last executing test programs:

25.740524463s ago: executing program 0 (id=1031):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x1e, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x1}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x6a, 0x0}, 0x6}, 0x0, {[0x6, 0x200, 0x0, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c)

25.661231615s ago: executing program 0 (id=1034):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xb, 0x0, 0x0)

25.612075705s ago: executing program 0 (id=1038):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="18000000010000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x20)

25.558923419s ago: executing program 0 (id=1040):
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7)
close(0x4)

25.502586408s ago: executing program 0 (id=1043):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25170000004c0006804400040067636d28616573ae0000000000000000000000000000000000000000000000001c000000963e7917d56de1ace2fe62c0b4a647eb221c9aee790000000000000004000300"], 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004)

25.152545099s ago: executing program 0 (id=1056):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='signal_generate\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x601, 0x70bd25, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000001000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xa, 0x1, 0x0, r4}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1, @mcast2, 0x5907}], 0x1c)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x640c1}, 0x8000)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x18, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x19, 0x7c}, [@nested={0x4, 0x143}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000c000}, 0x2400e000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118a0000000000850000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socket$inet6_sctp(0xa, 0x5, 0x84)

25.077871428s ago: executing program 32 (id=1056):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='signal_generate\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x601, 0x70bd25, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000001000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xa, 0x1, 0x0, r4}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1, @mcast2, 0x5907}], 0x1c)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x640c1}, 0x8000)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x18, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x19, 0x7c}, [@nested={0x4, 0x143}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000c000}, 0x2400e000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118a0000000000850000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socket$inet6_sctp(0xa, 0x5, 0x84)

1.418332718s ago: executing program 3 (id=1727):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffffa}}, 0x10)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)

1.360902631s ago: executing program 3 (id=1730):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x3e, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)

1.311198392s ago: executing program 3 (id=1732):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)

1.262558762s ago: executing program 3 (id=1734):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280a6"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r4, 0x0, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10, 0x0}, 0x10)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r6=>0x0, &(0x7f00000000c0)=0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000001c0)={'tunl0\x00', <r7=>0x0, 0x8, 0x700, 0x7, 0x8, {{0x2d, 0x4, 0x0, 0x2, 0xb4, 0x66, 0x0, 0x20, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x11}, {[@generic={0x86, 0x9, "baa6de272d03a8"}, @cipso={0x86, 0x78, 0x0, [{0x7, 0x8, "6f203a2423d9"}, {0x1, 0x8, "8b2374a9b8c7"}, {0x5, 0x7, "0c549b1762"}, {0xe, 0x10, "950d4852d5945636d4c8b8355ef4"}, {0x5, 0x11, "24d57c0b4c19e46f3b3059e5cb8612"}, {0x1, 0x11, "7580e83ccd5a26341df99a1dada541"}, {0x0, 0x7, "218d5f346a"}, {0x1, 0x7, "930ff57421"}, {0x2, 0xa, "6f3a75769935d290"}, {0x6, 0x11, "d1f501e3b94760fa712ad74dac2d07"}]}, @timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x3, [{@remote}, {@broadcast, 0x42f}, {@remote, 0x4}]}, @end]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000002c0)={'tunl0\x00', <r8=>r6, 0xf88f, 0x8, 0x8, 0xa1, {{0x11, 0x4, 0x3, 0x1, 0x44, 0x67, 0x0, 0x0, 0x29, 0x0, @loopback, @local, {[@noop, @generic={0x94, 0x8, "e35d05337bd9"}, @ssrr={0x89, 0x27, 0x5c, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}, @empty, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast1, @broadcast]}]}}}}})
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x3, 0x3, 0xc, 0x100, 0x1ff}, 0x20)
connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)
r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000800)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup=r11, 0x21, 0x1, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0]}, 0x40)
sendmsg$sock(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
r12 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r12, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000a004e2000000000ff01000000000000000000000000000100000000fc63134441fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"], 0x90)
shutdown(r9, 0x1)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r2, @ANYBLOB="00042cbd7000fddbdf25110000003800018008000100", @ANYRES32=r6, @ANYBLOB="0000992b988994cb2fd9c30000", @ANYRES32=r7, @ANYBLOB="08000300020000001400020069703665727370616e3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="5800018008000300020000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="140002006361696630000000000000000000000014000200766c616e3000000000000000000000003000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f7674693000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="0800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x84}, 0x850)

962.406907ms ago: executing program 1 (id=1747):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0)

962.085736ms ago: executing program 1 (id=1749):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0)

892.596658ms ago: executing program 1 (id=1750):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r0, 0x1ad72f7)
accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000)
writev(r2, &(0x7f00000001c0), 0x7)

426.024264ms ago: executing program 3 (id=1762):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r1, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r5)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000850)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r5)
pipe(0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x41)

141.394691ms ago: executing program 2 (id=1766):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)

141.269755ms ago: executing program 2 (id=1767):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07022cbd7000000000000100000008000880040007012c0004800500030001000000050003000000000005000300010000000500030080ff0000050003000200000008000100030000000800020001"], 0x58}}, 0x880)

68.428171ms ago: executing program 2 (id=1768):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8}, @IFLA_GTP_ROLE={0x8}]}}}]}, 0x40}}, 0x0)

68.226831ms ago: executing program 2 (id=1769):
syz_emit_ethernet(0x89, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x4f, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1, @private2, [], "9f26a206417821e15efc5e939d07cf5132b591bd5fc2d053c1d443fe935769"}}}}}}}, 0x0)

11.963179ms ago: executing program 2 (id=1770):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x80108906, 0x0)

11.596105ms ago: executing program 1 (id=1771):
pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000000), 0x0}, 0x20)

11.442348ms ago: executing program 1 (id=1772):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500000000000061107900000000001f0100d500000000950000002200c4ac3d9f830000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

2.844732ms ago: executing program 3 (id=1773):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r0, &(0x7f0000000300)="d8", 0x1, 0x37bc0b736aafec5e, &(0x7f0000000100)={0xa, 0x0, 0xa576, @mcast1, 0x0, 0x2}, 0x20)

205.759µs ago: executing program 1 (id=1774):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x1042, 0x2, 0x3}, 0x10)

