last executing test programs:

309.068021ms ago: executing program 1 (id=1186):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0xffff7fff}, &(0x7f0000000340)=0x8)

308.896189ms ago: executing program 0 (id=1187):
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {0xa}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x70}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048880}, 0x24040884)

256.530799ms ago: executing program 1 (id=1189):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x0, 0x0, 0x0, {0x81, 0x0, 0x0, 0xd85}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x84040}, 0x0)

256.262222ms ago: executing program 0 (id=1190):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x80)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0)

256.000163ms ago: executing program 2 (id=1191):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xd, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)

255.730922ms ago: executing program 1 (id=1192):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x9d}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)

199.461789ms ago: executing program 2 (id=1193):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000000", 0x41d)

199.146902ms ago: executing program 1 (id=1194):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

199.060022ms ago: executing program 2 (id=1195):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4)

139.627428ms ago: executing program 0 (id=1196):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000000a01080000000000000000070000000900010073797a30000000000c00044000000000000000044c00060098d560227defe8a9e949f23891071949edba7a5b59dc884427bff96fac71f2db1e12bcef82bf040f716d96376fac5d28236b656fa5044c44e4dd9a2b37a2fe55337e1029dd978eb454000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000440ffffff"], 0x17c}}, 0x0)

139.300555ms ago: executing program 2 (id=1197):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_extract_tcp_res(0x0, 0xa3a, 0x5)

138.882758ms ago: executing program 1 (id=1198):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x308, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2f4, 0x1, [@m_ife={0x90, 0xb, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x5}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x31, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee70038b3509"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x13c, 0x14, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x80000001, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10080, 0xffffffffffffffff, 0x48fa, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x3e}}]}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xb4, 0x9, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f3, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x3, 0x7fb}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x408, 0x6, 0x5, 0x5, 0x69e}}, @TCA_ACT_BPF_FD={0x8}]}, {0x29, 0x6, "a09e88b2fa7e2ad0dddad3cdaa9b726cf5b56034a46fe4468bd19b5780d1bd141230a65f0d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x70, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x41, 0x6, "d53a6627b5c2b2c1126462fd280ec461bb61d2323e41566a3eaee195a84bb37143552068db91606b387f2034bf05bca0b1755e60be368d21ecb0372aa9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

138.430115ms ago: executing program 1 (id=1199):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)

138.228176ms ago: executing program 0 (id=1200):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0})

77.943888ms ago: executing program 2 (id=1201):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_LINK={0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

77.749178ms ago: executing program 0 (id=1202):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x2}]}}]}, 0xa4}}, 0x0)

77.515705ms ago: executing program 0 (id=1203):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="98a591c63a6efdecc4194d99634ff4eb90c266e83fff7dfbd3568c030612b423a36dbc", 0x23}, {&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b7932af43ba88cd499a6c421696d57ff38d5231dc71", 0x61}, {&(0x7f0000000100)="8d25ca2a98879e57578c3d652f5cf57f904b471f18c14b4d786c4ae155bee597b14455173e5580fb3f47c2e329b126d05465fb165f089b0314439ebfa420", 0x3e}], 0x3, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

