last executing test programs:

1.348013957s ago: executing program 1 (id=1156):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x20)

1.239963307s ago: executing program 1 (id=1160):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c)

1.160454118s ago: executing program 1 (id=1162):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10)

1.160225878s ago: executing program 2 (id=1163):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50)

1.099050997s ago: executing program 1 (id=1164):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1.017875795s ago: executing program 1 (id=1166):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
shutdown(r2, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1.015854046s ago: executing program 2 (id=1168):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x20040051)

959.240068ms ago: executing program 2 (id=1169):
r0 = socket(0x18, 0x800, 0x0)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @remote, 'gre0\x00'}}, 0x1e)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0)

900.414137ms ago: executing program 2 (id=1171):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0)

899.091133ms ago: executing program 2 (id=1173):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ppoll(&(0x7f0000000500)=[{r4, 0x8}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="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", 0x175}, {&(0x7f0000000740)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c4793ffc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0823f76efad", 0xa6}], 0x3, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r5, 0x0, 0x0)
sendmmsg$inet(r5, 0x0, 0x0, 0x4880)
read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

656.985073ms ago: executing program 1 (id=1177):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8)
unshare(0x26020480)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xc, 0x4, 0x2b0, 0xffffffff, 0x118, 0x118, 0x90, 0x98, 0xffffffff, 0x248, 0x248, 0x248, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x0, 0x2}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00', {}, {}, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="2f0000000000b50cb403a51a", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16=r6, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x4004)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000d0aac00000000000000000000000000090002"], 0x20}}, 0x0)
recvmsg(r5, &(0x7f0000000200)={&(0x7f0000000840)=@rc, 0x80, &(0x7f0000000200)}, 0x2)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @empty, @loopback}, 0xc)
getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0600000004000200080000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r9 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1a8, 0x5c, 0x160, 0x0, 0x3e0, 0x2b8, 0x228, 0x25a, 0x2b8, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0xffffff00, 0xffffffff], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0x160, 0x1a8, 0x52020000, {0x0, 0x6802000000000000}, [@common=@srh1={{0x90}, {0xff, 0x84, 0x3, 0x1, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [0xffffff00, 0xffffff, 0x0, 0xffffff00], [0xff, 0xff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xff], 0x1000, 0x4449}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [0x0, 0x0, 0xff000000], [0xff], 'bond_slave_0\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)

171.270687ms ago: executing program 0 (id=1185):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000}, 0x0)

171.028149ms ago: executing program 0 (id=1186):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x2d, 0x9, 0x70bd2a, 0x0, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x84)

91.141746ms ago: executing program 0 (id=1187):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000)=0x2, 0x4)

90.830307ms ago: executing program 0 (id=1188):
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="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", 0xfc)

26.217399ms ago: executing program 0 (id=1189):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd25, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x40}}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x195}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0xa4}}, 0x8004)

18.025443ms ago: executing program 2 (id=1190):
r0 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @mcast1, 0x200005}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000004c0)=0x9, 0x4)

