.531199][ T6670] netlink: 'syz.2.322': attribute type 1 has an invalid length.
[  101.693563][ T6699] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  101.748079][ T6701] __nla_validate_parse: 1 callbacks suppressed
[  101.748095][ T6701] netlink: 32 bytes leftover after parsing attributes in process `syz.1.339'.
[  101.950760][ T6716] netlink: 'syz.1.341': attribute type 11 has an invalid length.
[  101.953411][ T6716] netlink: 168 bytes leftover after parsing attributes in process `syz.1.341'.
[  102.016164][ T6709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.426560][ T6726] netlink: 160 bytes leftover after parsing attributes in process `syz.1.348'.
[  102.443902][ T6726] netlink: 'syz.1.348': attribute type 10 has an invalid length.
[  102.475653][ T6726] batman_adv: batadv0: Adding interface: netdevsim0
[  102.478010][ T6726] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.487560][ T6726] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  103.206899][ T5888] Bluetooth: hci0: Malformed Event: 0x2f
[  103.367580][ T6766] netlink: 'syz.2.362': attribute type 11 has an invalid length.
[  103.372018][ T6768] netlink: 132 bytes leftover after parsing attributes in process `syz.1.363'.
[  103.900231][ T6797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.377'.
[  103.939147][ T6799] netlink: 'syz.2.378': attribute type 1 has an invalid length.
[  103.941706][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'.
[  106.958940][ T6837] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.396'.
[  106.963160][ T6837] netlink: 5 bytes leftover after parsing attributes in process `syz.2.396'.
[  107.084030][ T6838] netlink: 180 bytes leftover after parsing attributes in process `syz.2.396'.
[  110.338168][   T33] audit: type=1107 audit(1757909521.759:2): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  111.143327][ T6865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.407'.
[  111.149004][ T6865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.262101][ T6867] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  111.265101][ T6867] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  111.352368][ T6872] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  114.001411][ T6923] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.435'.
[  114.036713][ T6925] netlink: 17 bytes leftover after parsing attributes in process `syz.2.436'.
[  114.039899][ T6925] netlink: zone id is out of range
[  114.042275][ T6925] netlink: zone id is out of range
[  114.045830][ T6925] netlink: zone id is out of range
[  114.047840][ T6925] netlink: zone id is out of range
[  114.049669][ T6925] netlink: zone id is out of range
[  114.051905][ T6925] netlink: zone id is out of range
[  114.628935][ T6944] netlink: 'syz.1.444': attribute type 1 has an invalid length.
[  114.632266][ T6944] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.444'.
[  115.709964][ T6960] netlink: 'syz.0.450': attribute type 2 has an invalid length.
[  115.713077][ T6960] netlink: 'syz.0.450': attribute type 8 has an invalid length.
[  115.717666][ T6960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.450'.
[  115.750849][ T6962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.451'.
[  115.754303][ T6962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.451'.
[  115.842577][ T6966] netlink: 10 bytes leftover after parsing attributes in process `syz.0.453'.
[  116.423076][ T7000] netlink: 64 bytes leftover after parsing attributes in process `syz.2.469'.
[  116.435681][ T6995] netlink: 68 bytes leftover after parsing attributes in process `syz.1.467'.
[  116.512896][ T7007] delete_channel: no stack
[  116.580240][ T7014] netlink: 2 bytes leftover after parsing attributes in process `syz.0.475'.
[  117.206719][ T5888] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  117.299923][ T7052] team0: Port device team_slave_0 removed
[  117.303497][ T7052] net_ratelimit: 79 callbacks suppressed
[  117.303529][ T7052] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  119.427102][ T7117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.516'.
[  119.503190][ T7122] sit0: entered allmulticast mode
[  119.510166][ T7123] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.518'.
[  119.514067][ T7122] sit0: entered promiscuous mode
[  120.379669][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'.
[  121.015866][ T7155] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.532'.
[  121.049507][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'.
[  121.057363][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'.
[  121.312571][ T5888] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  121.463722][ T7185] netlink: 177 bytes leftover after parsing attributes in process `syz.1.546'.
[  121.897020][ T7204] netlink: 'syz.1.555': attribute type 2 has an invalid length.
[  121.900441][ T7204] netlink: 'syz.1.555': attribute type 8 has an invalid length.
[  121.903487][ T7204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.555'.
[  121.986857][ T7211] netlink: 'syz.1.558': attribute type 1 has an invalid length.
[  122.072012][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'.
[  125.115817][ T7223] netlink: 260 bytes leftover after parsing attributes in process `syz.1.564'.
[  125.118602][ T7223] netlink: 'syz.1.564': attribute type 1 has an invalid length.
[  125.137303][ T7221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.563'.
[  125.140231][ T7221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.563'.
[  125.193713][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'.
[  125.228155][ T7232] netlink: 'syz.2.568': attribute type 2 has an invalid length.
[  125.230901][ T7232] netlink: 'syz.2.568': attribute type 2 has an invalid length.
[  125.266444][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'.
[  125.374376][ T7247] netlink: 'syz.2.575': attribute type 11 has an invalid length.
[  125.380550][ T7247] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.575'.
[  127.423235][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.476847][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'.
[  128.865285][ T7295] netlink: 'syz.1.594': attribute type 13 has an invalid length.
[  128.868486][ T7295] netlink: 'syz.1.594': attribute type 17 has an invalid length.
[  129.273973][ T7292] netlink: 10 bytes leftover after parsing attributes in process `syz.1.594'.
[  129.341941][ T7295] 8021q: adding VLAN 0 to HW filter on device 
[  129.353020][ T7295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.374861][ T7299] delete_channel: no stack
[  129.732352][ T7316] netlink: 'syz.1.604': attribute type 1 has an invalid length.
[  129.751783][ T7316] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.604'.
[  129.882547][ T7328] netlink: 'syz.1.610': attribute type 8 has an invalid length.
[  129.957522][ T7335] netlink: 'syz.0.613': attribute type 3 has an invalid length.
[  129.961266][ T7335] netlink: 'syz.0.613': attribute type 1 has an invalid length.
[  129.965743][ T7335] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.613'.
[  129.984269][ T7335] netlink: 'syz.0.613': attribute type 8 has an invalid length.
[  130.492460][ T7349] netlink: 'syz.1.618': attribute type 10 has an invalid length.
[  130.552157][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.568896][ T7349] : (slave batadv0): Enslaving as an active interface with an up link
[  130.988369][ T7375] netlink: 80 bytes leftover after parsing attributes in process `syz.2.630'.
[  130.998100][ T7375] netlink: 80 bytes leftover after parsing attributes in process `syz.2.630'.
[  131.037801][ T7379] netlink: 'syz.2.632': attribute type 15 has an invalid length.
[  131.040320][ T7379] netlink: 'syz.2.632': attribute type 7 has an invalid length.
[  131.042800][ T7379] netlink: 52 bytes leftover after parsing attributes in process `syz.2.632'.
[  132.637131][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.639841][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.693798][ T7459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.373456][ T7475] netlink: 104 bytes leftover after parsing attributes in process `syz.0.668'.
[  133.407328][ T7479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.669'.
[  133.412760][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'.
[  134.042617][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  134.483945][ T7514] validate_nla: 1 callbacks suppressed
[  134.483956][ T7514] netlink: 'syz.0.685': attribute type 21 has an invalid length.