0s ago: executing program 2 (id=1204):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x50, 0x3, 0x6, 0x20}, {0x6, 0x99, 0xff, 0x2}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x2, 0x0, 0x14, 0x5}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x28, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x1, 0x0, 0x8, {[@timestamp={0x8, 0xa, 0xe, 0xbb}]}}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea827d03e67140c89ceaaad28c"}}}}, 0xfce)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16979' (ED25519) to the list of known hosts.
syzkaller login: [   40.783109][ T5756] cgroup: Unknown subsys name 'net'
[   40.907525][ T5756] cgroup: Unknown subsys name 'cpuset'
[   40.911110][ T5756] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.140058][ T5756] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.528893][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.533656][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.536373][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.538872][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.541696][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.544292][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.547359][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.550101][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.552988][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.555917][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.558301][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.564640][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.568285][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.570898][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.580367][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.753200][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   45.828876][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   45.868662][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.871409][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.873843][ T5818] bridge_slave_0: entered allmulticast mode
[   45.877310][ T5818] bridge_slave_0: entered promiscuous mode
[   45.902192][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.904619][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.907207][ T5818] bridge_slave_1: entered allmulticast mode
[   45.909930][ T5818] bridge_slave_1: entered promiscuous mode
[   45.949324][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.957020][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.960155][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.962594][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.965570][ T5822] bridge_slave_0: entered allmulticast mode
[   45.968304][ T5822] bridge_slave_0: entered promiscuous mode
[   45.971798][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.974180][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.977389][ T5822] bridge_slave_1: entered allmulticast mode
[   45.980093][ T5822] bridge_slave_1: entered promiscuous mode
[   45.982969][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   46.017005][ T5818] team0: Port device team_slave_0 added
[   46.034376][ T5818] team0: Port device team_slave_1 added
[   46.041203][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.052438][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.082736][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.086154][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.094199][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.099645][ T5822] team0: Port device team_slave_0 added
[   46.102018][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.104438][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.113044][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.131280][ T5822] team0: Port device team_slave_1 added
[   46.143298][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.146075][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.148499][ T5823] bridge_slave_0: entered allmulticast mode
[   46.151209][ T5823] bridge_slave_0: entered promiscuous mode
[   46.155498][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.158086][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.160439][ T5823] bridge_slave_1: entered allmulticast mode
[   46.163320][ T5823] bridge_slave_1: entered promiscuous mode
[   46.180718][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.182972][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.191147][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.211391][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.213692][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.222663][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.228576][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.243047][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.249518][ T5818] hsr_slave_0: entered promiscuous mode
[   46.251819][ T5818] hsr_slave_1: entered promiscuous mode
[   46.285300][ T5823] team0: Port device team_slave_0 added
[   46.305096][ T5823] team0: Port device team_slave_1 added
[   46.309919][ T5822] hsr_slave_0: entered promiscuous mode
[   46.312251][ T5822] hsr_slave_1: entered promiscuous mode
[   46.314431][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   46.316826][ T5822] Cannot create hsr debugfs directory
[   46.343635][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.346249][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.354489][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.359176][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.361457][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.369862][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.437045][ T5823] hsr_slave_0: entered promiscuous mode
[   46.439391][ T5823] hsr_slave_1: entered promiscuous mode
[   46.441547][ T5823] debugfs: 'hsr0' already exists in 'hsr'
[   46.443456][ T5823] Cannot create hsr debugfs directory
[   46.556241][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.562072][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.575592][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.580630][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.618545][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.627584][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.634115][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.636584][ T5818] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.639280][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.641568][ T5818] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.652897][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.658209][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.701794][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.709505][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.714232][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.719415][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.724133][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.726503][ T5822] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.728884][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.731140][ T5822] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.759010][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.761419][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.763795][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.766117][ T5823] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.788310][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.817858][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   46.821783][  T995] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.825589][  T995] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.829200][  T995] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.832073][  T995] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.840749][  T995] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.843544][  T995] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.859089][  T995] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.861443][  T995] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.870351][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.873975][  T995] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.876433][  T995] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.891226][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.919156][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   46.923733][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   46.933309][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.935633][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.940441][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.942823][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.949923][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.952344][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.982620][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.985107][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.006152][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.047342][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.087233][ T5818] veth0_vlan: entered promiscuous mode