0s ago: executing program 2 (id=1775):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:42247' (ED25519) to the list of known hosts.
syzkaller login: [   49.403630][ T5777] cgroup: Unknown subsys name 'net'
[   49.506566][ T5777] cgroup: Unknown subsys name 'cpuset'
[   49.510449][ T5777] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.499612][ T5777] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.532606][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.536966][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.540518][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.545040][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.554259][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.582248][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.587997][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.592521][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.597678][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.601343][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.663546][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.667405][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.670111][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.673567][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.678016][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.923621][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   56.935205][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   57.013174][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   57.105998][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.109458][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.112442][ T5846] bridge_slave_0: entered allmulticast mode
[   57.115966][ T5846] bridge_slave_0: entered promiscuous mode
[   57.120409][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.123451][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.126836][ T5841] bridge_slave_0: entered allmulticast mode
[   57.130840][ T5841] bridge_slave_0: entered promiscuous mode
[   57.137324][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.140260][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.143227][ T5841] bridge_slave_1: entered allmulticast mode
[   57.147312][ T5841] bridge_slave_1: entered promiscuous mode
[   57.162185][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.165392][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.168337][ T5846] bridge_slave_1: entered allmulticast mode
[   57.172207][ T5846] bridge_slave_1: entered promiscuous mode
[   57.227460][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.232347][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.248941][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.254063][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.266319][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.269220][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.271619][ T5848] bridge_slave_0: entered allmulticast mode
[   57.274627][ T5848] bridge_slave_0: entered promiscuous mode
[   57.300949][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.303399][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.306452][ T5848] bridge_slave_1: entered allmulticast mode
[   57.310317][ T5848] bridge_slave_1: entered promiscuous mode
[   57.341092][ T5841] team0: Port device team_slave_0 added
[   57.346201][ T5846] team0: Port device team_slave_0 added
[   57.362855][ T5841] team0: Port device team_slave_1 added
[   57.373233][ T5846] team0: Port device team_slave_1 added
[   57.378549][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.399257][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.401849][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.410659][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.425680][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.429902][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.432132][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.441122][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.496483][ T5848] team0: Port device team_slave_0 added
[   57.508595][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.511647][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.521286][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.534771][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.537191][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.546256][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.551551][ T5848] team0: Port device team_slave_1 added
[   57.571114][ T5841] hsr_slave_0: entered promiscuous mode
[   57.573514][ T5841] hsr_slave_1: entered promiscuous mode
[   57.630539][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.633238][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.642628][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.648419][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.650714][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.660050][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.712809][ T5846] hsr_slave_0: entered promiscuous mode
[   57.716660][ T5846] hsr_slave_1: entered promiscuous mode
[   57.719649][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   57.722081][ T5846] Cannot create hsr debugfs directory
[   57.795616][ T5848] hsr_slave_0: entered promiscuous mode
[   57.798787][ T5848] hsr_slave_1: entered promiscuous mode
[   57.801759][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   57.805175][ T5848] Cannot create hsr debugfs directory
[   58.078992][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.088650][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.110828][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.126062][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.152783][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.162898][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.182683][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.191890][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.256927][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.266621][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.277210][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.295214][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.386923][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.425307][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   58.433507][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.443714][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.446946][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.462098][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.464599][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.473449][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.486551][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   58.507488][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.510141][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.523693][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.526254][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.538830][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   58.548240][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.550618][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.565025][ T5844] Bluetooth: hci0: command tx timeout
[   58.577668][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.580506][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.593541][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.655483][ T5844] Bluetooth: hci1: command tx timeout
[   58.720288][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.724099][ T5844] Bluetooth: hci2: command tx timeout
[   58.776887][ T5841] veth0_vlan: entered promiscuous mode
[   58.782505][ T5841] veth1_vlan: entered promiscuous mode
[   58.822472][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.830936][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.834682][ T5841] veth0_macvtap: entered promiscuous mode
[   58.846086][ T5841] veth1_macvtap: entered promiscuous mode
[   58.866914][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.877817][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.903155][ T5870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.908079][ T5870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.912141][ T5870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.934357][ T5870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.968970][ T5846] veth0_vlan: entered promiscuous mode
[   58.984538][ T5848] veth0_vlan: entered promiscuous mode
[   58.998068][ T5846] veth1_vlan: entered promiscuous mode
[   59.018909][ T5168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.020031][ T5848] veth1_vlan: entered promiscuous mode
[   59.022330][ T5168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.071494][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.074808][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.089288][ T5848] veth0_macvtap: entered promiscuous mode
[   59.092331][ T5846] veth0_macvtap: entered promiscuous mode
[   59.098545][ T5848] veth1_macvtap: entered promiscuous mode
[   59.101836][ T5846] veth1_macvtap: entered promiscuous mode
[   59.128429][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.138211][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.139090][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.146226][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.174566][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.177505][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.180525][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.198464][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.202258][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.214572][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.233643][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.252661][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.263240][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.347982][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.352681][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.403692][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.413118][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.441511][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.451069][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.496031][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.508670][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.614486][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   59.636103][ T5924] Zero length message leads to an empty skb
[   59.681740][ T5930] bridge0: entered allmulticast mode
[   59.713353][ T5930] pim6reg: entered allmulticast mode
[   59.736344][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'.