[  135.044033][ T7533] netlink: 'syz.2.693': attribute type 1 has an invalid length.
[  135.379481][ T7563] netlink: 'syz.2.707': attribute type 11 has an invalid length.
[  135.383011][ T7563] netlink: 147436 bytes leftover after parsing attributes in process `syz.2.707'.
[  135.469206][ T7571] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.709'.
[  135.479787][ T7566] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.709'.
[  135.790594][ T7586] netlink: 'syz.0.716': attribute type 10 has an invalid length.
[  135.794092][ T7586] ipvlan1: entered promiscuous mode
[  135.797098][ T7586] ipvlan1: entered allmulticast mode
[  135.799318][ T7586] veth0_vlan: entered allmulticast mode
[  135.804256][ T7586] bridge0: port 3(ipvlan1) entered blocking state
[  135.808205][ T7586] bridge0: port 3(ipvlan1) entered disabled state
[  135.815302][ T7586] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  136.117300][ T7602] netlink: 'syz.0.724': attribute type 3 has an invalid length.
[  136.119877][ T7602] netlink: 'syz.0.724': attribute type 2 has an invalid length.
[  136.122628][ T7602] __nla_validate_parse: 3 callbacks suppressed
[  136.122635][ T7602] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.724'.
[  136.212155][ T7610] netlink: 'syz.0.729': attribute type 21 has an invalid length.
[  136.233634][ T7610] netlink: 164 bytes leftover after parsing attributes in process `syz.0.729'.
[  136.279720][ T7612] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.730'.
[  136.301893][ T7606] netlink: 'syz.2.727': attribute type 11 has an invalid length.
[  136.309788][ T7606] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.727'.
[  136.378100][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.461878][ T7621] netlink: 'syz.0.733': attribute type 10 has an invalid length.
[  136.500056][ T7621] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  137.084719][ T7648] netlink: 208128 bytes leftover after parsing attributes in process `syz.0.745'.
[  137.088591][ T7648] openvswitch: netlink: Message has 4 unknown bytes.
[  137.156445][ T7652] sock: sock_set_timeout: `syz.0.747' (pid 7652) tries to set negative timeout
[  137.453408][ T7659] netlink: 64 bytes leftover after parsing attributes in process `syz.0.748'.
[  137.911709][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.006693][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.077621][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.180681][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.229859][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  138.234242][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  138.238493][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  138.243305][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  138.251780][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  138.460483][ T7669] chnl_net:caif_netlink_parms(): no params data found
[  138.578586][ T7669] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.581389][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.584282][ T7669] bridge_slave_0: entered allmulticast mode
[  138.588949][ T7669] bridge_slave_0: entered promiscuous mode
[  138.595653][ T7669] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.598516][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.601441][ T7669] bridge_slave_1: entered allmulticast mode
[  138.605829][ T7669] bridge_slave_1: entered promiscuous mode
[  138.643027][ T7669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.649812][ T7669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.710682][ T7669] team0: Port device team_slave_0 added
[  138.714295][ T7669] team0: Port device team_slave_1 added
[  138.752022][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.757018][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.766799][ T7669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.773202][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.776697][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.787110][ T7669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.897382][ T7669] hsr_slave_0: entered promiscuous mode
[  138.901047][ T7669] hsr_slave_1: entered promiscuous mode
[  138.904243][ T7669] debugfs: 'hsr0' already exists in 'hsr'
[  138.908255][ T7669] Cannot create hsr debugfs directory
[  138.911201][ T7697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.765'.
[  138.916238][ T7697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.765'.
[  138.929667][ T7695] netlink: 188 bytes leftover after parsing attributes in process `syz.0.764'.
[  139.137982][   T13] bridge_slave_1: left allmulticast mode
[  139.140471][   T13] bridge_slave_1: left promiscuous mode
[  139.144067][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.232270][   T13] bridge_slave_0: left allmulticast mode
[  139.266116][   T13] bridge_slave_0: left promiscuous mode
[  139.268182][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.911360][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.925617][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.938072][   T13] bond0 (unregistering): Released all slaves
[  139.961456][ T7712] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.770'.
[  140.074102][ T7669] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  140.136140][ T7669] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  140.188331][ T7669] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  140.264672][ T7669] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  140.326431][ T5888] Bluetooth: hci0: command tx timeout
[  140.531685][ T7669] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.551154][ T7669] 8021q: adding VLAN 0 to HW filter on device team0
[  140.577894][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.580727][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.603352][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.606280][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.661703][ T7669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  140.666671][ T7669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.826729][ T7669] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.872089][ T7669] veth0_vlan: entered promiscuous mode
[  140.882170][ T7669] veth1_vlan: entered promiscuous mode
[  140.925174][ T7669] veth0_macvtap: entered promiscuous mode
[  140.931035][ T7669] veth1_macvtap: entered promiscuous mode
[  140.962148][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.975213][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.989108][ T5863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.074891][ T5863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.079378][ T5863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.106258][ T5863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.128594][   T13] hsr_slave_0: left promiscuous mode
[  141.132914][   T13] hsr_slave_1: left promiscuous mode
[  141.136640][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.139739][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.145540][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.148041][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.167627][   T13] veth1_macvtap: left promiscuous mode
[  141.169716][   T13] veth0_macvtap: left promiscuous mode
[  141.172767][   T13] veth1_vlan: left promiscuous mode
[  141.177254][   T13] veth0_vlan: left promiscuous mode
[  141.267570][ T7769] netlink: 92 bytes leftover after parsing attributes in process `syz.1.784'.
[  141.462484][ T7776] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.788'.
[  141.726390][   T13] team0 (unregistering): Port device team_slave_1 removed
[  142.044258][   T13] team0 (unregistering): Port device dummy0 removed
[  142.308120][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.311445][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.371656][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.375966][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.395454][ T5888] Bluetooth: hci0: command tx timeout
[  144.021757][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.820'.
[  144.122650][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'.
[  144.129879][ T7867] netlink: 48 bytes leftover after parsing attributes in process `syz.3.821'.
[  144.134156][ T7863] netlink: 830 bytes leftover after parsing attributes in process `syz.0.819'.
[  144.475109][ T5888] Bluetooth: hci0: command tx timeout
[  145.362261][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'.
[  145.488501][ T7916] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  146.305829][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'.
[  146.554570][ T5888] Bluetooth: hci0: command tx timeout
[  146.638046][ T5888] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  146.641065][ T5888] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  147.009555][ T7965] netlink: 7 bytes leftover after parsing attributes in process `syz.1.862'.
[  147.209451][ T7969] netlink: 'syz.1.863': attribute type 3 has an invalid length.
[  147.572215][ T7990] netlink: 56 bytes leftover after parsing attributes in process `syz.3.872'.
[  147.797998][ T8001] syzkaller0: entered promiscuous mode
[  147.800226][ T8001] syzkaller0: entered allmulticast mode
[  147.804211][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'.
[  148.694769][ T8014] netlink: 'syz.1.881': attribute type 21 has an invalid length.
[  148.697511][ T8014] netlink: 128 bytes leftover after parsing attributes in process `syz.1.881'.
[  149.644898][ T8013] @: renamed from bond_slave_0 (while UP)
[  149.649820][ T8014] netlink: 'syz.1.881': attribute type 4 has an invalid length.