[   47.093982][ T5818] veth1_vlan: entered promiscuous mode
[   47.123641][ T5818] veth0_macvtap: entered promiscuous mode
[   47.146136][ T5818] veth1_macvtap: entered promiscuous mode
[   47.157738][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.163993][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.176805][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.186031][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.189232][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.192057][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.199853][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.212509][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.252966][ T5822] veth0_vlan: entered promiscuous mode
[   47.258927][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.263162][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.271210][ T5822] veth1_vlan: entered promiscuous mode
[   47.294419][ T5823] veth0_vlan: entered promiscuous mode
[   47.298420][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.300938][ T5823] veth1_vlan: entered promiscuous mode
[   47.300980][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.324531][ T5822] veth0_macvtap: entered promiscuous mode
[   47.338046][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.338507][ T5823] veth0_macvtap: entered promiscuous mode
[   47.347616][ T5822] veth1_macvtap: entered promiscuous mode
[   47.366305][ T5823] veth1_macvtap: entered promiscuous mode
[   47.377151][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.393165][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.404073][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.410977][ T5696] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.414007][ T5696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.424144][ T5696] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.437997][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.449019][ T5696] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.459492][ T5696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.470942][ T5696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.480541][ T5696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.489934][ T5696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.549544][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.552196][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.564650][ T5895] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   47.569315][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.571922][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.575846][ T5895] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7'.
[   47.605437][ T5820] Bluetooth: hci0: command tx timeout
[   47.605523][ T5825] Bluetooth: hci2: command tx timeout
[   47.607484][ T5820] Bluetooth: hci1: command tx timeout
[   47.662348][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.669535][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.691118][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.693752][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.763266][ T5903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   47.828846][ T5909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10'.
[   47.925171][ T5918] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET)
[   48.102880][ T5938] delete_channel: no stack
[   48.110995][ T5937] sctp: [Deprecated]: syz.0.24 (pid 5937) Use of struct sctp_assoc_value in delayed_ack socket option.
[   48.110995][ T5937] Use struct sctp_sack_info instead
[   48.518173][ T5983] netlink: 212892 bytes leftover after parsing attributes in process `syz.2.39'.
[   48.536666][ T5696] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   49.359549][ T6058] netlink: 'syz.1.61': attribute type 3 has an invalid length.
[   49.362013][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'.
[   49.396778][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.409583][ T6060] Zero length message leads to an empty skb
[   49.437634][ T6067] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[   49.469133][ T6071] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   49.593147][ T5852] IPVS: starting estimator thread 0...
[   49.637584][ T6090] syz.1.74 uses old SIOCAX25GETINFO
[   49.686422][   T54] Bluetooth: hci1: command tx timeout
[   49.695144][ T6085] IPVS: using max 80 ests per chain, 192000 per kthread
[   49.697447][   T54] Bluetooth: hci2: command tx timeout
[   49.699204][   T54] Bluetooth: hci0: command tx timeout
[   49.736059][ T6094] syz_tun: entered allmulticast mode
[   49.747211][ T6098] netlink: 'syz.1.79': attribute type 6 has an invalid length.
[   49.752210][ T6094] dvmrp1: entered allmulticast mode
[   49.777629][ T6093] syz_tun: left allmulticast mode
[   49.884028][ T6110] dvmrp8: entered allmulticast mode
[   49.907740][ T6109] dvmrp8: left allmulticast mode
[   50.051096][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'.
[   50.053874][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'.
[   50.218244][ T6150] netlink: 'syz.1.101': attribute type 5 has an invalid length.
[   50.282758][ T6158] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[   50.343788][ T6162] batadv_slave_0: entered promiscuous mode
[   50.350064][ T6161] batadv_slave_0: left promiscuous mode
[   50.602741][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'.
[   50.609732][ T6191] bridge_slave_1: left allmulticast mode
[   50.611583][ T6191] bridge_slave_1: left promiscuous mode
[   50.616915][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.622619][ T6191] bridge_slave_0: left allmulticast mode
[   50.624349][ T6191] bridge_slave_0: left promiscuous mode
[   50.635223][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.981984][ T6218] syz_tun: entered allmulticast mode
[   50.985658][ T6217] syz_tun: left allmulticast mode
[   51.635039][ T6268] delete_channel: no stack
[   51.766805][   T54] Bluetooth: hci2: command tx timeout
[   51.767061][ T5825] Bluetooth: hci1: command tx timeout
[   51.769087][ T5820] Bluetooth: hci0: command tx timeout
[   51.804312][ T6288] Driver unsupported XDP return value 0 on prog  (id 19) dev N/A, expect packet loss!
[   52.187303][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'.
[   52.395468][ T6351] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   52.533457][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'.
[   52.766586][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'.
[   52.773051][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.215'.
[   53.364250][ T6453] warning: `syz.1.238' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.432295][ T6455] netem: change failed
[   53.526322][ T6457] syzkaller1: entered promiscuous mode
[   53.528417][ T6457] syzkaller1: entered allmulticast mode
[   53.845578][ T5820] Bluetooth: hci0: command tx timeout
[   53.846039][ T5825] Bluetooth: hci2: command tx timeout
[   53.856486][ T5825] Bluetooth: hci1: command tx timeout
[   53.862792][ T6477] netlink: 36 bytes leftover after parsing attributes in process `syz.2.249'.
[   54.136614][ T6505] netlink: 'syz.0.264': attribute type 1 has an invalid length.
[   54.144879][ T6505] netlink: 224 bytes leftover after parsing attributes in process `syz.0.264'.
[   54.212332][ T6511] netlink: 'syz.1.268': attribute type 33 has an invalid length.
[   54.215160][ T6511] netlink: 152 bytes leftover after parsing attributes in process `syz.1.268'.
[   54.219538][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'.
[   54.246200][ T6515] netlink: 'syz.0.269': attribute type 83 has an invalid length.
[   54.406065][ T6527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.275'.
[   54.577086][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'.
[   54.597530][ T5850] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   54.600802][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'.
[   54.603922][ T5850] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   54.615254][ T5850] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   54.619087][ T5850] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   55.310645][ T6562] lo: entered allmulticast mode
[   55.312540][ T6562] lo: left allmulticast mode
[   55.427554][ T6567] netlink: 60 bytes leftover after parsing attributes in process `syz.2.292'.
[   55.729986][ T6589] netlink: 'syz.0.301': attribute type 10 has an invalid length.
[   55.840739][ T6596] veth5: entered promiscuous mode
[   56.216769][    T9] cfg80211: failed to load regulatory.db
[   56.559961][ T6658] netlink: 'syz.2.335': attribute type 12 has an invalid length.
[   56.611614][ T6666] tipc: Invalid UDP bearer configuration