[   59.739621][ T5930] bridge_slave_1: left allmulticast mode
[   59.741878][ T5930] bridge_slave_1: left promiscuous mode
[   59.754365][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.761142][ T5930] bridge_slave_0: left allmulticast mode
[   59.763223][ T5930] bridge_slave_0: left promiscuous mode
[   59.775204][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.787193][ T5892] IPVS: starting estimator thread 0...
[   59.802479][ T5930] bridge0 (unregistering): left allmulticast mode
[   59.884046][ T5935] IPVS: using max 79 ests per chain, 189600 per kthread
[   59.886122][ T5928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.911045][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'.
[   60.724646][ T5844] Bluetooth: hci1: command tx timeout
[   60.804029][ T5844] Bluetooth: hci2: command tx timeout
[   61.067991][ T5979] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.241356][ T5984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.491915][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'.
[   61.500663][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'.
[   61.683424][ T6005] veth0_to_bridge: entered promiscuous mode
[   61.696182][ T6004] veth0_to_bridge: left promiscuous mode
[   61.844255][ T6010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.41'.
[   62.809887][ T5844] Bluetooth: hci1: command tx timeout
[   62.893890][ T5844] Bluetooth: hci2: command tx timeout
[   62.918196][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.422182][ T6067] tipc: Started in network mode
[   63.425513][ T6067] tipc: Node identity fab87353703d, cluster identity 4711
[   63.428771][ T6067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.432873][ T6067] syzkaller0: entered promiscuous mode
[   63.436384][ T6067] syzkaller0: entered allmulticast mode
[   63.452541][ T6067] netlink: 'syz.0.61': attribute type 13 has an invalid length.
[   63.586734][ T6066] tipc: Resetting bearer <eth:syzkaller0>
[   63.600316][ T6066] tipc: Disabling bearer <eth:syzkaller0>
[   64.026997][ T6094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.70'.
[   64.878438][   T47] IPVS: starting estimator thread 0...
[   64.894186][ T5844] Bluetooth: hci1: command tx timeout
[   64.956234][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.99'.
[   64.964018][ T6156] IPVS: using max 45 ests per chain, 108000 per kthread
[   64.975370][ T5844] Bluetooth: hci2: command tx timeout
[   65.153086][ T6172] Bluetooth: MGMT ver 1.23
[   65.402576][ T6187] syz.1.111 uses obsolete (PF_INET,SOCK_PACKET)
[   65.606643][ T6196] syzkaller1: entered promiscuous mode
[   65.608939][ T6196] syzkaller1: entered allmulticast mode
[   65.796985][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'.
[   66.002770][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'.
[   66.223613][ T6239] netlink: 'syz.1.136': attribute type 3 has an invalid length.
[   66.303339][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'.
[   66.321990][ T6248] netlink: 'syz.0.139': attribute type 1 has an invalid length.
[   66.526730][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'.
[   66.530934][ T6261] ip_vti0: Master is either lo or non-ether device
[   66.670879][ T6267] netlink: 'syz.1.149': attribute type 13 has an invalid length.
[   67.032168][ T6286] netlink: 'syz.2.154': attribute type 7 has an invalid length.
[   67.036114][ T6286] netlink: 'syz.2.154': attribute type 8 has an invalid length.
[   67.050855][ T6286] netlink: 36 bytes leftover after parsing attributes in process `syz.2.154'.
[   67.152221][ T6296] warning: `syz.1.158' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.649143][ T6330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.171'.
[   69.039187][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.190'.
[   69.337515][ T6405] netlink: 240 bytes leftover after parsing attributes in process `syz.0.197'.
[   69.437019][ T6411] geneve2: entered promiscuous mode
[   69.439353][ T6411] geneve2: entered allmulticast mode
[   69.518472][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'.
[   69.531758][ T6417] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   70.176852][ T6436] ieee802154 phy0 wpan0: encryption failed: -22
[   70.400985][ T6446] netlink: 36 bytes leftover after parsing attributes in process `syz.2.220'.
[   70.507584][ T6452] lo: Caught tx_queue_len zero misconfig
[   70.522633][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'.
[   70.947209][ T6482] netlink: 'syz.1.236': attribute type 1 has an invalid length.
[   70.950234][ T6482] netlink: 172 bytes leftover after parsing attributes in process `syz.1.236'.
[   71.077996][ T6487] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.147714][ T6487] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.219474][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.222385][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.233385][ T6487] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.300812][ T6487] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.375062][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.393625][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.402682][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.413708][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.612927][ T6522] tunl0: Caught tx_queue_len zero misconfig
[   72.639888][ T6522] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.251'.
[   73.813109][ T6565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.260'.
[   73.908095][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'.
[   74.211345][ T6580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.262'.
[   74.643893][ T5844] Bluetooth: hci2: command tx timeout
[   75.312251][ T6611] netlink: 'syz.0.272': attribute type 10 has an invalid length.
[   75.327664][ T6611] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   75.409568][ T6616] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   75.546304][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'.
[   75.549935][ T6625] veth0_to_bridge: Caught tx_queue_len zero misconfig
[   75.552549][ T6625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.279'.
[   76.249926][ T6645] netlink: 'syz.1.285': attribute type 13 has an invalid length.
[   76.253113][ T6645] netlink: 'syz.1.285': attribute type 17 has an invalid length.
[   76.298819][ T6645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.328356][ T6640] xfrm0: entered promiscuous mode
[   76.331061][ T6640] xfrm0: entered allmulticast mode
[   76.674466][ T6662] team_slave_1: Caught tx_queue_len zero misconfig
[   76.916527][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'.
[   77.872771][ T6726] netlink: 'syz.0.319': attribute type 1 has an invalid length.
[   77.921379][ T6726] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.036917][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'.
[   78.219306][ T6741] netlink: 'syz.0.324': attribute type 8 has an invalid length.
[   78.679075][ T6786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.340'.
[   79.228011][ T6830] Driver unsupported XDP return value 0 on prog  (id 48) dev N/A, expect packet loss!
[   79.873984][ T6899] netlink: 'syz.1.353': attribute type 1 has an invalid length.
[   79.899242][ T6899] netlink: 224 bytes leftover after parsing attributes in process `syz.1.353'.
[   80.107573][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'.
[   80.176559][ T6922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.363'.
[   80.192041][ T6920] netlink: 'syz.1.364': attribute type 1 has an invalid length.
[   80.240983][ T6918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.363'.
[   80.270853][ T6928] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.366'.
[   80.311167][ T6932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.337186][ T6932] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   80.340316][ T6932] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   80.345396][ T6935] netlink: 'syz.1.368': attribute type 11 has an invalid length.
[   80.362454][ T6932] tipc: Resetting bearer <eth:syzkaller0>
[   80.372301][ T6846] tipc: Resetting bearer <eth:syzkaller0>
[   80.638502][ T6953] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   80.690426][ T6955] __nla_validate_parse: 1 callbacks suppressed
[   80.690439][ T6955] netlink: 132 bytes leftover after parsing attributes in process `syz.0.375'.
[   80.697404][ T6955] veth0: Caught tx_queue_len zero misconfig
[   80.868874][ T6961] netlink: 'syz.2.377': attribute type 1 has an invalid length.
[   80.872109][ T6961] netlink: 'syz.2.377': attribute type 1 has an invalid length.
[   80.971100][ T6967] tipc: Started in network mode
[   80.971530][ T6966] IPv6: NLM_F_CREATE should be specified when creating new route
[   80.973040][ T6967] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[   80.988779][ T6967] tipc: Enabled bearer <udp:syz0>, priority 10
[   81.088189][ T6977] netlink: 60 bytes leftover after parsing attributes in process `syz.0.386'.
[   81.355326][   T47] tipc: Node number set to 2324001619
[   81.460616][  T791] cfg80211: failed to load regulatory.db
[   81.547759][ T6997] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   81.647158][ T7018] ipip0: entered promiscuous mode
[   81.850148][ T7031] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   82.104318][  T972] tipc: Node number set to 4269801488
[   82.431854][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'.
[   82.437001][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'.
[   82.514614][ T7069] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20001
[   82.921512][ T7089] netlink: 17 bytes leftover after parsing attributes in process `syz.2.426'.
[   83.330546][ T7109] netlink: 'syz.0.436': attribute type 21 has an invalid length.
[   83.333540][ T7109] netlink: 132 bytes leftover after parsing attributes in process `syz.0.436'.
[   83.430249][ T7112] lo: Caught tx_queue_len zero misconfig
[   83.432238][ T7112] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   83.580156][ T7122] syzkaller1: entered promiscuous mode
[   83.582140][ T7122] syzkaller1: entered allmulticast mode
[   83.814595][ T7140] syzkaller1: entered promiscuous mode
[   83.816497][ T7140] syzkaller1: entered allmulticast mode
[   84.171609][ T7162] netlink: 'syz.0.460': attribute type 18 has an invalid length.
[   84.176381][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'.
[   84.190108][ T7162] netlink: 'syz.0.460': attribute type 18 has an invalid length.
[   84.193235][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'.