[  149.770814][ T8022] netlink: 277 bytes leftover after parsing attributes in process `syz.3.884'.
[  149.879807][ T8031] netlink: 'syz.1.889': attribute type 12 has an invalid length.
[  149.882661][ T8031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.889'.
[  150.187160][ T8060] netlink: 'syz.1.900': attribute type 5 has an invalid length.
[  150.310225][ T8069] netlink: 260 bytes leftover after parsing attributes in process `syz.1.905'.
[  150.319948][ T8069] netlink: 'syz.1.905': attribute type 1 has an invalid length.
[  150.519394][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'.
[  152.666012][ T8134] netlink: 'syz.3.933': attribute type 2 has an invalid length.
[  152.671763][ T8134] netlink: 'syz.3.933': attribute type 1 has an invalid length.
[  152.678628][ T8134] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.933'.
[  153.018610][ T8158] netlink: 'syz.3.945': attribute type 2 has an invalid length.
[  153.024260][ T8158] netlink: 'syz.3.945': attribute type 1 has an invalid length.
[  153.039828][ T8160] netlink: 56 bytes leftover after parsing attributes in process `syz.1.946'.
[  153.043488][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'.
[  153.109350][ T8158] netlink: 228 bytes leftover after parsing attributes in process `syz.3.945'.
[  153.502597][ T8180] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  153.507316][ T8180] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  154.436318][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.970'.
[  155.148700][ T8266] netlink: 7 bytes leftover after parsing attributes in process `syz.0.981'.
[  155.152828][ T8266] netlink: 76 bytes leftover after parsing attributes in process `syz.0.981'.
[  155.189443][ T8268] netlink: zone id is out of range
[  155.194993][ T8268] netlink: zone id is out of range
[  155.199002][ T8268] netlink: del zone limit has 4 unknown bytes
[  155.842489][ T8292] netlink: 104 bytes leftover after parsing attributes in process `syz.0.993'.
[  155.948440][ T8300] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.997'.
[  155.975697][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'.
[  157.330868][ T8356] netlink: 'syz.0.1021': attribute type 21 has an invalid length.
[  157.337984][ T8356] netlink: 'syz.0.1021': attribute type 1 has an invalid length.
[  158.447755][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.451514][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.460411][ T8393] bridge0: entered allmulticast mode
[  158.860906][ T8400] netlink: 'syz.1.1038': attribute type 1 has an invalid length.
[  158.937060][ T8404] netlink: ct family unspecified
[  158.939201][ T8404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.037016][ T8408] tap0: tun_chr_ioctl cmd 2148553947
[  159.064959][ T8406] netlink: 'syz.3.1040': attribute type 1 has an invalid length.
[  159.067805][ T8406] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.329438][ T8424] netlink: 'syz.1.1047': attribute type 2 has an invalid length.
[  159.332308][ T8424] __nla_validate_parse: 4 callbacks suppressed
[  159.332316][ T8424] netlink: 12374 bytes leftover after parsing attributes in process `syz.1.1047'.
[  159.473397][ T8436] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  159.702360][ T8451] netlink: 'syz.0.1060': attribute type 2 has an invalid length.
[  159.715830][ T8454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.815628][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'.
[  159.819662][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'.
[  159.989176][ T8469] veth0_vlan: left promiscuous mode
[  160.008803][ T8469] veth0_vlan: entered promiscuous mode
[  160.059062][ T8466] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1067'.
[  160.064928][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1067'.
[  160.069562][ T8466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1067'.
[  160.095984][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'.
[  160.109936][ T8466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1067'.
[  160.372139][ T8474] netlink: 'syz.0.1069': attribute type 1 has an invalid length.
[  160.375535][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1069'.
[  160.621426][ T8482] netlink: 'syz.0.1072': attribute type 4 has an invalid length.
[  165.192903][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'.
[  165.828616][ T8576] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1113'.
[  165.832912][ T8576] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1113'.
[  165.838619][ T8576] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1113'.
[  165.903564][ T8580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1114'.
[  165.908242][ T8580] netlink: 'syz.1.1114': attribute type 1 has an invalid length.
[  165.911312][ T8580] netlink: 'syz.1.1114': attribute type 2 has an invalid length.
[  166.846242][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'.
[  166.881761][ T8605] openvswitch: netlink: IPv6 tunnel dst address is zero
[  166.916818][ T8608] netlink: 'syz.1.1128': attribute type 2 has an invalid length.
[  166.920253][ T8608] netlink: 'syz.1.1128': attribute type 9 has an invalid length.
[  166.951434][ T8608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1128'.
[  166.968202][ T8609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.362188][ T8629] syz.0.1136: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  167.371474][ T8629] CPU: 0 UID: 0 PID: 8629 Comm: syz.0.1136 Not tainted syzkaller #0 PREEMPT(full) 
[  167.371494][ T8629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.371503][ T8629] Call Trace:
[  167.371509][ T8629]  <TASK>
[  167.371515][ T8629]  dump_stack_lvl+0x189/0x250
[  167.371546][ T8629]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.371564][ T8629]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.371587][ T8629]  ? dump_stack+0x9/0x20
[  167.371609][ T8629]  warn_alloc+0x214/0x310
[  167.371629][ T8629]  ? __pfx_warn_alloc+0x10/0x10
[  167.371650][ T8629]  ? __vmalloc_node_range_noprof+0x10f/0x12f0
[  167.371675][ T8629]  __vmalloc_node_range_noprof+0x125/0x12f0
[  167.371718][ T8629]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  167.371744][ T8629]  ? __kasan_kmalloc+0x93/0xb0
[  167.371783][ T8629]  vmalloc_user_noprof+0xad/0xf0
[  167.371805][ T8629]  ? xskq_create+0xbf/0x170
[  167.371821][ T8629]  xskq_create+0xbf/0x170
[  167.371838][ T8629]  xsk_init_queue+0xb0/0x110
[  167.371854][ T8629]  xsk_setsockopt+0x57b/0x8d0
[  167.371884][ T8629]  ? __pfx_xsk_setsockopt+0x10/0x10
[  167.371907][ T8629]  ? __pfx_aa_sk_perm+0x10/0x10
[  167.371923][ T8629]  ? __fget_files+0x2a/0x420
[  167.371935][ T8629]  ? aa_sock_opt_perm+0xff/0x1b0
[  167.371953][ T8629]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  167.371968][ T8629]  ? __pfx_xsk_setsockopt+0x10/0x10
[  167.372016][ T8629]  do_sock_setsockopt+0x17c/0x1b0
[  167.372039][ T8629]  __x64_sys_setsockopt+0x13f/0x1b0
[  167.372061][ T8629]  do_syscall_64+0xfa/0x3b0
[  167.372078][ T8629]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.372093][ T8629]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  167.372112][ T8629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.372125][ T8629] RIP: 0033:0x7f6d7b18eba9
[  167.372139][ T8629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.372151][ T8629] RSP: 002b:00007f6d7bffe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  167.372166][ T8629] RAX: ffffffffffffffda RBX: 00007f6d7b3d6090 RCX: 00007f6d7b18eba9
[  167.372177][ T8629] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b
[  167.372185][ T8629] RBP: 00007f6d7b211e19 R08: 0000000000000004 R09: 0000000000000000
[  167.372194][ T8629] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  167.372203][ T8629] R13: 00007f6d7b3d6128 R14: 00007f6d7b3d6090 R15: 00007ffe073d0d78
[  167.372227][ T8629]  </TASK>
[  167.372327][ T8629] Mem-Info:
[  167.551382][ T8629] active_anon:5584 inactive_anon:0 isolated_anon:0
[  167.551382][ T8629]  active_file:13696 inactive_file:38290 isolated_file:0
[  167.551382][ T8629]  unevictable:1768 dirty:254 writeback:0
[  167.551382][ T8629]  slab_reclaimable:9876 slab_unreclaimable:66834
[  167.551382][ T8629]  mapped:18152 shmem:2447 pagetables:1108
[  167.551382][ T8629]  sec_pagetables:0 bounce:0
[  167.551382][ T8629]  kernel_misc_reclaimable:0
[  167.551382][ T8629]  free:266830 free_pcp:19351 free_cma:0
[  167.569878][ T8629] Node 0 active_anon:11356kB inactive_anon:0kB active_file:25508kB inactive_file:13284kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34592kB dirty:164kB writeback:0kB shmem:4792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6720kB pagetables:2340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  167.582861][ T8629] Node 1 active_anon:10980kB inactive_anon:0kB active_file:29276kB inactive_file:139876kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38016kB dirty:852kB writeback:0kB shmem:4996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5000kB pagetables:2092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  167.597374][ T8629] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  167.609743][ T8629] lowmem_reserve[]: 0 811 811 811 811
[  167.613479][ T8629] Node 0 DMA32 free:384784kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11356kB inactive_anon:0kB active_file:25508kB inactive_file:13284kB unevictable:3536kB writepending:164kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:35952kB local_pcp:19780kB free_cma:0kB
[  167.643880][ T8629] lowmem_reserve[]: 0 0 0 0 0
[  167.650290][ T8629] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  167.758103][ T8629] lowmem_reserve[]: 0 0 854 854 854
[  167.762222][ T8629] Node 1 Normal free:208512kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10888kB inactive_anon:0kB active_file:29276kB inactive_file:139884kB unevictable:3536kB writepending:888kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41480kB local_pcp:20668kB free_cma:0kB
[  167.783880][ T8629] lowmem_reserve[]: 0 0 0 0 0
[  167.798155][ T8629] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  167.808395][ T8629] Node 0 DMA32: 434*4kB (UME) 643*8kB (UME) 322*16kB (UME) 164*32kB (ME) 250*64kB (UME) 133*128kB (UM) 32*256kB (UME) 14*512kB (UME) 11*1024kB (UM) 8*2048kB (UME) 71*4096kB (UM) = 384128kB
[  167.820023][ T8629] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  167.833113][ T8629] Node 1 Normal: 2*4kB (UE) 105*8kB (ME) 145*16kB (UME) 211*32kB (UME) 107*64kB (UM) 94*128kB (ME) 8*256kB (UME) 9*512kB (UME) 5*1024kB (U) 0*2048kB 41*4096kB (UM) = 208512kB
[  167.862775][ T8629] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  167.911388][ T8629] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  167.922118][ T8629] 54437 total pagecache pages
[  167.979969][ T8629] 0 pages in swap cache
[  167.982498][ T8629] Free swap  = 124996kB
[  167.984316][ T8629] Total swap = 124996kB
[  167.992985][ T8629] 786301 pages RAM
[  168.003823][ T8629] 0 pages HighMem/MovableOnly
[  168.008152][ T8629] 241347 pages reserved
[  168.010147][ T8629] 0 pages cma reserved
[  168.042723][ T8644] netlink: 'syz.3.1143': attribute type 21 has an invalid length.
[  168.052145][ T8644] netlink: 'syz.3.1143': attribute type 6 has an invalid length.
[  168.055506][ T8644] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1143'.
[  168.079308][ T8646] netlink: 'syz.1.1144': attribute type 10 has an invalid length.
[  168.082647][ T8646] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1144'.
[  168.128381][ T8648] netlink: del zone limit has 4 unknown bytes
[  168.142535][ T8650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1146'.
[  168.225449][ T8654] netlink: 'syz.1.1148': attribute type 21 has an invalid length.
[  168.228571][ T8654] netlink: 'syz.1.1148': attribute type 3 has an invalid length.
[  168.234954][ T8655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.283527][ T8657] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.326865][ T8662] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.422076][ T8671] tap0: tun_chr_ioctl cmd 1074025677
[  168.439171][ T8671] tap0: linktype set to 769
[  168.439942][ T8675] netlink: 'syz.3.1158': attribute type 1 has an invalid length.
[  169.012467][ T8712] xt_l2tp: unknown flags: 51
[  169.451513][ T8720] unsupported nlmsg_type 40
[  169.484192][ T5888] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  169.933535][ T8730] bridge_slave_1: left allmulticast mode
[  169.938886][ T8730] bridge_slave_1: left promiscuous mode
[  169.970873][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.065964][ T8730] bridge_slave_0: left allmulticast mode
[  170.068294][ T8730] bridge_slave_0: left promiscuous mode
[  170.075825][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.996614][ T8755] __nla_validate_parse: 5 callbacks suppressed
[  170.996630][ T8755] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1189'.
[  171.113983][ T8757] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1190'.
[  171.809979][ T8763] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1193'.
[  172.186267][ T8785] validate_nla: 1 callbacks suppressed
[  172.186282][ T8785] netlink: 'syz.3.1203': attribute type 41 has an invalid length.
[  172.300917][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'.
[  172.324698][ T8796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.564732][ T8808] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1215'.
[  172.569105][ T8808] netlink: 'syz.0.1215': attribute type 1 has an invalid length.
[  172.579700][ T8808] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.1215'.
[  172.796594][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'.
[  173.172994][ T8858] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.1238'.
[  173.347903][ T5888] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4
[  174.690295][ T8904] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1259'.
[  174.711601][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'.
[  174.797537][ T8918] netlink: 'syz.3.1266': attribute type 39 has an invalid length.
[  175.092776][ T8927] netlink: 'syz.1.1270': attribute type 3 has an invalid length.
[  175.098650][ T8927] netlink: 'syz.1.1270': attribute type 1 has an invalid length.
[  175.683405][ T8974] netlink: 'syz.1.1291': attribute type 10 has an invalid length.
[  175.697920][ T8974] veth0_vlan: left promiscuous mode
[  175.701732][ T8974] veth0_vlan: entered promiscuous mode
[  175.708021][ T8974] team0: Device veth0_vlan failed to register rx_handler
[  176.911912][ T8994] netlink: 'syz.1.1295': attribute type 2 has an invalid length.
[  177.190478][ T9010] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  177.508817][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.512309][ T9013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.519850][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.532720][ T9013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.989741][ T9032] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  177.994109][ T9032] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  178.507597][ T9052] __nla_validate_parse: 13 callbacks suppressed
[  178.507660][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1321'.
[  178.514150][ T9052] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1321'.
[  178.600923][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'.
[  179.079332][ T9095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1341'.
[  179.082164][ T9095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1341'.
[  179.115020][ T9094] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1339'.
[  179.448569][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'.
[  179.459490][ T9119] cgroup2: Unknown parameter 'u'
[  179.520578][ T9122] netlink: 'syz.0.1355': attribute type 23 has an invalid length.