[   56.611641][ T6666] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   56.705869][ T6680] netlink: 'syz.2.344': attribute type 16 has an invalid length.
[   57.073629][ T6709] Bluetooth: MGMT ver 1.23
[   57.906457][ T6723] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.920355][ T6724] 8021q: adding VLAN 0 to HW filter on device batadv1
[   57.923515][ T6724] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   57.927485][ T6724] team0: Failed to send options change via netlink (err -105)
[   57.930609][ T6724] team0: Port device batadv1 added
[   57.974648][ T6732] netlink: 'syz.1.367': attribute type 1 has an invalid length.
[   57.988578][ T6723] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.054601][ T6723] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.132647][ T6723] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.224056][ T5850] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.269067][ T5696] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.271833][ T5696] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.274579][ T5696] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.428554][ T6764] netlink: 'syz.2.384': attribute type 1 has an invalid length.
[   58.431091][ T6764] __nla_validate_parse: 11 callbacks suppressed
[   58.431098][ T6764] netlink: 208 bytes leftover after parsing attributes in process `syz.2.384'.
[   58.599763][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'.
[   58.952071][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'.
[   58.959866][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.962965][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.068354][ T6835] veth3: entered promiscuous mode
[   59.128095][ T5820] Bluetooth: hci0: command 0x0c1a tx timeout
[   59.130577][ T5825] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   59.183648][ T6848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.213686][ T6856] pimreg: entered allmulticast mode
[   59.219406][ T6856] pimreg: left allmulticast mode
[   59.237255][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv2
[   59.240142][ T6857] team0: Failed to send port change of device batadv2 via netlink (err -105)
[   59.243105][ T6857] team0: Failed to send options change via netlink (err -105)
[   59.247290][ T6857] team0: Port device batadv2 added
[   59.264481][ T6848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.329209][ T6848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.390590][ T6848] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.477007][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.437'.
[   59.521475][ T5696] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.539335][ T5696] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.542099][ T5696] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.559052][ T5696] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.638733][ T6895] netlink: 104 bytes leftover after parsing attributes in process `syz.2.445'.
[   59.670171][ T6898] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.446'.
[   59.750158][ T6907] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.451'.
[   59.753857][ T6907] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   59.762300][ T6907] openvswitch: netlink: Message has 1 unknown bytes.
[   59.828281][ T6912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   59.831733][ T6912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.862497][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv1
[   59.872771][ T6918] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   59.876733][ T6918] team0: Failed to send options change via netlink (err -105)
[   59.879319][ T6918] team0: Port device batadv1 added
[   59.886183][ T6921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.457'.
[   59.906224][ T6912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   59.909518][ T6912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.957552][ T6921] smc: net device bond0 applied user defined pnetid SYZ2
[   59.960120][ T6921] smc: net device bond0 erased user defined pnetid SYZ2
[   59.991153][ T6912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   59.996813][ T6912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.031851][ T6912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   60.035907][ T6912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.101480][ T5850] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   60.104242][ T5850] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.114373][ T5850] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   60.117129][ T5850] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.133243][ T5850] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   60.136734][ T5850] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.147899][ T5850] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   60.150549][ T5850] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.248944][ T6953] tipc: Started in network mode
[   60.250639][ T6953] tipc: Node identity de2a0a13d1c, cluster identity 4711
[   60.254152][ T6953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.269972][ T6953] syzkaller0: entered promiscuous mode
[   60.271811][ T6953] syzkaller0: entered allmulticast mode
[   60.283418][ T6953] tipc: Resetting bearer <eth:syzkaller0>
[   60.290340][ T6957] netlink: 'syz.1.474': attribute type 1 has an invalid length.
[   60.293342][ T6952] tipc: Resetting bearer <eth:syzkaller0>
[   60.300792][ T6952] tipc: Disabling bearer <eth:syzkaller0>
[   60.352141][ T6945] infiniband syz1: set active
[   60.357965][ T6945] infiniband syz1: added bond0
[   60.400666][ T6945] RDS/IB: syz1: added
[   60.402313][ T6945] smc: adding ib device syz1 with port count 1
[   60.404445][ T6945] smc:    ib device syz1 port 1 has pnetid 
[   60.466408][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'.
[   60.875468][ T5850] syzkaller0: tun_net_xmit 76
[   60.878495][ T5850] syzkaller0: tun_net_xmit 48
[   60.884352][ T7006] syzkaller0: create flow: hash 3021079292 index 1
[   60.905029][   T24] syzkaller0: tun_net_xmit 76
[   61.087292][ T7011] syzkaller0: delete flow: hash 3021079292 index 1
[   61.137295][ T7019] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   62.096374][ T7074] netlink: 64 bytes leftover after parsing attributes in process `syz.0.526'.
[   62.223877][ T7091] tls_set_device_offload_rx: netdev not found
[   62.320383][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.323069][ T7101] bridge0: port 2(bridge_slave_1) entered listening state
[   62.325580][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.328377][ T7101] bridge0: port 1(bridge_slave_0) entered listening state
[   62.338379][ T7101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.636518][ T7138] __nla_validate_parse: 1 callbacks suppressed
[   63.636528][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'.
[   63.648930][ T7137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.776692][ T7150] dvmrp1: left allmulticast mode
[   63.968830][ T7173] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.571'.
[   64.020498][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'.
[   64.242945][ T7202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.428435][ T7228] openvswitch: netlink: Missing valid actions attribute.
[   64.430783][ T7228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.434190][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'.
[   64.478809][ T7232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.482128][ T7234] netlink: 'syz.2.601': attribute type 10 has an invalid length.
[   64.494571][ T7234] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.503130][ T7234] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   64.518646][ T7234] netlink: 'syz.2.601': attribute type 10 has an invalid length.
[   64.521307][ T7234] netlink: 40 bytes leftover after parsing attributes in process `syz.2.601'.
[   64.524269][ T7234] batadv0: entered promiscuous mode
[   64.526350][ T7234] batadv0: entered allmulticast mode
[   64.529383][ T7234] bond0: (slave batadv0): Releasing backup interface
[   64.540098][ T7234] bridge0: port 3(batadv0) entered blocking state
[   64.544023][ T7234] bridge0: port 3(batadv0) entered disabled state
[   64.592453][ T7240] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.603'.
[   64.725176][ T5696] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   64.728466][ T5696] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   64.835470][ T7256] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.869649][ T7256] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.890276][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'.
[   64.893335][ T7258] netlink: 'syz.2.610': attribute type 5 has an invalid length.
[   64.896138][ T7258] netlink: 48 bytes leftover after parsing attributes in process `syz.2.610'.
[   64.902288][ T7258] geneve2: entered promiscuous mode