[   84.196988][ T5870] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.200742][ T5870] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.216497][ T5870] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.220027][ T5870] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.850265][ T7201] netlink: 56 bytes leftover after parsing attributes in process `syz.0.478'.
[   84.941805][ T7208] team0: Caught tx_queue_len zero misconfig
[   85.129076][ T7219] bridge_slave_0: left allmulticast mode
[   85.133439][ T7219] bridge_slave_0: left promiscuous mode
[   85.141993][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.175458][ T7223] syz.0.487: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   85.181599][ T7223] CPU: 1 UID: 0 PID: 7223 Comm: syz.0.487 Not tainted syzkaller #0 PREEMPT(full) 
[   85.181616][ T7223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.181624][ T7223] Call Trace:
[   85.181630][ T7223]  <TASK>
[   85.181635][ T7223]  dump_stack_lvl+0x189/0x250
[   85.181657][ T7223]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.181672][ T7223]  ? __pfx__printk+0x10/0x10
[   85.181717][ T7223]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   85.181732][ T7223]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   85.181747][ T7223]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   85.181764][ T7223]  warn_alloc+0x214/0x310
[   85.181783][ T7223]  ? stack_depot_save_flags+0x41b/0x860
[   85.181803][ T7223]  ? __pfx_warn_alloc+0x10/0x10
[   85.181823][ T7223]  ? kasan_save_track+0x4f/0x80
[   85.181840][ T7223]  ? xskq_create+0x56/0x170
[   85.181856][ T7223]  ? xsk_init_queue+0xb0/0x110
[   85.181871][ T7223]  ? xsk_setsockopt+0x4dc/0x8d0
[   85.181885][ T7223]  ? do_sock_setsockopt+0x17c/0x1b0
[   85.181898][ T7223]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   85.181911][ T7223]  ? do_syscall_64+0xfa/0x3b0
[   85.181921][ T7223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.181939][ T7223]  __vmalloc_node_range_noprof+0x125/0x12f0
[   85.181980][ T7223]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   85.182001][ T7223]  ? __kasan_kmalloc+0x93/0xb0
[   85.182019][ T7223]  vmalloc_user_noprof+0xad/0xf0
[   85.182042][ T7223]  ? xskq_create+0xbf/0x170
[   85.182060][ T7223]  xskq_create+0xbf/0x170
[   85.182079][ T7223]  xsk_init_queue+0xb0/0x110
[   85.182099][ T7223]  xsk_setsockopt+0x4dc/0x8d0
[   85.182117][ T7223]  ? __pfx_xsk_setsockopt+0x10/0x10
[   85.182133][ T7223]  ? __pfx_aa_sk_perm+0x10/0x10
[   85.182153][ T7223]  ? aa_sock_opt_perm+0xff/0x1b0
[   85.182167][ T7223]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   85.182179][ T7223]  ? __pfx_xsk_setsockopt+0x10/0x10
[   85.182196][ T7223]  do_sock_setsockopt+0x17c/0x1b0
[   85.182214][ T7223]  __x64_sys_setsockopt+0x13f/0x1b0
[   85.182233][ T7223]  do_syscall_64+0xfa/0x3b0
[   85.182243][ T7223]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.182260][ T7223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.182272][ T7223]  ? exc_page_fault+0x9f/0xf0
[   85.182289][ T7223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.182301][ T7223] RIP: 0033:0x7faf5e18ec29
[   85.182313][ T7223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.182322][ T7223] RSP: 002b:00007faf5ef99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   85.182336][ T7223] RAX: ffffffffffffffda RBX: 00007faf5e3d6090 RCX: 00007faf5e18ec29
[   85.182344][ T7223] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[   85.182351][ T7223] RBP: 00007faf5e211e41 R08: 0000000000000004 R09: 0000000000000000
[   85.182358][ T7223] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.182366][ T7223] R13: 00007faf5e3d6128 R14: 00007faf5e3d6090 R15: 00007ffe2247c5a8
[   85.182385][ T7223]  </TASK>
[   85.182389][ T7223] Mem-Info:
[   85.232766][ T7219] bridge_slave_1: left allmulticast mode
[   85.243953][ T7223] active_anon:5850 inactive_anon:0 isolated_anon:0
[   85.243953][ T7223]  active_file:1384 inactive_file:38245 isolated_file:0
[   85.243953][ T7223]  unevictable:1768 dirty:251 writeback:0
[   85.243953][ T7223]  slab_reclaimable:9599 slab_unreclaimable:67083
[   85.243953][ T7223]  mapped:18191 shmem:2432 pagetables:973
[   85.243953][ T7223]  sec_pagetables:0 bounce:0
[   85.243953][ T7223]  kernel_misc_reclaimable:0
[   85.243953][ T7223]  free:286256 free_pcp:21443 free_cma:0
[   85.246749][ T7219] bridge_slave_1: left promiscuous mode
[   85.247572][ T7223] Node 0 active_anon:12924kB inactive_anon:0kB active_file:4372kB inactive_file:68384kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42140kB dirty:640kB writeback:0kB shmem:5016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7328kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   85.249598][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.250800][ T7223] Node 1 active_anon:10476kB inactive_anon:0kB active_file:1164kB inactive_file:84596kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30624kB dirty:364kB writeback:0kB shmem:4712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4388kB pagetables:1684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   85.347957][ T7223] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   85.359568][ T7223] lowmem_reserve[]: 0 814 814 814 814
[   85.360740][ T7219] bond0: (slave bond_slave_0): Releasing backup interface
[   85.361964][ T7223] Node 0 DMA32 free:318484kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13196kB inactive_anon:0kB active_file:4372kB inactive_file:68384kB unevictable:3536kB writepending:640kB present:1556484kB managed:833644kB mlocked:0kB bounce:0kB free_pcp:49520kB local_pcp:18380kB free_cma:0kB
[   85.377895][ T7223] lowmem_reserve[]: 0 0 0 0 0
[   85.380196][ T7223] Node 1 DMA32 free:458616kB boost:0kB min:19172kB low:23964kB high:28756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   85.392543][ T7223] lowmem_reserve[]: 0 0 854 854 854
[   85.394939][ T7223] Node 1 Normal free:352564kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10476kB inactive_anon:0kB active_file:1164kB inactive_file:84596kB unevictable:3536kB writepending:364kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:36112kB local_pcp:16120kB free_cma:0kB
[   85.407794][ T7219] bond0: (slave bond_slave_1): Releasing backup interface
[   85.416302][ T7232] netlink: 'syz.0.487': attribute type 4 has an invalid length.
[   85.420606][ T7223] lowmem_reserve[]: 0 0 0 0 0
[   85.422785][ T7223] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   85.426565][ T7219] team0: Port device team_slave_0 removed
[   85.428272][ T7223] Node 0 DMA32: 183*4kB (ME) 441*8kB (UME) 7*16kB (ME) 422*32kB (UME) 93*64kB (UME) 34*128kB (UM) 12*256kB (UME) 9*512kB (UME) 2*1024kB (U) 1*2048kB (M) 68*4096kB (M) = 318484kB
[   85.575355][ T7233] netlink: 'syz.0.487': attribute type 4 has an invalid length.
[   85.578453][ T7223] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   85.586618][ T7223] Node 1 Normal: 221*4kB (UME) 598*8kB (UME) 307*16kB (UME) 365*32kB (UME) 172*64kB (UME) 42*128kB (UM) 14*256kB (UM) 10*512kB (UM) 10*1024kB (UM) 4*2048kB (UM) 70*4096kB (UM) = 352500kB
[   85.704736][ T7219] team0: Port device team_slave_1 removed
[   85.741885][ T7223] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   85.792545][ T7219] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.796803][ T7223] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   85.797241][ T7219] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.801398][ T7223] 42064 total pagecache pages
[   85.805178][ T7223] 0 pages in swap cache
[   85.806660][ T7219] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.806705][ T7219] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.809353][ T7223] Free swap  = 124996kB
[   85.809360][ T7223] Total swap = 124996kB
[   85.809365][ T7223] 786301 pages RAM
[   85.809368][ T7223] 0 pages HighMem/MovableOnly
[   85.809371][ T7223] 240658 pages reserved
[   85.819914][ T7223] 0 pages cma reserved
[   85.821491][ T7219] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   86.771738][ T7287] netlink: 52 bytes leftover after parsing attributes in process `syz.2.515'.
[   86.790485][ T7287] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   86.803150][ T7289] netlink: 284 bytes leftover after parsing attributes in process `syz.1.516'.
[   86.970816][ T7296] netlink: 'syz.1.518': attribute type 10 has an invalid length.
[   86.981052][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'.
[   87.315590][ T7299] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   87.333222][ T7299] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   87.347069][ T7299] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.362137][ T7299] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.493938][ T5870] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.496789][ T5870] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.499847][ T5870] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.534448][ T5870] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.080716][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'.
[   88.085878][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'.
[   88.294937][ T7340] netlink: 'syz.2.539': attribute type 21 has an invalid length.
[   88.298121][ T7340] netlink: 'syz.2.539': attribute type 22 has an invalid length.
[   88.302778][ T7340] netlink: 'syz.2.539': attribute type 23 has an invalid length.
[   88.307222][ T7340] netlink: 136 bytes leftover after parsing attributes in process `syz.2.539'.
[   89.067926][   T57] block nbd0: Receive control failed (result -104)
[   89.317327][ T7404] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   89.337238][ T7408] openvswitch: netlink: Message has 8 unknown bytes.
[   89.355566][ T7408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.368090][ T7404] netlink: 'syz.0.569': attribute type 10 has an invalid length.
[   89.371064][ T7404] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   89.379050][ T7404] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   89.382773][ T7404] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   89.488956][   T33] audit: type=1107 audit(1758896478.232:2): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   89.568897][ T7421] vlan2: entered promiscuous mode
[   89.603083][ T7421] bond0: entered promiscuous mode
[   89.606510][ T7421] bond_slave_0: entered promiscuous mode
[   89.608777][ T7421] bond_slave_1: entered promiscuous mode
[   90.944888][ T7471] netlink: 'syz.0.594': attribute type 6 has an invalid length.
[   90.954242][ T7471] netlink: 'syz.0.594': attribute type 12 has an invalid length.
[   90.957495][ T7471] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.594'.
[   91.740378][ T7532] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   91.830056][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'.
[   91.845967][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'.