[  179.646561][ T9114] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  179.849767][ T9114] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  180.403017][ T9134] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1359'.
[  180.564914][ T9146] netlink: 'syz.0.1365': attribute type 12 has an invalid length.
[  180.568176][ T9146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1365'.
[  181.650496][ T9168] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1373'.
[  188.568705][ T9177] veth0_vlan: entered allmulticast mode
[  188.742428][ T9181] veth0_vlan: left promiscuous mode
[  188.746828][ T9181] veth0_vlan: entered promiscuous mode
[  188.915317][ T9192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1382'.
[  188.920625][ T9192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1382'.
[  188.931348][ T9192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1382'.
[  191.574851][ T9206] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1390'.
[  191.773733][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'.
[  191.885926][ T5888] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  192.107915][ T9243] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1405'.
[  192.142047][ T9248] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1406'.
[  192.211592][ T9255] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1411'.
[  192.218339][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'.
[  193.689155][ T9281] IPv6: Can't replace route, no match found
[  193.915864][ T5888] Bluetooth: hci0: command tx timeout
[  193.981427][ T9291] netlink: 'syz.3.1426': attribute type 17 has an invalid length.
[  194.089213][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.091517][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  196.156599][ T5888] Bluetooth: hci2: command 0x206a tx timeout
[  196.474708][ T5888] Bluetooth: hci1: command 0x0406 tx timeout
[  196.732515][ T9297] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1429'.
[  196.737246][ T9297] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  197.117897][ T9325] netlink: 495 bytes leftover after parsing attributes in process `syz.1.1442'.
[  197.142306][ T9327] netlink: 'syz.3.1443': attribute type 13 has an invalid length.
[  197.147733][ T9327] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1443'.
[  197.248332][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'.
[  197.531704][ T9333] syz.3.1446: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  197.539888][ T9333] CPU: 0 UID: 0 PID: 9333 Comm: syz.3.1446 Not tainted syzkaller #0 PREEMPT(full) 
[  197.539908][ T9333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.539917][ T9333] Call Trace:
[  197.539923][ T9333]  <TASK>
[  197.539929][ T9333]  dump_stack_lvl+0x189/0x250
[  197.539954][ T9333]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.539970][ T9333]  ? __pfx__printk+0x10/0x10
[  197.539989][ T9333]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  197.540004][ T9333]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  197.540021][ T9333]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  197.540038][ T9333]  warn_alloc+0x214/0x310
[  197.540057][ T9333]  ? __pfx_warn_alloc+0x10/0x10
[  197.540076][ T9333]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  197.540094][ T9333]  ? __vmalloc_node_range_noprof+0xac/0x12f0
[  197.540119][ T9333]  __vmalloc_node_range_noprof+0x125/0x12f0
[  197.540160][ T9333]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  197.540183][ T9333]  ? __kasan_kmalloc+0x93/0xb0
[  197.540204][ T9333]  vmalloc_user_noprof+0xad/0xf0
[  197.540254][ T9333]  ? xskq_create+0xbf/0x170
[  197.540270][ T9333]  xskq_create+0xbf/0x170
[  197.540286][ T9333]  xsk_init_queue+0xb0/0x110
[  197.540302][ T9333]  xsk_setsockopt+0x57b/0x8d0
[  197.540326][ T9333]  ? __pfx_xsk_setsockopt+0x10/0x10
[  197.540346][ T9333]  ? __pfx_aa_sk_perm+0x10/0x10
[  197.540361][ T9333]  ? __fget_files+0x2a/0x420
[  197.540372][ T9333]  ? aa_sock_opt_perm+0xff/0x1b0
[  197.540389][ T9333]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  197.540414][ T9333]  ? __pfx_xsk_setsockopt+0x10/0x10
[  197.540436][ T9333]  do_sock_setsockopt+0x17c/0x1b0
[  197.540455][ T9333]  __x64_sys_setsockopt+0x13f/0x1b0
[  197.540474][ T9333]  do_syscall_64+0xfa/0x3b0
[  197.540491][ T9333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.540503][ T9333]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  197.540517][ T9333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.540528][ T9333] RIP: 0033:0x7ff599f8eba9
[  197.540540][ T9333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.540552][ T9333] RSP: 002b:00007ff59ae4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  197.540567][ T9333] RAX: ffffffffffffffda RBX: 00007ff59a1d5fa0 RCX: 00007ff599f8eba9
[  197.540576][ T9333] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  197.540584][ T9333] RBP: 00007ff59a011e19 R08: 0000000000000004 R09: 0000000000000000
[  197.540592][ T9333] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  197.540601][ T9333] R13: 00007ff59a1d6038 R14: 00007ff59a1d5fa0 R15: 00007ffccb9c0bf8
[  197.540624][ T9333]  </TASK>
[  197.540988][ T9333] Mem-Info:
[  197.709004][ T9333] active_anon:5585 inactive_anon:0 isolated_anon:0
[  197.709004][ T9333]  active_file:13696 inactive_file:38304 isolated_file:0
[  197.709004][ T9333]  unevictable:1768 dirty:174 writeback:0
[  197.709004][ T9333]  slab_reclaimable:9930 slab_unreclaimable:67038
[  197.709004][ T9333]  mapped:18111 shmem:2454 pagetables:1091
[  197.709004][ T9333]  sec_pagetables:0 bounce:0
[  197.709004][ T9333]  kernel_misc_reclaimable:0
[  197.709004][ T9333]  free:265198 free_pcp:20203 free_cma:0
[  197.745352][ T9333] Node 0 active_anon:11264kB inactive_anon:0kB active_file:25508kB inactive_file:13284kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34360kB dirty:144kB writeback:0kB shmem:4800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6672kB pagetables:2136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  197.759297][ T9333] Node 1 active_anon:11076kB inactive_anon:0kB active_file:29276kB inactive_file:139932kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38084kB dirty:552kB writeback:0kB shmem:5016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5104kB pagetables:2092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  197.771555][ T9333] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  197.796768][ T9333] lowmem_reserve[]: 0 811 811 811 811
[  197.800524][ T9333] Node 0 DMA32 free:388536kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11264kB inactive_anon:0kB active_file:25508kB inactive_file:13284kB unevictable:3536kB writepending:144kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:38200kB local_pcp:21520kB free_cma:0kB
[  197.812947][ T9333] lowmem_reserve[]: 0 0 0 0 0
[  197.820220][ T9333] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  197.837650][ T9333] lowmem_reserve[]: 0 0 854 854 854
[  197.840283][ T9333] Node 1 Normal free:198280kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11076kB inactive_anon:0kB active_file:29276kB inactive_file:139932kB unevictable:3536kB writepending:552kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43176kB local_pcp:21956kB free_cma:0kB
[  197.853407][ T9333] lowmem_reserve[]: 0 0 0 0 0
[  197.856011][ T9333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  197.863102][ T9333] Node 0 DMA32: 2*4kB (ME) 578*8kB (UM) 354*16kB (UME) 400*32kB (UME) 242*64kB (UME) 164*128kB (UM) 41*256kB (UME) 14*512kB (UME) 12*1024kB (UM) 6*2048kB (UME) 70*4096kB (M) = 388536kB
[  197.873730][ T9333] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB 
[  197.880267][ T9344] netlink: 'syz.1.1449': attribute type 2 has an invalid length.