[   64.904047][ T7258] geneve2: entered allmulticast mode
[   64.907093][ T5696] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[   64.910422][ T5696] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[   64.918761][ T7256] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.922050][ T7256] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   64.988884][ T7256] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.992087][ T7256] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   65.061842][ T5850] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   65.064625][ T5850] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   65.073082][ T5696] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   65.076167][ T5696] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   65.083451][ T5696] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   65.086564][ T5696] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   65.093431][ T5696] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   65.096504][ T5696] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   65.177061][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'.
[   65.226461][ T7270] syzkaller0: entered promiscuous mode
[   65.228351][ T7270] syzkaller0: entered allmulticast mode
[   66.043271][ T7272] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   66.901040][ T7327] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = 3, id = 0
[   66.978982][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'.
[   67.190341][ T7364] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.266252][ T7373] netlink: 'syz.1.663': attribute type 2 has an invalid length.
[   67.268807][ T7373] netlink: 'syz.1.663': attribute type 8 has an invalid length.
[   67.298468][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout
[   67.515901][ T7398] netlink: 'syz.1.675': attribute type 1 has an invalid length.
[   67.726121][ T7429] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   67.801675][ T7435] syz.1.693 (7435) used greatest stack depth: 19992 bytes left
[   67.962370][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.242366][ T7491] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   68.259086][ T7491] bridge_slave_0: left allmulticast mode
[   68.260917][ T7491] bridge_slave_0: left promiscuous mode
[   68.262847][ T7491] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.267049][ T7491] bridge_slave_1: left allmulticast mode
[   68.268970][ T7491] bridge_slave_1: left promiscuous mode
[   68.270891][ T7491] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.276654][ T7491] bond0: (slave bond_slave_0): Releasing backup interface
[   68.281254][ T7491] bond0: (slave bond_slave_1): Releasing backup interface
[   68.290211][ T7491] team0: Port device team_slave_0 removed
[   68.296144][ T7491] team0: Port device team_slave_1 removed
[   68.298348][ T7491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.300875][ T7491] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.304129][ T7491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.308443][ T7491] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.317501][ T7491] team0: Port device batadv1 removed
[   68.352387][ T7491] netlink: 'syz.0.719': attribute type 10 has an invalid length.
[   68.356159][ T7491] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   68.363943][ T7491] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.368768][ T7491] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   68.385248][ T7491] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   68.388383][ T7491] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   68.458428][ T7498] tipc: Started in network mode
[   68.460125][ T7498] tipc: Node identity ce47dc9664ca, cluster identity 4711
[   68.462625][ T7498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.468138][ T7498] syzkaller0: entered promiscuous mode
[   68.470081][ T7498] syzkaller0: entered allmulticast mode
[   68.479013][ T7498] tipc: Resetting bearer <eth:syzkaller0>
[   68.481514][ T7497] tipc: Resetting bearer <eth:syzkaller0>
[   68.487860][ T7497] tipc: Disabling bearer <eth:syzkaller0>
[   68.786759][ T7516] __nla_validate_parse: 8 callbacks suppressed
[   68.786771][ T7516] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.731'.
[   68.916995][ T7530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   68.919620][ T7530] IPv6: NLM_F_CREATE should be set when creating new route
[   68.969356][ T7533] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.972928][ T7533] bridge0: port 4(bond1) entered blocking state
[   68.976368][ T7533] bridge0: port 4(bond1) entered disabled state
[   68.978621][ T7533] bond1: entered allmulticast mode
[   68.981670][ T7533] bond1: entered promiscuous mode
[   68.983763][ T7533] bridge0: port 4(bond1) entered blocking state
[   68.985954][ T7533] bridge0: port 4(bond1) entered forwarding state
[   69.019234][ T7542] netlink: 240 bytes leftover after parsing attributes in process `syz.2.742'.
[   69.022619][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'.
[   69.914467][ T7556] syzkaller0: entered promiscuous mode
[   69.917807][ T7556] syzkaller0: entered allmulticast mode
[   69.938417][ T7561] netlink: 96 bytes leftover after parsing attributes in process `syz.0.749'.
[   69.944606][ T7561] vlan2: entered allmulticast mode
[   69.947617][ T7561] gretap0: entered allmulticast mode
[   70.011503][   T68] bridge0: port 4(bond1) entered disabled state
[   70.017378][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'.
[   70.061267][ T7571] bridge_slave_0: entered promiscuous mode
[   70.753278][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'.
[   71.610837][ T7620] netlink: 'syz.2.778': attribute type 6 has an invalid length.
[   71.639658][ T7624] netlink: 44 bytes leftover after parsing attributes in process `syz.0.780'.
[   71.737174][ T7636] netlink: 'syz.0.786': attribute type 1 has an invalid length.
[   71.740290][ T7636] netlink: 244 bytes leftover after parsing attributes in process `syz.0.786'.
[   71.896061][ T7656] netlink: 172 bytes leftover after parsing attributes in process `syz.2.796'.
[   71.978540][ T7660] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[   72.230282][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.807'.
[   72.718539][ T7734] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.725033][ T7734] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.833905][ T5850] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.844603][ T5850] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.848214][ T5850] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.850980][ T5850] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.870376][ T5850] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.874097][ T5850] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.882468][ T5850] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   72.890463][ T5850] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.894174][  T429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.897112][  T429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.231127][ T7791] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[   73.382147][ T7811] netlink: 'syz.2.864': attribute type 1 has an invalid length.
[   73.390031][ T7811] netlink: 'syz.2.864': attribute type 4 has an invalid length.
[   73.647182][ T7845] syzkaller1: entered promiscuous mode
[   73.653525][ T7845] syzkaller1: entered allmulticast mode
[   74.035896][ T7878] syzkaller1: entered promiscuous mode
[   74.037847][ T7878] syzkaller1: entered allmulticast mode
[   74.730391][ T7896] lo speed is unknown, defaulting to 1000
[   74.732545][ T7896] lo speed is unknown, defaulting to 1000
[   74.736319][ T7896] lo speed is unknown, defaulting to 1000
[   74.740143][ T7896] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   74.749434][ T7896] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   74.763601][ T7896] lo speed is unknown, defaulting to 1000
[   74.766910][ T7896] lo speed is unknown, defaulting to 1000
[   74.769656][ T7896] lo speed is unknown, defaulting to 1000
[   74.851391][ T7902] veth0_to_team: entered promiscuous mode
[   74.902681][ T7906] __nla_validate_parse: 10 callbacks suppressed
[   74.902693][ T7906] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.903'.
[   74.948659][ T7914] netlink: 45 bytes leftover after parsing attributes in process `syz.0.907'.
[   75.202160][ T7950] netlink: 'syz.0.925': attribute type 4 has an invalid length.
[   75.212244][ T5852] lo speed is unknown, defaulting to 1000
[   75.214241][ T5852] syz2: Port: 1 Link DOWN
[   75.217069][ T7950] netlink: 'syz.0.925': attribute type 4 has an invalid length.
[   75.221465][ T5852] lo speed is unknown, defaulting to 1000
[   75.227704][ T5852] syz2: Port: 1 Link ACTIVE
[   75.280403][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'.