[   91.923318][ T7545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.619'.
[   92.308894][ T7570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.631'.
[   92.312471][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'.
[   92.317004][ T7570] netlink: 31 bytes leftover after parsing attributes in process `syz.0.631'.
[   92.320585][ T7570] netlink: 'syz.0.631': attribute type 3 has an invalid length.
[   92.324770][ T7570] netlink: 'syz.0.631': attribute type 2 has an invalid length.
[   92.328027][ T7570] netlink: 31 bytes leftover after parsing attributes in process `syz.0.631'.
[   92.331273][ T7570] netlink: 'syz.0.631': attribute type 2 has an invalid length.
[   92.360652][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'.
[   92.889917][ T7610] tipc: New replicast peer: 255.255.255.255
[   92.893885][ T7610] tipc: Enabled bearer <udp:syz2>, priority 10
[   93.040729][ T7622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.656'.
[   93.122335][ T7628] syz_tun: entered allmulticast mode
[   93.185980][ T7634] syz_tun: left allmulticast mode
[   93.407906][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'.
[   94.378609][ T7713] netlink: 'syz.0.699': attribute type 1 has an invalid length.
[   94.521369][ T7720] sctp: [Deprecated]: syz.2.702 (pid 7720) Use of int in maxseg socket option.
[   94.521369][ T7720] Use struct sctp_assoc_value instead
[   95.107004][ T7774] syzkaller0: entered promiscuous mode
[   95.109298][ T7774] syzkaller0: entered allmulticast mode
[   96.583410][ T7812] bond0: Caught tx_queue_len zero misconfig
[   97.172865][ T7860] netlink: 'syz.1.761': attribute type 1 has an invalid length.
[   97.231952][ T7864] netlink: 'syz.2.763': attribute type 1 has an invalid length.
[   97.236731][ T7864] __nla_validate_parse: 7 callbacks suppressed
[   97.236744][ T7864] netlink: 224 bytes leftover after parsing attributes in process `syz.2.763'.
[   97.347952][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'.
[   97.434881][ T7875] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   97.439732][ T7875] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   97.788220][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'.
[   97.922237][ T7898] lo: entered promiscuous mode
[   97.928588][ T7898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.136308][ T7910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.785'.
[   98.362451][ T7924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.502258][ T7934] netlink: 'syz.1.797': attribute type 6 has an invalid length.
[   98.505945][ T7934] netlink: 176 bytes leftover after parsing attributes in process `syz.1.797'.
[   98.569582][ T7942] netlink: 'syz.0.801': attribute type 1 has an invalid length.
[   98.591742][ T7942] 8021q: adding VLAN 0 to HW filter on device bond2
[   98.626002][ T7942] bond2: (slave veth7): Enslaving as an active interface with a down link
[   98.638480][ T7942] 8021q: adding VLAN 0 to HW filter on device batadv1
[   98.641109][ T7942] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  100.109542][ T7980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.126422][ T7980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.216043][ T7980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.220332][ T7980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.317549][ T7980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.321639][ T7980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.453376][ T7980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.465295][ T7980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.477101][ T7995] netlink: 'syz.1.821': attribute type 5 has an invalid length.
[  100.583635][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.587424][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.602458][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.606614][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.622818][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.632468][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.653335][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.657154][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.839136][ T8003] lo: left promiscuous mode
[  101.360671][ T8039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.365981][ T8043] netlink: 'syz.1.843': attribute type 4 has an invalid length.
[  101.981210][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.856'.
[  101.987231][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'.
[  102.847875][ T8149] bridge0: port 1(erspan0) entered blocking state
[  102.850671][ T8149] bridge0: port 1(erspan0) entered disabled state
[  102.853474][ T8149] erspan0: entered allmulticast mode
[  102.858368][ T8149] erspan0: entered promiscuous mode
[  102.861424][ T8149] bridge0: port 1(erspan0) entered blocking state
[  102.863961][ T8149] bridge0: port 1(erspan0) entered forwarding state
[  102.871523][ T8149] erspan0: left allmulticast mode
[  102.873510][ T8149] erspan0: left promiscuous mode
[  102.876043][ T8149] bridge0: port 1(erspan0) entered disabled state
[  103.176257][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'.
[  103.180116][ T8179] netlink: 'syz.1.903': attribute type 29 has an invalid length.
[  103.183482][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'.
[  103.283420][ T8185] netlink: 3 bytes leftover after parsing attributes in process `syz.1.906'.
[  103.286838][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'.
[  103.289980][ T8185] netlink: 3 bytes leftover after parsing attributes in process `syz.1.906'.
[  103.293232][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'.
[  103.296263][ T8185] netlink: 3 bytes leftover after parsing attributes in process `syz.1.906'.
[  103.352249][ T8189] netlink: 44 bytes leftover after parsing attributes in process `syz.1.908'.
[  103.602736][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'.
[  103.606793][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'.
[  104.125997][ T8240] netlink: 'syz.0.931': attribute type 21 has an invalid length.
[  104.129626][ T8240] netlink: 'syz.0.931': attribute type 22 has an invalid length.
[  104.130134][ T8237] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  104.135789][ T8240] netlink: 'syz.0.931': attribute type 23 has an invalid length.
[  104.141145][ T8240] netlink: 'syz.0.931': attribute type 25 has an invalid length.
[  104.145078][ T8240] netlink: 'syz.0.931': attribute type 26 has an invalid length.
[  104.517146][ T8270] virt_wifi0 speed is unknown, defaulting to 1000
[  104.521933][ T8270] virt_wifi0 speed is unknown, defaulting to 1000
[  104.530038][ T8270] virt_wifi0 speed is unknown, defaulting to 1000
[  104.536226][ T8270] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  104.542967][ T8270] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  104.607349][ T8270] virt_wifi0 speed is unknown, defaulting to 1000
[  104.611994][ T8270] virt_wifi0 speed is unknown, defaulting to 1000
[  104.618686][ T8270] virt_wifi0 speed is unknown, defaulting to 1000
[  104.622938][ T8270] virt_wifi0 speed is unknown, defaulting to 1000
[  104.631874][ T8270] virt_wifi0 speed is unknown, defaulting to 1000
[  104.681946][ T8278] syzkaller1: entered promiscuous mode
[  104.686112][ T8278] syzkaller1: entered allmulticast mode
[  105.010287][ T8298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.681787][ T8348] netlink: 'syz.0.979': attribute type 11 has an invalid length.
[  105.957779][ T8365] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  105.995141][ T8367] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  106.326725][ T8383] netlink: 'syz.2.995': attribute type 11 has an invalid length.
[  107.016061][ T8425] Bluetooth: MGMT ver 1.23
[  107.073969][ T8428] Bluetooth: MGMT ver 1.23
[  107.172695][ T8437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.335291][ T8448] syzkaller0: entered promiscuous mode
[  107.337578][ T8448] syzkaller0: entered allmulticast mode
[  108.379345][ T8464] __nla_validate_parse: 3 callbacks suppressed
[  108.379355][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'.
[  108.826617][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'.
[  109.050197][ T8516] raw_sendmsg: syz.1.1059 forgot to set AF_INET. Fix it!
[  109.148629][ T8522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1062'.
[  109.200769][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  109.204276][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  109.207442][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  109.211012][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  109.215714][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  109.247018][ T8523] virt_wifi0 speed is unknown, defaulting to 1000
[  109.370020][ T8523] chnl_net:caif_netlink_parms(): no params data found
[  109.458185][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.460629][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.463054][ T8523] bridge_slave_0: entered allmulticast mode
[  109.466968][ T8523] bridge_slave_0: entered promiscuous mode
[  109.471441][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.474510][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.477553][ T8523] bridge_slave_1: entered allmulticast mode
[  109.481489][ T8523] bridge_slave_1: entered promiscuous mode
[  109.511001][ T8523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.518124][ T8523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.548594][ T8523] team0: Port device team_slave_0 added
[  109.552880][ T8523] team0: Port device team_slave_1 added
[  109.572044][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.575476][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  109.586414][ T8523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.592075][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.596050][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  109.607809][ T8523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.632583][ T8523] hsr_slave_0: entered promiscuous mode
[  109.635229][ T8523] hsr_slave_1: entered promiscuous mode
[  109.637804][ T8523] debugfs: 'hsr0' already exists in 'hsr'
[  109.639579][ T8523] Cannot create hsr debugfs directory
[  109.772028][ T8545] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1069'.