[  197.884673][ T9344] netlink: 'syz.1.1449': attribute type 3 has an invalid length.
[  197.884683][ T9344] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1449'.
[  197.925041][ T9333] (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  197.928779][ T9333] Node 1 Normal: 502*4kB (UME) 430*8kB (UME) 184*16kB (UME) 186*32kB (UME) 124*64kB (UME) 97*128kB (UME) 7*256kB (UM) 4*512kB (UME) 0*1024kB 0*2048kB 39*4096kB (M) = 198280kB
[  197.951267][ T9333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  197.955543][ T9333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  197.959572][ T9333] 54454 total pagecache pages
[  197.961668][ T9333] 0 pages in swap cache
[  197.963699][ T9333] Free swap  = 124996kB
[  197.966154][ T9333] Total swap = 124996kB
[  197.968569][ T9333] 786301 pages RAM
[  197.970423][ T9333] 0 pages HighMem/MovableOnly
[  197.972620][ T9333] 241347 pages reserved
[  197.974557][ T9333] 0 pages cma reserved
[  198.621332][ T9368] netlink: 'syz.1.1460': attribute type 1 has an invalid length.
[  198.624268][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'.
[  198.640088][ T9367] netlink: 'syz.1.1460': attribute type 16 has an invalid length.
[  198.643712][ T9367] netlink: 'syz.1.1460': attribute type 17 has an invalid length.
[  199.085614][ T9371] netlink: 'syz.3.1461': attribute type 8 has an invalid length.
[  199.306401][ T9367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  201.041178][ T9457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.342315][ T9468] netlink: 'syz.1.1503': attribute type 40 has an invalid length.
[  201.412738][ T9471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1506'.
[  201.432039][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.516149][ T9473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1507'.
[  201.571630][ T9475] netlink: 'syz.0.1508': attribute type 1 has an invalid length.
[  201.574991][ T9475] netlink: 376 bytes leftover after parsing attributes in process `syz.0.1508'.
[  201.968329][ T9482] netlink: 4800 bytes leftover after parsing attributes in process `syz.0.1511'.
[  201.982151][ T9482] netlink: 4800 bytes leftover after parsing attributes in process `syz.0.1511'.
[  202.283097][ T9505] netlink: 'syz.0.1522': attribute type 3 has an invalid length.
[  202.286413][ T9505] netlink: 199752 bytes leftover after parsing attributes in process `syz.0.1522'.
[  203.731139][ T9531] netlink: 'syz.3.1531': attribute type 29 has an invalid length.
[  204.050435][ T9551] ==================================================================
[  204.053802][ T9551] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  204.057076][ T9551] Read of size 2 at addr ffff888109818ec2 by task syz.1.1540/9551
[  204.061395][ T9551] 
[  204.062416][ T9551] CPU: 0 UID: 0 PID: 9551 Comm: syz.1.1540 Not tainted syzkaller #0 PREEMPT(full) 
[  204.062434][ T9551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.062443][ T9551] Call Trace:
[  204.062450][ T9551]  <TASK>
[  204.062458][ T9551]  dump_stack_lvl+0x189/0x250
[  204.062480][ T9551]  ? __virt_addr_valid+0x1c8/0x5c0
[  204.062500][ T9551]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.062514][ T9551]  ? __virt_addr_valid+0x1c8/0x5c0
[  204.062532][ T9551]  ? lock_release+0x4b/0x3e0
[  204.062573][ T9551]  ? __virt_addr_valid+0x4a5/0x5c0
[  204.062596][ T9551]  print_report+0xca/0x240
[  204.062610][ T9551]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  204.062654][ T9551]  kasan_report+0x118/0x150
[  204.062678][ T9551]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  204.062705][ T9551]  __xfrm_state_lookup+0x6ad/0x8d0
[  204.062732][ T9551]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  204.062759][ T9551]  ? xfrm_state_lookup+0x45/0x1e0
[  204.062782][ T9551]  xfrm_state_lookup+0x11e/0x1e0
[  204.062815][ T9551]  ipcomp4_init_state+0x205/0xb20
[  204.062839][ T9551]  ? __xfrm_init_state+0x7ef/0x13f0
[  204.062868][ T9551]  __xfrm_init_state+0xa76/0x13f0
[  204.062887][ T9551]  ? __xfrm_init_state+0x7ef/0x13f0
[  204.062915][ T9551]  xfrm_add_sa+0x2f5b/0x4070
[  204.062951][ T9551]  ? __pfx_xfrm_add_sa+0x10/0x10
[  204.062968][ T9551]  ? apparmor_capable+0x137/0x1b0
[  204.062995][ T9551]  ? __nla_parse+0x40/0x60
[  204.063020][ T9551]  xfrm_user_rcv_msg+0x7a3/0xab0
[  204.063052][ T9551]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  204.063129][ T9551]  ? __pfx___mutex_trylock_common+0x10/0x10
[  204.063153][ T9551]  ? rcu_is_watching+0x15/0xb0
[  204.063169][ T9551]  ? trace_contention_end+0x39/0x120
[  204.063186][ T9551]  ? __mutex_lock+0x335/0x1350
[  204.063214][ T9551]  netlink_rcv_skb+0x208/0x470
[  204.063234][ T9551]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  204.063258][ T9551]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  204.063300][ T9551]  ? netlink_deliver_tap+0x2e/0x1b0
[  204.063316][ T9551]  ? netlink_deliver_tap+0x2e/0x1b0
[  204.063338][ T9551]  xfrm_netlink_rcv+0x79/0x90
[  204.063359][ T9551]  netlink_unicast+0x82f/0x9e0
[  204.063387][ T9551]  ? __pfx_netlink_unicast+0x10/0x10
[  204.063398][ T9551]  ? security_netlink_send+0x15/0x290
[  204.063419][ T9551]  ? __pfx_bpf_lsm_netlink_send+0x10/0x10
[  204.063442][ T9551]  netlink_sendmsg+0x805/0xb30
[  204.063474][ T9551]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.063496][ T9551]  ? aa_sock_msg_perm+0xf1/0x1d0
[  204.063514][ T9551]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  204.063529][ T9551]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.063548][ T9551]  __sock_sendmsg+0x21c/0x270
[  204.063585][ T9551]  ____sys_sendmsg+0x505/0x830
[  204.063614][ T9551]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.063681][ T9551]  ? import_iovec+0x74/0xa0
[  204.063708][ T9551]  ___sys_sendmsg+0x21f/0x2a0
[  204.063732][ T9551]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.063784][ T9551]  ? __fget_files+0x2a/0x420
[  204.063817][ T9551]  ? __fget_files+0x2a/0x420
[  204.063829][ T9551]  ? __fget_files+0x3a0/0x420
[  204.063860][ T9551]  __x64_sys_sendmsg+0x19b/0x260
[  204.063884][ T9551]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.063921][ T9551]  ? rcu_is_watching+0x15/0xb0
[  204.063945][ T9551]  ? do_syscall_64+0xbe/0x3b0
[  204.063968][ T9551]  do_syscall_64+0xfa/0x3b0