[   75.283357][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'.
[   75.296889][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'.
[   75.299829][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'.
[   75.307235][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'.
[   75.310275][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'.
[   75.375606][ T7974] netlink: 'syz.0.936': attribute type 12 has an invalid length.
[   75.490681][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'.
[   75.493799][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.943'.
[   75.497173][ T7988] netlink: 'syz.1.943': attribute type 6 has an invalid length.
[   75.634391][ T7999] netlink: 'syz.2.948': attribute type 1 has an invalid length.
[   76.237577][ T8077] netlink: 'syz.1.984': attribute type 10 has an invalid length.
[   76.390371][ T8095] batadv_slave_1: entered promiscuous mode
[   76.430846][ T8099] netlink: 'syz.0.995': attribute type 39 has an invalid length.
[   76.610418][ T8115] netlink: 'syz.1.1003': attribute type 1 has an invalid length.
[   76.737926][ T8135] openvswitch: netlink: Missing key (keys=40, expected=80)
[   77.152976][ T8176] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.160714][ T8176] 8021q: adding VLAN 0 to HW filter on device batadv2
[   77.164333][ T8176] bond2: (slave batadv2): making interface the new active one
[   77.169653][ T8176] bond2: (slave batadv2): Enslaving as an active interface with an up link
[   77.273716][ T8189] bridge2: entered promiscuous mode
[   77.277528][ T8189] macsec1: entered promiscuous mode
[   77.279365][ T8189] macsec1: entered allmulticast mode
[   77.281162][ T8189] bridge2: entered allmulticast mode
[   77.284299][ T8189] bridge2: port 1(macsec1) entered blocking state
[   77.287466][ T8189] bridge2: port 1(macsec1) entered disabled state
[   77.291953][ T8189] bridge2: left allmulticast mode
[   77.293853][ T8189] bridge2: left promiscuous mode
[   77.451181][ T8202] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   77.457298][ T8202] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   77.665373][ T8210] lo speed is unknown, defaulting to 1000
[   78.046132][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   78.056029][   T24] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   78.300363][ T8270] bridge0: port 1(vlan3) entered blocking state
[   78.302562][ T8270] bridge0: port 1(vlan3) entered disabled state
[   78.306473][ T8270] vlan3: entered allmulticast mode
[   78.308189][ T8270] bridge0: entered allmulticast mode
[   78.313075][ T8270] vlan3: left allmulticast mode
[   78.314673][ T8270] bridge0: left allmulticast mode
[   78.612550][ T8303] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   78.691395][ T8317] validate_nla: 3 callbacks suppressed
[   78.691406][ T8317] netlink: 'syz.1.1092': attribute type 7 has an invalid length.
[   78.700022][ T8317] netlink: 'syz.1.1092': attribute type 8 has an invalid length.
[   78.830048][ T8329] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   79.327176][ T8379] tipc: Started in network mode
[   79.328821][ T8379] tipc: Node identity b2f856760f61, cluster identity 4711
[   79.335770][ T8379] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.338893][ T8379] syzkaller0: entered promiscuous mode
[   79.340956][ T8379] syzkaller0: entered allmulticast mode
[   79.356679][ T8379] tipc: Resetting bearer <eth:syzkaller0>
[   79.360351][ T8378] tipc: Resetting bearer <eth:syzkaller0>
[   79.371615][ T8378] tipc: Disabling bearer <eth:syzkaller0>
[   79.559641][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.562494][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.567836][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.573521][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.885807][ T8415] netlink: 'syz.2.1137': attribute type 5 has an invalid length.
[   79.919431][ T8417] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   80.278103][ T8467] netlink: 'syz.0.1160': attribute type 1 has an invalid length.
[   80.301157][ T8467] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.328893][ T8467] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.331504][ T8467] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   80.336704][ T8467] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   80.382529][ T8477] gretap1: entered promiscuous mode
[   80.396530][ T8477] bond3: (slave gretap1): making interface the new active one
[   80.400032][ T8477] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   80.432891][ T8467] macvlan2: entered promiscuous mode
[   80.438096][ T8467] macvlan2: entered allmulticast mode
[   80.442325][ T8467] bond3: entered promiscuous mode
[   80.445623][ T8467] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   80.459493][ T8467] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   80.472232][ T8467] bond3: left promiscuous mode
[   81.543832][ T8538] __nla_validate_parse: 30 callbacks suppressed
[   81.543845][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[   81.622345][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'.
[   81.715216][ T8556] batman_adv: batadv0: Adding interface: gretap1
[   81.718559][ T8556] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.728366][ T8556] batman_adv: batadv0: Interface activated: gretap1
[   81.765731][ T8563] syzkaller1: entered promiscuous mode
[   81.767609][ T8563] syzkaller1: entered allmulticast mode
[   81.813853][    C0] ==================================================================
[   81.816580][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[   81.819212][    C0] Write of size 8 at addr ffff88801fd944b0 by task syz.1.1199/8552
[   81.822548][    C0] 
[   81.823347][    C0] CPU: 0 UID: 0 PID: 8552 Comm: syz.1.1199 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[   81.823357][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.823362][    C0] Call Trace:
[   81.823367][    C0]  <IRQ>
[   81.823371][    C0]  dump_stack_lvl+0x189/0x250
[   81.823383][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[   81.823393][    C0]  ? rcu_is_watching+0x15/0xb0
[   81.823404][    C0]  ? __kasan_check_byte+0x12/0x40
[   81.823416][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.823422][    C0]  ? rcu_is_watching+0x15/0xb0
[   81.823432][    C0]  ? lock_release+0x4b/0x3e0
[   81.823442][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[   81.823449][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[   81.823457][    C0]  print_report+0xca/0x240
[   81.823467][    C0]  ? __xfrm_state_delete+0x696/0xca0
[   81.823477][    C0]  kasan_report+0x118/0x150
[   81.823487][    C0]  ? __xfrm_state_delete+0x696/0xca0
[   81.823498][    C0]  __xfrm_state_delete+0x696/0xca0
[   81.823509][    C0]  xfrm_timer_handler+0x18f/0xa00
[   81.823520][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[   81.823529][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   81.823538][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.823548][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   81.823556][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   81.823564][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[   81.823574][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[   81.823583][    C0]  __hrtimer_run_queues+0x52c/0xc60
[   81.823597][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   81.823606][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[   81.823618][    C0]  hrtimer_run_softirq+0x187/0x2b0
[   81.823625][    C0]  handle_softirqs+0x286/0x870
[   81.823635][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[   81.823645][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[   81.823655][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[   81.823664][    C0]  __irq_exit_rcu+0xca/0x1f0
[   81.823673][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[   81.823683][    C0]  irq_exit_rcu+0x9/0x30
[   81.823692][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   81.823701][    C0]  </IRQ>
[   81.823703][    C0]  <TASK>
[   81.823706][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   81.823714][    C0] RIP: 0010:finish_task_switch+0x26b/0x950
[   81.823724][    C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 df 31 e1 09 e8 2a 10 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[   81.823730][    C0] RSP: 0018:ffffc9000a6b6ef8 EFLAGS: 00000282
[   81.823738][    C0] RAX: 3771b7213782f300 RBX: 0000000000000000 RCX: 3771b7213782f300
[   81.823743][    C0] RDX: 0000000000000000 RSI: ffffffff8d9792aa RDI: ffffffff8be30a00
[   81.823747][    C0] RBP: ffffc9000a6b6f50 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e
[   81.823751][    C0] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: ffff888108f5b980
[   81.823784][    C0] R13: dffffc0000000000 R14: ffff888022ded640 R15: ffff88804b03ab18
[   81.823797][    C0]  ? finish_task_switch+0x266/0x950
[   81.823807][    C0]  __schedule+0x173f/0x4d30