[  109.826838][ T8523] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  109.843248][ T8523] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  109.850621][ T8523] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  109.857454][ T8523] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  109.903641][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.906660][ T8523] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.909752][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.913280][ T8523] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.986694][ T8523] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.002827][ T5168] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.006815][ T5168] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.031430][ T8523] 8021q: adding VLAN 0 to HW filter on device team0
[  110.043286][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.046402][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.061493][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.064677][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.248006][ T8523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.292189][ T8523] veth0_vlan: entered promiscuous mode
[  110.306270][ T8523] veth1_vlan: entered promiscuous mode
[  110.345836][ T8574] geneve0: entered promiscuous mode
[  110.353719][ T8523] veth0_macvtap: entered promiscuous mode
[  110.365302][ T8523] veth1_macvtap: entered promiscuous mode
[  110.373621][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.382410][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.396175][ T5870] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.400110][ T5870] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.420166][ T5870] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.423673][ T5870] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.504691][ T5168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.516770][ T5168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.556899][ T5168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.560143][ T5168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.680553][ T8596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1085'.
[  110.758157][ T8605] netlink: 'syz.1.1090': attribute type 1 has an invalid length.
[  111.283911][ T5844] Bluetooth: hci1: command tx timeout
[  112.111293][   T10] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0
[  112.132364][   T10] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  112.157431][ T8637] gtp0: entered promiscuous mode
[  112.158151][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'.
[  112.159562][ T8637] gtp0: entered allmulticast mode
[  112.394039][ T8658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1111'.
[  112.570170][ T8650] veth5: entered promiscuous mode
[  112.616773][ T8655] erspan0: entered allmulticast mode
[  112.695263][ T8660] virt_wifi0 speed is unknown, defaulting to 1000
[  112.758872][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1119'.
[  112.786147][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'.
[  113.364411][ T5844] Bluetooth: hci1: command tx timeout
[  114.415609][ T8744] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1154'.
[  114.467829][ T8751] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.480604][ T8751] batadv_slave_0: entered promiscuous mode
[  114.589229][ T8763] netlink: 'syz.1.1163': attribute type 3 has an invalid length.
[  114.675038][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1167'.
[  114.772949][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'.
[  114.809548][ T8786] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20002
[  114.845282][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'.
[  115.210755][ T8815] netlink: 'syz.3.1185': attribute type 2 has an invalid length.
[  115.345522][ T8821] netlink: 'syz.3.1188': attribute type 1 has an invalid length.
[  115.348494][ T8821] netlink: 'syz.3.1188': attribute type 1 has an invalid length.
[  115.443972][   T55] Bluetooth: hci1: command tx timeout
[  115.965140][ T8848] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.217652][ T5869] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  116.279928][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'.
[  116.456157][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'.
[  116.461900][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1215'.
[  116.977299][ T8931] netlink: 'syz.1.1236': attribute type 5 has an invalid length.
[  117.235986][ T8953] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1247'.
[  117.337417][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1249'.
[  117.523938][   T55] Bluetooth: hci1: command 0x0419 tx timeout
[  117.557437][ T8978] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  118.413625][ T8982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'.
[  119.277723][ T9041] bond1: entered promiscuous mode
[  119.592419][ T9069] netlink: 'syz.3.1287': attribute type 11 has an invalid length.
[  119.604854][ T5844] Bluetooth: hci1: command 0x0419 tx timeout
[  119.897140][ T9105] netlink: 'syz.2.1307': attribute type 2 has an invalid length.
[  119.899713][ T9105] netlink: 'syz.2.1307': attribute type 1 has an invalid length.
[  119.902208][ T9105] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1307'.
[  119.943118][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'.
[  120.028490][ T9110] team0 (unregistering): Port device team_slave_0 removed
[  120.034996][ T9110] team0 (unregistering): Port device team_slave_1 removed
[  120.044518][ T9115] netlink: 'syz.1.1312': attribute type 15 has an invalid length.
[  120.144655][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'.
[  120.171215][ T9128] vlan2: entered promiscuous mode
[  120.172933][ T9128] bond0: entered promiscuous mode
[  120.175846][ T9128] bond_slave_0: entered promiscuous mode
[  120.177826][ T9128] bond_slave_1: entered promiscuous mode
[  120.383033][ T9140] netlink: 'syz.2.1322': attribute type 7 has an invalid length.
[  120.673880][ T9162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1334'.
[  120.885884][ T9175] netlink: 'syz.1.1340': attribute type 3 has an invalid length.
[  121.473179][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1363'.
[  121.479652][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1363'.
[  121.487720][ T9227] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1363'.
[  121.781426][ T9249] netlink: 'syz.1.1374': attribute type 12 has an invalid length.
[  122.015392][ T9273] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.1386'.
[  122.628135][ T9315] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1406'.
[  123.071662][ T9352] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  123.117056][ T9356] batadv_slave_1: entered promiscuous mode
[  123.131822][ T9355] batadv_slave_1: left promiscuous mode
[  123.158736][ T9358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1424'.
[  123.627992][ T9379] netlink: 'syz.3.1434': attribute type 1 has an invalid length.
[  123.670074][ T9379] 8021q: adding VLAN 0 to HW filter on device bond2
[  123.695553][ T9381] bond2: (slave ip6gretap1): making interface the new active one
[  123.700141][ T9381] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  123.759507][ T9379] veth3: entered promiscuous mode
[  123.765353][ T9379] bond2: (slave veth3): Enslaving as an active interface with a down link
[  123.783583][ T9379] erspan0: entered allmulticast mode
[  123.803385][ T9379] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  123.952225][ T9393] openvswitch: netlink: Message has 200 unknown bytes.
[  123.955403][ T9393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.071297][ T9402] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  124.411787][ T9439] netlink: 'syz.3.1462': attribute type 25 has an invalid length.
[  124.416968][ T9439] netlink: 'syz.3.1462': attribute type 25 has an invalid length.
[  124.566023][ T9455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.696700][ T9466] tipc: Started in network mode
[  124.698836][ T9466] tipc: Node identity ac14140f, cluster identity 4711
[  124.702171][ T9466] tipc: New replicast peer: 255.255.255.255
[  124.705602][ T9466] tipc: Enabled bearer <udp:syz2>, priority 10
[  125.082466][ T9421] delete_channel: no stack
[  125.140702][ T9486] __nla_validate_parse: 2 callbacks suppressed
[  125.140715][ T9486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1484'.
[  125.288945][ T9502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1493'.
[  125.399255][ T9519] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1500'.
[  125.407472][ T9516] 8021q: adding VLAN 0 to HW filter on device bond3
[  125.554110][ T9543] bond0: Unable to set down delay as MII monitoring is disabled
[  125.643992][ T9555] syzkaller1: entered promiscuous mode
[  125.645862][ T9555] syzkaller1: entered allmulticast mode
[  125.702815][ T9562] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  125.712230][ T9562] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.836139][   T47] tipc: Node number set to 2886997007
[  126.041747][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'.
[  126.251397][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1546'.
[  126.612058][ T9641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1557'.
[  126.765220][ T9655] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1564'.
[  126.768936][ T9655] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1564'.
[  126.787344][ T9657] netlink: 'syz.2.1565': attribute type 1 has an invalid length.
[  126.791469][ T9657] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1565'.
[  126.854862][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'.
[  126.876064][ T9665] netlink: 'syz.1.1569': attribute type 12 has an invalid length.
[  126.931531][ T9672] netlink: 'syz.2.1574': attribute type 46 has an invalid length.
[  127.517440][ T9748] openvswitch: netlink: Message has 4 unknown bytes.
[  127.529263][ T9747] netlink: 'syz.2.1605': attribute type 1 has an invalid length.
[  127.876912][ T9769] wg1 speed is unknown, defaulting to 1000
[  127.879020][ T9769] wg1 speed is unknown, defaulting to 1000
[  127.881279][ T9769] wg1 speed is unknown, defaulting to 1000
[  127.888951][ T9769] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  127.904378][ T9769] wg1 speed is unknown, defaulting to 1000
[  127.908467][ T9769] wg1 speed is unknown, defaulting to 1000
[  127.912360][ T9769] wg1 speed is unknown, defaulting to 1000
[  127.916484][ T9769] wg1 speed is unknown, defaulting to 1000
[  127.930523][ T9769] virt_wifi0 speed is unknown, defaulting to 1000
[  129.236824][ T9818] netlink: 'syz.2.1643': attribute type 2 has an invalid length.
[  129.269442][ T9820] syzkaller1: entered promiscuous mode
[  129.271647][ T9820] syzkaller1: entered allmulticast mode
[  129.355157][ T9824] netlink: 'syz.1.1646': attribute type 1 has an invalid length.
[  129.357751][ T9824] netlink: 'syz.1.1646': attribute type 2 has an invalid length.
[  129.360411][ T9824] netlink: 'syz.1.1646': attribute type 1 has an invalid length.
[  129.391990][ T9828] bridge_slave_0: default FDB implementation only supports local addresses