[  204.063982][ T9551]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.063997][ T9551]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.064012][ T9551]  ? exc_page_fault+0x9f/0xf0
[  204.064031][ T9551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.064044][ T9551] RIP: 0033:0x7f13b158eba9
[  204.064060][ T9551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.064071][ T9551] RSP: 002b:00007f13b2430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.064086][ T9551] RAX: ffffffffffffffda RBX: 00007f13b17d5fa0 RCX: 00007f13b158eba9
[  204.064096][ T9551] RDX: 0000000000004800 RSI: 00002000000035c0 RDI: 0000000000000003
[  204.064105][ T9551] RBP: 00007f13b1611e19 R08: 0000000000000000 R09: 0000000000000000
[  204.064114][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.064122][ T9551] R13: 00007f13b17d6038 R14: 00007f13b17d5fa0 R15: 00007ffc7c1da458
[  204.064159][ T9551]  </TASK>
[  204.064164][ T9551] 
[  204.218916][ T9551] Allocated by task 8902:
[  204.220209][ T9551]  kasan_save_track+0x3e/0x80
[  204.222085][ T9551]  __kasan_slab_alloc+0x6c/0x80
[  204.224091][ T9551]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  204.226301][ T9551]  xfrm_state_alloc+0x24/0x2f0
[  204.227892][ T9551]  __find_acq_core+0x8a7/0x1c00
[  204.229778][ T9551]  xfrm_find_acq+0x78/0xa0
[  204.231342][ T9551]  xfrm_alloc_userspi+0x6b3/0xc90
[  204.233521][ T9551]  xfrm_user_rcv_msg+0x7a3/0xab0
[  204.235547][ T9551]  netlink_rcv_skb+0x208/0x470
[  204.237557][ T9551]  xfrm_netlink_rcv+0x79/0x90
[  204.239524][ T9551]  netlink_unicast+0x82f/0x9e0
[  204.241104][ T9551]  netlink_sendmsg+0x805/0xb30
[  204.242594][ T9551]  __sock_sendmsg+0x21c/0x270
[  204.244090][ T9551]  ____sys_sendmsg+0x505/0x830
[  204.245989][ T9551]  ___sys_sendmsg+0x21f/0x2a0
[  204.248038][ T9551]  __x64_sys_sendmsg+0x19b/0x260
[  204.250183][ T9551]  do_syscall_64+0xfa/0x3b0
[  204.252152][ T9551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.254682][ T9551] 
[  204.255754][ T9551] Freed by task 5949:
[  204.257470][ T9551]  kasan_save_track+0x3e/0x80
[  204.259426][ T9551]  kasan_save_free_info+0x46/0x50
[  204.261574][ T9551]  __kasan_slab_free+0x5b/0x80
[  204.263565][ T9551]  kmem_cache_free+0x18f/0x400
[  204.265547][ T9551]  xfrm_state_gc_task+0x52d/0x6b0
[  204.267628][ T9551]  process_scheduled_works+0xae1/0x17b0
[  204.269482][ T9551]  worker_thread+0x8a0/0xda0
[  204.271077][ T9551]  kthread+0x711/0x8a0
[  204.272787][ T9551]  ret_from_fork+0x439/0x7d0
[  204.274171][ T9551]  ret_from_fork_asm+0x1a/0x30
[  204.275717][ T9551] 
[  204.276445][ T9551] The buggy address belongs to the object at ffff888109818d80
[  204.276445][ T9551]  which belongs to the cache xfrm_state of size 928
[  204.282277][ T9551] The buggy address is located 322 bytes inside of
[  204.282277][ T9551]  freed 928-byte region [ffff888109818d80, ffff888109819120)
[  204.287857][ T9551] 
[  204.288873][ T9551] The buggy address belongs to the physical page:
[  204.291737][ T9551] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810981a400 pfn:0x109818
[  204.295686][ T9551] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  204.298860][ T9551] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  204.301990][ T9551] page_type: f5(slab)
[  204.303672][ T9551] raw: 057ff00000000040 ffff88801afe2640 dead000000000122 0000000000000000
[  204.306907][ T9551] raw: ffff88810981a400 00000000800e0009 00000000f5000000 0000000000000000
[  204.310192][ T9551] head: 057ff00000000040 ffff88801afe2640 dead000000000122 0000000000000000
[  204.312878][ T9551] head: ffff88810981a400 00000000800e0009 00000000f5000000 0000000000000000
[  204.315841][ T9551] head: 057ff00000000002 ffffea0004260601 00000000ffffffff 00000000ffffffff
[  204.318494][ T9551] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  204.321757][ T9551] page dumped because: kasan: bad access detected
[  204.323717][ T9551] page_owner tracks the page as allocated
[  204.325798][ T9551] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6286, tgid 6285 (syz.0.166), ts 80846714655, free_ts 80479524207
[  204.332485][ T9551]  post_alloc_hook+0x240/0x2a0
[  204.334370][ T9551]  get_page_from_freelist+0x21e4/0x22c0
[  204.336626][ T9551]  __alloc_frozen_pages_noprof+0x181/0x370
[  204.338997][ T9551]  alloc_pages_mpol+0x232/0x4a0
[  204.340950][ T9551]  allocate_slab+0x8a/0x370
[  204.342524][ T9551]  ___slab_alloc+0xbeb/0x1420
[  204.344241][ T9551]  kmem_cache_alloc_noprof+0x283/0x3c0
[  204.345865][ T9551]  xfrm_state_alloc+0x24/0x2f0
[  204.347820][ T9551]  xfrm_add_sa+0x17d1/0x4070
[  204.349722][ T9551]  xfrm_user_rcv_msg+0x7a3/0xab0
[  204.351769][ T9551]  netlink_rcv_skb+0x208/0x470
[  204.353769][ T9551]  xfrm_netlink_rcv+0x79/0x90
[  204.355568][ T9551]  netlink_unicast+0x82f/0x9e0
[  204.357533][ T9551]  netlink_sendmsg+0x805/0xb30
[  204.359409][ T9551]  __sock_sendmsg+0x21c/0x270
[  204.360833][ T9551]  ____sys_sendmsg+0x505/0x830
[  204.362824][ T9551] page last free pid 6270 tgid 6269 stack trace:
[  204.364938][ T9551]  __free_frozen_pages+0xbc4/0xd30
[  204.366427][ T9551]  __folio_put+0x21b/0x2c0
[  204.367827][ T9551]  skb_release_data+0x49a/0x7c0
[  204.369334][ T9551]  sk_skb_reason_drop+0x127/0x170
[  204.371051][ T9551]  ip6_rcv_core+0x9f0/0x1590
[  204.372953][ T9551]  ipv6_rcv+0x72/0xc0
[  204.374574][ T9551]  __netif_receive_skb+0xd3/0x380
[  204.376513][ T9551]  netif_receive_skb+0x1cb/0x790
[  204.378777][ T9551]  tun_rx_batched+0x1b9/0x730
[  204.380648][ T9551]  tun_get_user+0x2aa2/0x3e20
[  204.382020][ T9551]  tun_chr_write_iter+0x113/0x200
[  204.383443][ T9551]  vfs_write+0x5c9/0xb30
[  204.385127][ T9551]  ksys_write+0x145/0x250
[  204.386416][ T9551]  do_syscall_64+0xfa/0x3b0
[  204.387928][ T9551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.390294][ T9551] 
[  204.391291][ T9551] Memory state around the buggy address:
[  204.393753][ T9551]  ffff888109818d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.396991][ T9551]  ffff888109818e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.400243][ T9551] >ffff888109818e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.403479][ T9551]                                            ^
[  204.406043][ T9551]  ffff888109818f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.408824][ T9551]  ffff888109818f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.411553][ T9551] ==================================================================