[   81.823818][    C0]  ? is_bpf_text_address+0x292/0x2b0
[   81.823830][    C0]  ? kernel_text_address+0xa5/0xe0
[   81.823839][    C0]  ? preempt_schedule_notrace+0xd1/0x110
[   81.823848][    C0]  ? __kernel_text_address+0xd/0x40
[   81.823856][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   81.823865][    C0]  ? __pfx___schedule+0x10/0x10
[   81.823876][    C0]  preempt_schedule_notrace+0xd1/0x110
[   81.823885][    C0]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[   81.823895][    C0]  preempt_schedule_notrace_thunk+0x16/0x30
[   81.823904][    C0]  ? __page_table_check_zero+0xba/0x530
[   81.823916][    C0]  rcu_lockdep_current_cpu_online+0x107/0x120
[   81.823924][    C0]  rcu_read_lock_held+0x1e/0x50
[   81.823931][    C0]  page_ext_lookup+0xe7/0x180
[   81.823941][    C0]  ? __page_table_check_zero+0xba/0x530
[   81.823950][    C0]  __page_table_check_zero+0x18f/0x530
[   81.823960][    C0]  ? __reset_page_owner+0x148/0x1f0
[   81.823971][    C0]  free_unref_folios+0xc7a/0x14d0
[   81.823985][    C0]  folios_put_refs+0x559/0x640
[   81.823995][    C0]  ? __pfx_folios_put_refs+0x10/0x10
[   81.824003][    C0]  ? folio_batch_remove_exceptionals+0x18c/0x1f0
[   81.824011][    C0]  shmem_undo_range+0x49e/0x14b0
[   81.824022][    C0]  ? __pfx_shmem_undo_range+0x10/0x10
[   81.824033][    C0]  ? __lock_acquire+0xab9/0xd20
[   81.824048][    C0]  ? percpu_counter_add_batch+0xea/0x1e0
[   81.824060][    C0]  shmem_evict_inode+0x272/0xa70
[   81.824067][    C0]  ? inode_wait_for_writeback+0xf9/0x290
[   81.824076][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[   81.824082][    C0]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[   81.824090][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[   81.824098][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[   81.824104][    C0]  evict+0x504/0x9c0
[   81.824114][    C0]  ? __pfx_evict+0x10/0x10
[   81.824121][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[   81.824129][    C0]  ? _raw_spin_unlock+0x28/0x50
[   81.824140][    C0]  ? iput+0x6d8/0x9d0
[   81.824148][    C0]  __dentry_kill+0x209/0x660
[   81.824154][    C0]  ? dput+0x37/0x2b0
[   81.824160][    C0]  dput+0x19f/0x2b0
[   81.824166][    C0]  __fput+0x68e/0xa70
[   81.824176][    C0]  task_work_run+0x1d4/0x260
[   81.824184][    C0]  ? __pfx_task_work_run+0x10/0x10
[   81.824193][    C0]  do_exit+0x6b5/0x22e0
[   81.824202][    C0]  ? preempt_schedule_common+0x83/0xd0
[   81.824210][    C0]  ? preempt_schedule+0xae/0xc0
[   81.824218][    C0]  ? __pfx_do_exit+0x10/0x10
[   81.824226][    C0]  ? preempt_schedule_thunk+0x16/0x30
[   81.824236][    C0]  do_group_exit+0x21c/0x2d0
[   81.824244][    C0]  __x64_sys_exit_group+0x3f/0x40
[   81.824252][    C0]  x64_sys_call+0x21f7/0x2200
[   81.824259][    C0]  do_syscall_64+0xfa/0x3b0
[   81.824268][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.824277][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.824283][    C0]  ? exc_page_fault+0x9f/0xf0
[   81.824292][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.824298][    C0] RIP: 0033:0x7fa0e1d8ebe9
[   81.824304][    C0] Code: Unable to access opcode bytes at 0x7fa0e1d8ebbf.
[   81.824308][    C0] RSP: 002b:00007ffd9c238588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   81.824315][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa0e1d8ebe9
[   81.824319][    C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[   81.824323][    C0] RBP: 00007ffd9c2385ec R08: 000000039c23867f R09: 00000000000927c0
[   81.824327][    C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000171
[   81.824332][    C0] R13: 00000000000927c0 R14: 0000000000013e6d R15: 00007ffd9c238640
[   81.824338][    C0]  </TASK>
[   81.824341][    C0] 
[   82.032255][    C0] Allocated by task 6206:
[   82.033703][    C0]  kasan_save_track+0x3e/0x80
[   82.035278][    C0]  __kasan_slab_alloc+0x6c/0x80
[   82.036865][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   82.038681][    C0]  xfrm_state_alloc+0x24/0x2f0
[   82.040306][    C0]  __find_acq_core+0x8a7/0x1c00
[   82.041949][    C0]  xfrm_find_acq+0x78/0xa0
[   82.043454][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[   82.045157][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[   82.046775][    C0]  netlink_rcv_skb+0x208/0x470
[   82.048372][    C0]  xfrm_netlink_rcv+0x79/0x90
[   82.049943][    C0]  netlink_unicast+0x82f/0x9e0
[   82.051446][    C0]  netlink_sendmsg+0x805/0xb30
[   82.053014][    C0]  __sock_sendmsg+0x21c/0x270
[   82.054491][    C0]  ____sys_sendmsg+0x505/0x830
[   82.056013][    C0]  ___sys_sendmsg+0x21f/0x2a0
[   82.057536][    C0]  __x64_sys_sendmsg+0x19b/0x260
[   82.059163][    C0]  do_syscall_64+0xfa/0x3b0
[   82.060605][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.062474][    C0] 
[   82.063263][    C0] Freed by task 5285:
[   82.064503][    C0]  kasan_save_track+0x3e/0x80
[   82.066015][    C0]  kasan_save_free_info+0x46/0x50
[   82.067591][    C0]  __kasan_slab_free+0x62/0x70
[   82.069084][    C0]  kmem_cache_free+0x18f/0x400
[   82.070635][    C0]  xfrm_state_gc_task+0x518/0x6a0
[   82.072250][    C0]  process_scheduled_works+0xae1/0x17b0
[   82.073987][    C0]  worker_thread+0x8a0/0xda0
[   82.075457][    C0]  kthread+0x711/0x8a0
[   82.076772][    C0]  ret_from_fork+0x3fc/0x770
[   82.078244][    C0]  ret_from_fork_asm+0x1a/0x30
[   82.079771][    C0] 
[   82.080535][    C0] The buggy address belongs to the object at ffff88801fd94480
[   82.080535][    C0]  which belongs to the cache xfrm_state of size 928
[   82.084749][    C0] The buggy address is located 48 bytes inside of
[   82.084749][    C0]  freed 928-byte region [ffff88801fd94480, ffff88801fd94820)
[   82.088960][    C0] 
[   82.089737][    C0] The buggy address belongs to the physical page:
[   82.091742][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801fd95b00 pfn:0x1fd94
[   82.094900][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   82.097514][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   82.099861][    C0] page_type: f5(slab)
[   82.101138][    C0] raw: 00fff00000000040 ffff88801cb5eb40 dead000000000122 0000000000000000
[   82.103780][    C0] raw: ffff88801fd95b00 00000000800e000b 00000000f5000000 0000000000000000
[   82.106416][    C0] head: 00fff00000000040 ffff88801cb5eb40 dead000000000122 0000000000000000
[   82.109107][    C0] head: ffff88801fd95b00 00000000800e000b 00000000f5000000 0000000000000000
[   82.111804][    C0] head: 00fff00000000002 ffffea00007f6501 00000000ffffffff 00000000ffffffff
[   82.114495][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   82.117216][    C0] page dumped because: kasan: bad access detected
[   82.119198][    C0] page_owner tracks the page as allocated
[   82.121007][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5900, tgid 5899 (syz.1.2), ts 47761779442, free_ts 47758970736
[   82.126801][    C0]  post_alloc_hook+0x240/0x2a0
[   82.128303][    C0]  get_page_from_freelist+0x21e4/0x22c0
[   82.130025][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[   82.131863][    C0]  alloc_pages_mpol+0x232/0x4a0
[   82.133400][    C0]  allocate_slab+0x8a/0x3b0
[   82.134883][    C0]  ___slab_alloc+0xbfc/0x1480
[   82.136360][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[   82.138092][    C0]  xfrm_state_alloc+0x24/0x2f0
[   82.139620][    C0]  xfrm_add_sa+0x17d1/0x4070
[   82.141077][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[   82.142645][    C0]  netlink_rcv_skb+0x208/0x470
[   82.144170][    C0]  xfrm_netlink_rcv+0x79/0x90
[   82.145662][    C0]  netlink_unicast+0x82f/0x9e0
[   82.147202][    C0]  netlink_sendmsg+0x805/0xb30
[   82.148714][    C0]  __sock_sendmsg+0x21c/0x270
[   82.150218][    C0]  ____sys_sendmsg+0x505/0x830
[   82.151730][    C0] page last free pid 5268 tgid 5268 stack trace:
[   82.153815][    C0]  __free_frozen_pages+0xc71/0xe70
[   82.155473][    C0]  __slab_free+0x326/0x400
[   82.156937][    C0]  qlist_free_all+0x97/0x140
[   82.158409][    C0]  kasan_quarantine_reduce+0x148/0x160
[   82.160159][    C0]  __kasan_slab_alloc+0x22/0x80
[   82.161713][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   82.163447][    C0]  getname_flags+0xb8/0x540
[   82.164893][    C0]  vfs_fstatat+0x43/0x170
[   82.166310][    C0]  __x64_sys_newfstatat+0x116/0x190
[   82.168201][    C0]  do_syscall_64+0xfa/0x3b0
[   82.169651][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.171527][    C0] 
[   82.172300][    C0] Memory state around the buggy address:
[   82.174066][    C0]  ffff88801fd94380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[   82.176571][    C0]  ffff88801fd94400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   82.179108][    C0] >ffff88801fd94480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   82.181616][    C0]                                      ^