[  129.454348][   T55] Bluetooth: hci1: command 0x0419 tx timeout
[  129.758151][ T9863] syzkaller1: entered promiscuous mode
[  129.760094][ T9863] syzkaller1: entered allmulticast mode
[  130.407024][ T9875] __nla_validate_parse: 4 callbacks suppressed
[  130.407040][ T9875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1667'.
[  130.529287][ T9884] virt_wifi0 speed is unknown, defaulting to 1000
[  130.534153][ T9884] wg1 speed is unknown, defaulting to 1000
[  130.655363][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1673'.
[  130.749130][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'.
[  130.926412][ T9925] virt_wifi0 speed is unknown, defaulting to 1000
[  130.929298][ T9925] wg1 speed is unknown, defaulting to 1000
[  131.185087][ T9950] netlink: 'syz.3.1697': attribute type 21 has an invalid length.
[  131.188548][ T9950] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1697'.
[  131.192546][ T9950] netlink: 'syz.3.1697': attribute type 5 has an invalid length.
[  131.198078][ T9950] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1697'.
[  131.339776][ T9955] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1699'.
[  132.401420][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'.
[  132.557281][T10001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'.
[  132.621331][T10010] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1724'.
[  132.626967][T10010] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1724'.
[  132.645666][   T55] Bluetooth: hci1: command 0x0419 tx timeout
[  132.645993][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.650404][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  133.048475][T10050] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  133.126874][T10057] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  133.750451][T10091] bridge_slave_1: left allmulticast mode
[  133.755581][T10091] bridge_slave_1: left promiscuous mode
[  133.761589][T10091] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.779151][T10091] bridge_slave_0: left allmulticast mode
[  133.781656][T10091] bridge_slave_0: left promiscuous mode
[  133.784599][T10091] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.083986][    C1] ==================================================================
[  134.087272][    C1] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  134.090588][    C1] Read of size 1 at addr ffff8880281147b0 by task syz-executor/10110
[  134.094843][    C1] 
[  134.095870][    C1] CPU: 1 UID: 0 PID: 10110 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  134.095885][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.095892][    C1] Call Trace:
[  134.095898][    C1]  <IRQ>
[  134.095904][    C1]  dump_stack_lvl+0x189/0x250
[  134.095919][    C1]  ? __kasan_check_byte+0x12/0x40
[  134.095940][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.095951][    C1]  ? lock_release+0x4b/0x3e0
[  134.095967][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  134.095980][    C1]  print_report+0xca/0x240
[  134.095995][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  134.096008][    C1]  kasan_report+0x118/0x150
[  134.096022][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  134.096036][    C1]  xfrm_state_find+0x2cf2/0x5400
[  134.096049][    C1]  ? __lock_acquire+0xab9/0xd20
[  134.096066][    C1]  ? unwind_next_frame+0xa5/0x2390
[  134.096078][    C1]  ? xfrm_state_find+0x1da/0x5400
[  134.096091][    C1]  ? __pfx_xfrm_state_find+0x10/0x10
[  134.096108][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  134.096129][    C1]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  134.096139][    C1]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  134.096152][    C1]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  134.096160][    C1]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  134.096175][    C1]  ? xfrm_expand_policies+0x41f/0x6a0
[  134.096189][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  134.096203][    C1]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  134.096219][    C1]  ? dst_cache_get+0x10e/0x5b0
[  134.096235][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  134.096250][    C1]  tipc_udp_xmit+0x1c3/0xb60
[  134.096263][    C1]  ? tipc_udp_xmit+0xa4/0xb60
[  134.096274][    C1]  ? __pfx_tipc_udp_xmit+0x10/0x10
[  134.096287][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  134.096301][    C1]  ? __asan_memcpy+0x40/0x70
[  134.096312][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  134.096328][    C1]  tipc_udp_send_msg+0x27f/0x3f0
[  134.096342][    C1]  tipc_bearer_xmit_skb+0x2b3/0x400
[  134.096385][    C1]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  134.096397][    C1]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  134.096412][    C1]  tipc_disc_timeout+0x580/0x6d0
[  134.096424][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  134.096437][    C1]  call_timer_fn+0x17e/0x5f0
[  134.096452][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  134.096463][    C1]  ? call_timer_fn+0xbe/0x5f0
[  134.096474][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  134.096490][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  134.096506][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.096523][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  134.096534][    C1]  __run_timer_base+0x61a/0x860
[  134.096547][    C1]  ? ktime_get+0x3e/0x1f0
[  134.096561][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  134.096574][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  134.096589][    C1]  run_timer_softirq+0xb7/0x180
[  134.096603][    C1]  handle_softirqs+0x286/0x870
[  134.096620][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  134.096632][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  134.096648][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  134.096662][    C1]  __irq_exit_rcu+0xca/0x1f0
[  134.096670][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  134.096680][    C1]  irq_exit_rcu+0x9/0x30
[  134.096689][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  134.096704][    C1]  </IRQ>
[  134.096708][    C1]  <TASK>
[  134.096713][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  134.096724][    C1] RIP: 0010:alloc_fd+0x61d/0x6c0
[  134.096740][    C1] Code: e8 38 c2 e6 ff 4d 0f ab 37 49 83 c4 08 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 7b bf e6 ff 48 c1 e3 03 49 03 1c 24 <48> 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 5e bf e6 ff 48
[  134.096749][    C1] RSP: 0018:ffffc900069f7d28 EFLAGS: 00000286
[  134.096761][    C1] RAX: 1ffff11021b5e9f1 RBX: ffff88803800f018 RCX: ffff888107748000
[  134.096769][    C1] RDX: 0000000000000000 RSI: 000000000000001f RDI: ffffffffffffffff
[  134.096777][    C1] RBP: dffffc0000000000 R08: ffff888037761627 R09: 1ffff11006eec2c4
[  134.096785][    C1] R10: dffffc0000000000 R11: ffffed1006eec2c5 R12: ffff88810daf4f88
[  134.096793][    C1] R13: 0000000000000000 R14: ffff88810daf4f98 R15: 000000000000001f
[  134.096806][    C1]  ? alloc_fd+0x5b3/0x6c0
[  134.096823][    C1]  do_sys_openat2+0xfc/0x1c0
[  134.096836][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  134.096847][    C1]  ? exc_page_fault+0x76/0xf0
[  134.096863][    C1]  ? do_user_addr_fault+0xc8a/0x1390
[  134.096879][    C1]  __x64_sys_openat+0x138/0x170
[  134.096892][    C1]  do_syscall_64+0xfa/0x3b0
[  134.096902][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.096917][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.096934][    C1]  ? exc_page_fault+0x9f/0xf0
[  134.096950][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.096960][    C1] RIP: 0033:0x7ffabc38d590
[  134.096971][    C1] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  134.096980][    C1] RSP: 002b:00007fff7a991bd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  134.096991][    C1] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007ffabc38d590
[  134.096999][    C1] RDX: 0000000000080001 RSI: 00007ffabc4136c8 RDI: 00000000ffffff9c
[  134.097006][    C1] RBP: 00007ffabc4136c8 R08: 0000000000000000 R09: 0000000000000000
[  134.097013][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  134.097020][    C1] R13: 00007fff7a991c70 R14: 0000000000020b0c R15: 00007fff7a9921e0
[  134.097032][    C1]  </TASK>
[  134.097036][    C1] 
[  134.317723][    C1] Allocated by task 9871:
[  134.319549][    C1]  kasan_save_track+0x3e/0x80
[  134.321579][    C1]  __kasan_slab_alloc+0x6c/0x80
[  134.323653][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  134.325935][    C1]  xfrm_state_alloc+0x24/0x2f0
[  134.327939][    C1]  xfrm_add_sa+0x17d1/0x4070
[  134.329834][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  134.331882][    C1]  netlink_rcv_skb+0x208/0x470
[  134.333909][    C1]  xfrm_netlink_rcv+0x79/0x90
[  134.335895][    C1]  netlink_unicast+0x82f/0x9e0
[  134.337912][    C1]  netlink_sendmsg+0x805/0xb30
[  134.339894][    C1]  __sock_sendmsg+0x21c/0x270
[  134.341845][    C1]  ____sys_sendmsg+0x505/0x830
[  134.343898][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  134.345853][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  134.347932][    C1]  do_syscall_64+0xfa/0x3b0
[  134.349888][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.352375][    C1] 
[  134.353406][    C1] Freed by task 10:
[  134.355035][    C1]  kasan_save_track+0x3e/0x80
[  134.357086][    C1]  kasan_save_free_info+0x46/0x50
[  134.359246][    C1]  __kasan_slab_free+0x5b/0x80
[  134.361251][    C1]  kmem_cache_free+0x18f/0x400
[  134.363271][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  134.365428][    C1]  process_scheduled_works+0xae1/0x17b0
[  134.367825][    C1]  worker_thread+0x8a0/0xda0
[  134.369811][    C1]  kthread+0x711/0x8a0
[  134.371577][    C1]  ret_from_fork+0x439/0x7d0
[  134.373525][    C1]  ret_from_fork_asm+0x1a/0x30
[  134.375499][    C1] 
[  134.376513][    C1] The buggy address belongs to the object at ffff888028114480
[  134.376513][    C1]  which belongs to the cache xfrm_state of size 928
[  134.382090][    C1] The buggy address is located 816 bytes inside of
[  134.382090][    C1]  freed 928-byte region [ffff888028114480, ffff888028114820)
[  134.387639][    C1] 
[  134.388661][    C1] The buggy address belongs to the physical page:
[  134.391323][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028115b00 pfn:0x28114
[  134.395521][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  134.399012][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  134.402177][    C1] page_type: f5(slab)
[  134.403860][    C1] raw: 00fff00000000040 ffff88801db493c0 dead000000000122 0000000000000000
[  134.407413][    C1] raw: ffff888028115b00 00000000800e000c 00000000f5000000 0000000000000000