[  204.441197][ T9551] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  204.443653][ T9551] CPU: 0 UID: 0 PID: 9551 Comm: syz.1.1540 Not tainted syzkaller #0 PREEMPT(full) 
[  204.447023][ T9551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.451015][ T9551] Call Trace:
[  204.452387][ T9551]  <TASK>
[  204.453530][ T9551]  dump_stack_lvl+0x99/0x250
[  204.455324][ T9551]  ? __asan_memcpy+0x40/0x70
[  204.457156][ T9551]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.459153][ T9551]  ? __pfx__printk+0x10/0x10
[  204.460980][ T9551]  vpanic+0x281/0x750
[  204.462519][ T9551]  ? preempt_schedule+0xae/0xc0
[  204.464380][ T9551]  ? __pfx_vpanic+0x10/0x10
[  204.466133][ T9551]  ? preempt_schedule_common+0x83/0xd0
[  204.468165][ T9551]  ? preempt_schedule+0xae/0xc0
[  204.470107][ T9551]  ? __pfx_preempt_schedule+0x10/0x10
[  204.472214][ T9551]  panic+0xb9/0xc0
[  204.473644][ T9551]  ? __pfx_panic+0x10/0x10
[  204.475329][ T9551]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  204.477529][ T9551]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  204.479617][ T9551]  check_panic_on_warn+0x89/0xb0
[  204.481555][ T9551]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  204.483667][ T9551]  end_report+0x78/0x160
[  204.485303][ T9551]  kasan_report+0x129/0x150
[  204.487172][ T9551]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  204.489288][ T9551]  __xfrm_state_lookup+0x6ad/0x8d0
[  204.491306][ T9551]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  204.493490][ T9551]  ? xfrm_state_lookup+0x45/0x1e0
[  204.495507][ T9551]  xfrm_state_lookup+0x11e/0x1e0
[  204.497555][ T9551]  ipcomp4_init_state+0x205/0xb20
[  204.499649][ T9551]  ? __xfrm_init_state+0x7ef/0x13f0
[  204.501786][ T9551]  __xfrm_init_state+0xa76/0x13f0
[  204.503822][ T9551]  ? __xfrm_init_state+0x7ef/0x13f0
[  204.505950][ T9551]  xfrm_add_sa+0x2f5b/0x4070
[  204.507853][ T9551]  ? __pfx_xfrm_add_sa+0x10/0x10
[  204.509856][ T9551]  ? apparmor_capable+0x137/0x1b0
[  204.511902][ T9551]  ? __nla_parse+0x40/0x60
[  204.513731][ T9551]  xfrm_user_rcv_msg+0x7a3/0xab0
[  204.515774][ T9551]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  204.518046][ T9551]  ? __pfx___mutex_trylock_common+0x10/0x10
[  204.520444][ T9551]  ? rcu_is_watching+0x15/0xb0
[  204.522429][ T9551]  ? trace_contention_end+0x39/0x120
[  204.524610][ T9551]  ? __mutex_lock+0x335/0x1350
[  204.526570][ T9551]  netlink_rcv_skb+0x208/0x470
[  204.528508][ T9551]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  204.530672][ T9551]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  204.532697][ T9551]  ? netlink_deliver_tap+0x2e/0x1b0
[  204.534732][ T9551]  ? netlink_deliver_tap+0x2e/0x1b0
[  204.536731][ T9551]  xfrm_netlink_rcv+0x79/0x90
[  204.538565][ T9551]  netlink_unicast+0x82f/0x9e0
[  204.540392][ T9551]  ? __pfx_netlink_unicast+0x10/0x10
[  204.542499][ T9551]  ? security_netlink_send+0x15/0x290
[  204.544654][ T9551]  ? __pfx_bpf_lsm_netlink_send+0x10/0x10
[  204.546929][ T9551]  netlink_sendmsg+0x805/0xb30
[  204.548879][ T9551]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.550929][ T9551]  ? aa_sock_msg_perm+0xf1/0x1d0
[  204.552812][ T9551]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  204.554797][ T9551]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.556773][ T9551]  __sock_sendmsg+0x21c/0x270
[  204.558672][ T9551]  ____sys_sendmsg+0x505/0x830
[  204.560507][ T9551]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.562874][ T9551]  ? import_iovec+0x74/0xa0
[  204.564603][ T9551]  ___sys_sendmsg+0x21f/0x2a0
[  204.566547][ T9551]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.568674][ T9551]  ? __fget_files+0x2a/0x420
[  204.570448][ T9551]  ? __fget_files+0x2a/0x420
[  204.572256][ T9551]  ? __fget_files+0x3a0/0x420
[  204.574074][ T9551]  __x64_sys_sendmsg+0x19b/0x260
[  204.575992][ T9551]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.578080][ T9551]  ? rcu_is_watching+0x15/0xb0
[  204.579891][ T9551]  ? do_syscall_64+0xbe/0x3b0
[  204.581910][ T9551]  do_syscall_64+0xfa/0x3b0
[  204.583663][ T9551]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.585763][ T9551]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.588013][ T9551]  ? exc_page_fault+0x9f/0xf0
[  204.589864][ T9551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.592211][ T9551] RIP: 0033:0x7f13b158eba9
[  204.594008][ T9551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.601593][ T9551] RSP: 002b:00007f13b2430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.604755][ T9551] RAX: ffffffffffffffda RBX: 00007f13b17d5fa0 RCX: 00007f13b158eba9
[  204.607356][ T9551] RDX: 0000000000004800 RSI: 00002000000035c0 RDI: 0000000000000003
[  204.610600][ T9551] RBP: 00007f13b1611e19 R08: 0000000000000000 R09: 0000000000000000
[  204.613275][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.615912][ T9551] R13: 00007f13b17d6038 R14: 00007f13b17d5fa0 R15: 00007ffc7c1da458
[  204.618488][ T9551]  </TASK>
[  204.620369][ T9551] Kernel Offset: disabled
[  204.622059][ T9551] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:13:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000242b RDI=000000000000242c RBP=00000000000003f8 RSP=ffffc900030ce930
R8 =ffff88801ef08237 R9 =1ffff11003de1046 R10=dffffc0000000000 R11=ffffffff854f9f40
R12=dffffc0000000000 R13=ffffffff99b028f9 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f9fbc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f13b24306c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34423ffc CR3=0000000037878000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f13b17a7498 00007f13b17a7470 XMM03=00007f13b17a74a8 00007f13b17a74a0
XMM04=00007f13b230d100 00007f13b17a7460 XMM05=00007f13b17a7478 00007f13b17a74c0
XMM06=00007f13b17a74b8 00007f13b17a74b0 XMM07=00007f13b17a74a8 00007f13b17a74a0
XMM08=0000000000000000 00007f13b1612ee7 XMM09=0000000000000000 00007f13b1612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=5ec07ef0798f8b00 RBX=ffffffff819695f8 RCX=5ec07ef0798f8b00 RDX=0000000000000001
RSI=ffffffff8d9ba186 RDI=ffffffff8be33e00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a830 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7a53f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000035c0 CR3=0000000027a16000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