[   82.183398][    C0]  ffff88801fd94500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   82.185926][    C0]  ffff88801fd94580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   82.188435][    C0] ==================================================================
[   82.191091][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   82.193341][    C0] CPU: 0 UID: 0 PID: 8552 Comm: syz.1.1199 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[   82.197354][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.200497][    C0] Call Trace:
[   82.201561][    C0]  <IRQ>
[   82.202473][    C0]  dump_stack_lvl+0x99/0x250
[   82.203915][    C0]  ? __asan_memcpy+0x40/0x70
[   82.205435][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.207297][    C0]  ? __pfx__printk+0x10/0x10
[   82.208788][    C0]  panic+0x2db/0x790
[   82.210051][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.211704][    C0]  ? __pfx_panic+0x10/0x10
[   82.213141][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   82.215025][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   82.216889][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   82.218882][    C0]  ? __xfrm_state_delete+0x696/0xca0
[   82.220586][    C0]  check_panic_on_warn+0x89/0xb0
[   82.222165][    C0]  ? __xfrm_state_delete+0x696/0xca0
[   82.223848][    C0]  end_report+0x78/0x160
[   82.225199][    C0]  kasan_report+0x129/0x150
[   82.226628][    C0]  ? __xfrm_state_delete+0x696/0xca0
[   82.228316][    C0]  __xfrm_state_delete+0x696/0xca0
[   82.229972][    C0]  xfrm_timer_handler+0x18f/0xa00
[   82.231570][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[   82.233304][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   82.235203][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.236858][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   82.238745][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   82.240778][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[   82.242523][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[   82.244266][    C0]  __hrtimer_run_queues+0x52c/0xc60
[   82.246105][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   82.247922][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[   82.249808][    C0]  hrtimer_run_softirq+0x187/0x2b0
[   82.251468][    C0]  handle_softirqs+0x286/0x870
[   82.253054][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[   82.254727][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[   82.256510][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[   82.258259][    C0]  __irq_exit_rcu+0xca/0x1f0
[   82.259724][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[   82.261383][    C0]  irq_exit_rcu+0x9/0x30
[   82.262749][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   82.264527][    C0]  </IRQ>
[   82.265477][    C0]  <TASK>
[   82.266428][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   82.268372][    C0] RIP: 0010:finish_task_switch+0x26b/0x950
[   82.270200][    C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 df 31 e1 09 e8 2a 10 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[   82.276165][    C0] RSP: 0018:ffffc9000a6b6ef8 EFLAGS: 00000282
[   82.278100][    C0] RAX: 3771b7213782f300 RBX: 0000000000000000 RCX: 3771b7213782f300
[   82.280596][    C0] RDX: 0000000000000000 RSI: ffffffff8d9792aa RDI: ffffffff8be30a00
[   82.283087][    C0] RBP: ffffc9000a6b6f50 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e
[   82.285565][    C0] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: ffff888108f5b980
[   82.288044][    C0] R13: dffffc0000000000 R14: ffff888022ded640 R15: ffff88804b03ab18
[   82.290541][    C0]  ? finish_task_switch+0x266/0x950
[   82.292181][    C0]  __schedule+0x173f/0x4d30
[   82.293627][    C0]  ? is_bpf_text_address+0x292/0x2b0
[   82.295326][    C0]  ? kernel_text_address+0xa5/0xe0
[   82.296942][    C0]  ? preempt_schedule_notrace+0xd1/0x110
[   82.298687][    C0]  ? __kernel_text_address+0xd/0x40
[   82.300318][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   82.302253][    C0]  ? __pfx___schedule+0x10/0x10
[   82.303804][    C0]  preempt_schedule_notrace+0xd1/0x110
[   82.305525][    C0]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[   82.307486][    C0]  preempt_schedule_notrace_thunk+0x16/0x30
[   82.309330][    C0]  ? __page_table_check_zero+0xba/0x530
[   82.311041][    C0]  rcu_lockdep_current_cpu_online+0x107/0x120
[   82.312935][    C0]  rcu_read_lock_held+0x1e/0x50
[   82.314488][    C0]  page_ext_lookup+0xe7/0x180
[   82.316012][    C0]  ? __page_table_check_zero+0xba/0x530
[   82.317742][    C0]  __page_table_check_zero+0x18f/0x530
[   82.319498][    C0]  ? __reset_page_owner+0x148/0x1f0
[   82.321175][    C0]  free_unref_folios+0xc7a/0x14d0
[   82.322786][    C0]  folios_put_refs+0x559/0x640
[   82.324306][    C0]  ? __pfx_folios_put_refs+0x10/0x10
[   82.325964][    C0]  ? folio_batch_remove_exceptionals+0x18c/0x1f0
[   82.327999][    C0]  shmem_undo_range+0x49e/0x14b0
[   82.329725][    C0]  ? __pfx_shmem_undo_range+0x10/0x10
[   82.331450][    C0]  ? __lock_acquire+0xab9/0xd20
[   82.333017][    C0]  ? percpu_counter_add_batch+0xea/0x1e0
[   82.334806][    C0]  shmem_evict_inode+0x272/0xa70
[   82.336376][    C0]  ? inode_wait_for_writeback+0xf9/0x290
[   82.338149][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[   82.339862][    C0]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[   82.341776][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[   82.343380][    C0]  ? __pfx_shmem_evict_inode+0x10/0x10
[   82.345089][    C0]  evict+0x504/0x9c0
[   82.346334][    C0]  ? __pfx_evict+0x10/0x10
[   82.347797][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[   82.349417][    C0]  ? _raw_spin_unlock+0x28/0x50
[   82.350963][    C0]  ? iput+0x6d8/0x9d0
[   82.352218][    C0]  __dentry_kill+0x209/0x660
[   82.353701][    C0]  ? dput+0x37/0x2b0
[   82.355015][    C0]  dput+0x19f/0x2b0
[   82.356250][    C0]  __fput+0x68e/0xa70
[   82.357533][    C0]  task_work_run+0x1d4/0x260
[   82.359006][    C0]  ? __pfx_task_work_run+0x10/0x10
[   82.360631][    C0]  do_exit+0x6b5/0x22e0
[   82.361971][    C0]  ? preempt_schedule_common+0x83/0xd0
[   82.363682][    C0]  ? preempt_schedule+0xae/0xc0
[   82.365254][    C0]  ? __pfx_do_exit+0x10/0x10
[   82.366743][    C0]  ? preempt_schedule_thunk+0x16/0x30
[   82.368444][    C0]  do_group_exit+0x21c/0x2d0
[   82.369906][    C0]  __x64_sys_exit_group+0x3f/0x40
[   82.371494][    C0]  x64_sys_call+0x21f7/0x2200
[   82.372984][    C0]  do_syscall_64+0xfa/0x3b0
[   82.374447][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.376086][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.378132][    C0]  ? exc_page_fault+0x9f/0xf0
[   82.379621][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.381465][    C0] RIP: 0033:0x7fa0e1d8ebe9
[   82.382885][    C0] Code: Unable to access opcode bytes at 0x7fa0e1d8ebbf.
[   82.385063][    C0] RSP: 002b:00007ffd9c238588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   82.387677][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa0e1d8ebe9
[   82.390137][    C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[   82.392591][    C0] RBP: 00007ffd9c2385ec R08: 000000039c23867f R09: 00000000000927c0
[   82.395057][    C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000171
[   82.397531][    C0] R13: 00000000000927c0 R14: 0000000000013e6d R15: 00007ffd9c238640
[   82.400009][    C0]  </TASK>
[   82.401780][    C0] Kernel Offset: disabled
[   82.403167][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:31:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073b0
R8 =ffff888021660237 R9 =1ffff110042cc046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95910 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558bf37500 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3091bff8 CR3=00000000221c4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fa0e1e12e53
XMM06=0000000000000000 00007fa0e1e12e4d XMM07=0000000000000000 00007fa0e1e12e61
XMM08=0000000000000000 00007fa0e1e12ee7 XMM09=0000000000000000 00007fa0e1e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000005 RCX=e06958f445fc9c00 RDX=0000000000000000
RSI=ffff88811016c538 RDI=ffff88811016b980 RBP=0000000000000000 RSP=ffffc9000a6e7720
R8 =0000000000000000 R9 =ffffffff81f6986c R10=0000000000000406 R11=0000000000000000
R12=0000000044ab4726 R13=ffff88811016c470 R14=ffff88811016c538 R15=d7abe95635e67326
RIP=ffffffff819db974 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555577e89500 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c31b4a1 CR3=000000010924a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9b97f87498 00007f9b97f87470 XMM03=00007f9b97f874a8 00007f9b97f874a0
XMM04=00007f9b98aed100 00007f9b97f87460 XMM05=00007f9b97f87478 00007f9b97f874c0
XMM06=00007f9b97f874b8 00007f9b97f874b0 XMM07=00007f9b97f874a8 00007f9b97f874a0
XMM08=0000000000000000 00007f9b97e12ee7 XMM09=0000000000000000 00007f9b97e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