[  134.410947][    C1] head: 00fff00000000040 ffff88801db493c0 dead000000000122 0000000000000000
[  134.414540][    C1] head: ffff888028115b00 00000000800e000c 00000000f5000000 0000000000000000
[  134.418125][    C1] head: 00fff00000000002 ffffea0000a04501 00000000ffffffff 00000000ffffffff
[  134.421786][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  134.425419][    C1] page dumped because: kasan: bad access detected
[  134.428094][    C1] page_owner tracks the page as allocated
[  134.430397][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6037, tgid 6036 (syz.2.53), ts 62713636373, free_ts 62678052063
[  134.437907][    C1]  post_alloc_hook+0x240/0x2a0
[  134.439918][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  134.442247][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  134.444829][    C1]  alloc_pages_mpol+0x232/0x4a0
[  134.446803][    C1]  allocate_slab+0x8a/0x370
[  134.448640][    C1]  ___slab_alloc+0xbeb/0x1420
[  134.450609][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  134.452895][    C1]  xfrm_state_alloc+0x24/0x2f0
[  134.454884][    C1]  __find_acq_core+0x8a7/0x1c00
[  134.456930][    C1]  xfrm_find_acq+0x78/0xa0
[  134.458816][    C1]  pfkey_getspi+0x65d/0xee0
[  134.460772][    C1]  pfkey_sendmsg+0xbfe/0x1090
[  134.462768][    C1]  __sock_sendmsg+0x21c/0x270
[  134.464736][    C1]  ____sys_sendmsg+0x505/0x830
[  134.466708][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  134.468675][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  134.470721][    C1] page last free pid 5841 tgid 5841 stack trace:
[  134.473367][    C1]  __free_frozen_pages+0xbc4/0xd30
[  134.475403][    C1]  __slab_free+0x303/0x3c0
[  134.477227][    C1]  qlist_free_all+0x97/0x140
[  134.479162][    C1]  kasan_quarantine_reduce+0x148/0x160
[  134.481419][    C1]  __kasan_slab_alloc+0x22/0x80
[  134.483468][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  134.485776][    C1]  getname_flags+0xb8/0x540
[  134.487718][    C1]  __x64_sys_mkdirat+0x7a/0xa0
[  134.489763][    C1]  do_syscall_64+0xfa/0x3b0
[  134.491616][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.494123][    C1] 
[  134.495172][    C1] Memory state around the buggy address:
[  134.497487][    C1]  ffff888028114680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.500848][    C1]  ffff888028114700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.504217][    C1] >ffff888028114780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.507591][    C1]                                      ^
[  134.509942][    C1]  ffff888028114800: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  134.512885][    C1]  ffff888028114880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  134.515745][    C1] ==================================================================
[  134.519442][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  134.522292][    C1] CPU: 1 UID: 0 PID: 10110 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  134.526232][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.530384][    C1] Call Trace:
[  134.531766][    C1]  <IRQ>
[  134.532964][    C1]  dump_stack_lvl+0x99/0x250
[  134.534902][    C1]  ? __asan_memcpy+0x40/0x70
[  134.536913][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.539184][    C1]  ? __pfx__printk+0x10/0x10
[  134.541209][    C1]  vpanic+0x281/0x750
[  134.542946][    C1]  ? __pfx_vpanic+0x10/0x10
[  134.544877][    C1]  ? irqentry_exit+0x74/0x90
[  134.546852][    C1]  panic+0xb9/0xc0
[  134.548489][    C1]  ? __pfx_panic+0x10/0x10
[  134.550376][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  134.552888][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  134.555453][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  134.557641][    C1]  check_panic_on_warn+0x89/0xb0
[  134.559776][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  134.561950][    C1]  end_report+0x78/0x160
[  134.563735][    C1]  kasan_report+0x129/0x150
[  134.565690][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  134.567895][    C1]  xfrm_state_find+0x2cf2/0x5400
[  134.570018][    C1]  ? __lock_acquire+0xab9/0xd20
[  134.572051][    C1]  ? unwind_next_frame+0xa5/0x2390
[  134.574208][    C1]  ? xfrm_state_find+0x1da/0x5400
[  134.576302][    C1]  ? __pfx_xfrm_state_find+0x10/0x10
[  134.578499][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  134.581116][    C1]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  134.583609][    C1]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  134.586371][    C1]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  134.588810][    C1]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  134.591383][    C1]  ? xfrm_expand_policies+0x41f/0x6a0
[  134.593735][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  134.596031][    C1]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  134.598390][    C1]  ? dst_cache_get+0x10e/0x5b0
[  134.600489][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  134.602585][    C1]  tipc_udp_xmit+0x1c3/0xb60
[  134.604578][    C1]  ? tipc_udp_xmit+0xa4/0xb60
[  134.606529][    C1]  ? __pfx_tipc_udp_xmit+0x10/0x10
[  134.608646][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  134.610872][    C1]  ? __asan_memcpy+0x40/0x70
[  134.612885][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  134.615124][    C1]  tipc_udp_send_msg+0x27f/0x3f0
[  134.617245][    C1]  tipc_bearer_xmit_skb+0x2b3/0x400
[  134.619491][    C1]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  134.621715][    C1]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  134.624025][    C1]  tipc_disc_timeout+0x580/0x6d0
[  134.626002][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  134.628156][    C1]  call_timer_fn+0x17e/0x5f0
[  134.630081][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  134.632252][    C1]  ? call_timer_fn+0xbe/0x5f0
[  134.634254][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  134.636385][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  134.638571][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.640755][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  134.643048][    C1]  __run_timer_base+0x61a/0x860
[  134.645113][    C1]  ? ktime_get+0x3e/0x1f0
[  134.646938][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  134.649139][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  134.651761][    C1]  run_timer_softirq+0xb7/0x180
[  134.653819][    C1]  handle_softirqs+0x286/0x870
[  134.655827][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  134.657763][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  134.660003][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  134.662160][    C1]  __irq_exit_rcu+0xca/0x1f0
[  134.664090][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  134.666265][    C1]  irq_exit_rcu+0x9/0x30
[  134.668021][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  134.670377][    C1]  </IRQ>
[  134.671657][    C1]  <TASK>
[  134.672928][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  134.675452][    C1] RIP: 0010:alloc_fd+0x61d/0x6c0
[  134.677487][    C1] Code: e8 38 c2 e6 ff 4d 0f ab 37 49 83 c4 08 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 7b bf e6 ff 48 c1 e3 03 49 03 1c 24 <48> 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 5e bf e6 ff 48
[  134.685369][    C1] RSP: 0018:ffffc900069f7d28 EFLAGS: 00000286
[  134.687910][    C1] RAX: 1ffff11021b5e9f1 RBX: ffff88803800f018 RCX: ffff888107748000
[  134.691212][    C1] RDX: 0000000000000000 RSI: 000000000000001f RDI: ffffffffffffffff
[  134.694483][    C1] RBP: dffffc0000000000 R08: ffff888037761627 R09: 1ffff11006eec2c4
[  134.697786][    C1] R10: dffffc0000000000 R11: ffffed1006eec2c5 R12: ffff88810daf4f88
[  134.701118][    C1] R13: 0000000000000000 R14: ffff88810daf4f98 R15: 000000000000001f
[  134.704320][    C1]  ? alloc_fd+0x5b3/0x6c0
[  134.706117][    C1]  do_sys_openat2+0xfc/0x1c0
[  134.708020][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  134.710171][    C1]  ? exc_page_fault+0x76/0xf0
[  134.712213][    C1]  ? do_user_addr_fault+0xc8a/0x1390
[  134.714486][    C1]  __x64_sys_openat+0x138/0x170
[  134.716514][    C1]  do_syscall_64+0xfa/0x3b0
[  134.718452][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.720727][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.723324][    C1]  ? exc_page_fault+0x9f/0xf0
[  134.725381][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.727869][    C1] RIP: 0033:0x7ffabc38d590
[  134.729718][    C1] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  134.737558][    C1] RSP: 002b:00007fff7a991bd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  134.740998][    C1] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007ffabc38d590
[  134.744328][    C1] RDX: 0000000000080001 RSI: 00007ffabc4136c8 RDI: 00000000ffffff9c
[  134.747597][    C1] RBP: 00007ffabc4136c8 R08: 0000000000000000 R09: 0000000000000000
[  134.750867][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  134.754144][    C1] R13: 00007fff7a991c70 R14: 0000000000020b0c R15: 00007fff7a9921e0
[  134.757529][    C1]  </TASK>
[  134.759600][    C1] Kernel Offset: disabled
[  134.761496][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:22:02  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8484af8c RBX=0000000000000002 RCX=ffff8880238b8000 RDX=0000000000000000
RSI=0000000000001622 RDI=0000000000001623 RBP=1ffff110223d99c3 RSP=ffffc90006c67870
R8 =ffff8880238b8000 R9 =0000000000000003 R10=000000000000000a R11=0000000000000002
R12=ffffc90006c67d00 R13=dffffc0000000000 R14=ffffffff8bdcff00 R15=ffff888111ecce18
RIP=ffffffff81bfadc1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f17d1b8e6c0 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000020c0 CR3=00000000374ca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f17d0fa7498 00007f17d0fa7470 XMM03=00007f17d0fa74a8 00007f17d0fa74a0
XMM04=00007f17d1b0d100 00007f17d0fa7460 XMM05=00007f17d0fa7478 00007f17d0fa74c0
XMM06=00007f17d0fa74b8 00007f17d0fa74b0 XMM07=00007f17d0fa74a8 00007f17d0fa74a0
XMM08=0000000000000000 00007f17d0e12f0f XMM09=0000000000000000 00007f17d0e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df990
R8 =ffff888106880237 R9 =1ffff11020d10046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad78fe R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555559943500 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffabc3b69c0 CR3=000000011b6e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff0000000000ff 000000ff00000000 XMM05=0000000000000000 00007ffabc412e7b
XMM06=0000000000000000 00007ffabc412e75 XMM07=0000000000000000 00007ffabc412e89
XMM08=0000000000000000 00007ffabc412f0f XMM09=0000000000000000 00007ffabc412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