0s ago: executing program 0 (id=1191):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
shutdown(r0, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @mcast1, 0xa}}, 0x0, 0x0, 0x22, 0x0, "f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0eff964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd00"}, 0xd8)
sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20048841, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:54249' (ED25519) to the list of known hosts.
syzkaller login: [   55.956904][ T5773] cgroup: Unknown subsys name 'net'
[   56.061585][ T5773] cgroup: Unknown subsys name 'cpuset'
[   56.068437][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.851968][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.600286][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.709838][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   69.843278][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.845586][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.848693][ T5872] bridge_slave_0: entered allmulticast mode
[   69.851461][ T5872] bridge_slave_0: entered promiscuous mode
[   69.855506][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.857928][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.860204][ T5872] bridge_slave_1: entered allmulticast mode
[   69.862914][ T5872] bridge_slave_1: entered promiscuous mode
[   69.893993][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.906170][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.927184][ T5872] team0: Port device team_slave_0 added
[   69.932111][ T5872] team0: Port device team_slave_1 added
[   69.954054][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.956686][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.966819][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.973439][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.976065][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.985917][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.019710][ T5872] hsr_slave_0: entered promiscuous mode
[   70.022501][ T5872] hsr_slave_1: entered promiscuous mode
[   70.132421][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.139551][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.144136][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.149817][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.169335][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.171706][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.174268][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.176502][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.213971][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.225379][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.229541][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.238225][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   70.245237][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.247718][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.255874][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.258959][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.362335][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.389777][ T5872] veth0_vlan: entered promiscuous mode
[   70.395085][ T5872] veth1_vlan: entered promiscuous mode
[   70.411904][ T5872] veth0_macvtap: entered promiscuous mode
[   70.415980][ T5872] veth1_macvtap: entered promiscuous mode
[   70.429883][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.436600][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.445297][ T5717] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.449877][ T5717] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.453440][ T5717] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.457960][ T5717] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.289850][ T5717] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.429237][ T5717] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.501853][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.503945][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.519191][ T5909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.522597][ T5909] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.524278][ T5913] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.530271][ T5913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.531881][ T5909] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.541764][ T5909] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.545613][ T5914] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.545621][ T5909] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.545887][ T5909] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.555086][ T5914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.559083][ T5914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.559193][ T5909] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.562236][ T5914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.568051][ T5914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.569325][ T5717] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.571219][ T5914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.892384][ T5905] chnl_net:caif_netlink_parms(): no params data found
[   72.040203][ T5906] chnl_net:caif_netlink_parms(): no params data found
[   72.103160][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.106361][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.109544][ T5905] bridge_slave_0: entered allmulticast mode
[   72.112425][ T5905] bridge_slave_0: entered promiscuous mode
[   72.120154][ T5904] chnl_net:caif_netlink_parms(): no params data found
[   72.138589][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.141296][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.143515][ T5905] bridge_slave_1: entered allmulticast mode
[   72.146411][ T5905] bridge_slave_1: entered promiscuous mode
[   72.211536][ T5905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.241382][ T5905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.277606][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.279916][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.282390][ T5906] bridge_slave_0: entered allmulticast mode
[   72.285351][ T5906] bridge_slave_0: entered promiscuous mode
[   72.304094][ T5905] team0: Port device team_slave_0 added
[   72.316614][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.319253][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.321557][ T5906] bridge_slave_1: entered allmulticast mode
[   72.324277][ T5906] bridge_slave_1: entered promiscuous mode
[   72.339269][ T5905] team0: Port device team_slave_1 added
[   72.379986][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.382767][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.385343][ T5904] bridge_slave_0: entered allmulticast mode
[   72.390208][ T5904] bridge_slave_0: entered promiscuous mode
[   72.396157][ T5906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.403150][ T5906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.434755][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.437964][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.440857][ T5904] bridge_slave_1: entered allmulticast mode
[   72.444742][ T5904] bridge_slave_1: entered promiscuous mode
[   72.476693][ T5906] team0: Port device team_slave_0 added
[   72.479059][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.481779][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.491079][ T5905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.496689][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.499597][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.509369][ T5905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.525073][ T5906] team0: Port device team_slave_1 added
[   72.550065][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.568858][ T5717] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.590010][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.593999][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.596579][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.605544][ T5906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.639871][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.642372][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.650556][ T5906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.664238][ T5904] team0: Port device team_slave_0 added
[   72.685395][ T5904] team0: Port device team_slave_1 added
[   72.692840][ T5905] hsr_slave_0: entered promiscuous mode
[   72.695270][ T5905] hsr_slave_1: entered promiscuous mode
[   72.698024][ T5905] debugfs: 'hsr0' already exists in 'hsr'
[   72.700201][ T5905] Cannot create hsr debugfs directory
[   72.771453][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.773954][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.785042][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.790438][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.792866][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.802717][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.815327][ T5906] hsr_slave_0: entered promiscuous mode
[   72.818247][ T5906] hsr_slave_1: entered promiscuous mode
[   72.821068][ T5906] debugfs: 'hsr0' already exists in 'hsr'
[   72.823288][ T5906] Cannot create hsr debugfs directory
[   72.926244][ T5904] hsr_slave_0: entered promiscuous mode
[   72.929391][ T5904] hsr_slave_1: entered promiscuous mode
[   72.932130][ T5904] debugfs: 'hsr0' already exists in 'hsr'
[   72.934318][ T5904] Cannot create hsr debugfs directory
[   73.153832][ T5905] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.164068][ T5905] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.174540][ T5905] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.181455][ T5905] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.259082][ T5905] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.278517][ T5905] 8021q: adding VLAN 0 to HW filter on device team0
[   73.286767][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.289790][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.302594][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.305314][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.469284][ T5905] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.509574][ T5905] veth0_vlan: entered promiscuous mode
[   73.518992][ T5905] veth1_vlan: entered promiscuous mode
[   73.545853][ T5905] veth0_macvtap: entered promiscuous mode
[   73.553883][ T5905] veth1_macvtap: entered promiscuous mode
[   73.569654][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.579070][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.586755][ T5886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.592605][ T5886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.599213][ T5886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.606146][ T5886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.668753][ T5237] Bluetooth: hci0: command tx timeout
[   73.671436][ T5237] Bluetooth: hci1: command tx timeout
[   73.673860][   T55] Bluetooth: hci2: command tx timeout
[   73.679339][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.682429][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.716231][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.719945][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.777701][ T5949] IPVS: Error connecting to the multicast addr
[   73.924620][ T5717] bridge_slave_1: left allmulticast mode
[   73.926859][ T5717] bridge_slave_1: left promiscuous mode
[   73.942245][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.961485][ T5717] bridge_slave_0: left allmulticast mode
[   73.963601][ T5717] bridge_slave_0: left promiscuous mode
[   73.966027][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.131659][ T5967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.430288][ T5717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.436640][ T5717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.442650][ T5717] bond0 (unregistering): Released all slaves
[   74.687909][ T5717] hsr_slave_0: left promiscuous mode
[   74.693831][ T5717] hsr_slave_1: left promiscuous mode
[   74.702366][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.705637][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.714018][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.718556][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.741094][ T5717] veth1_macvtap: left promiscuous mode
[   74.743690][ T5717] veth0_macvtap: left promiscuous mode
[   74.746205][ T5717] veth1_vlan: left promiscuous mode
[   74.750772][ T5717] veth0_vlan: left promiscuous mode
[   75.280260][ T5717] team0 (unregistering): Port device team_slave_1 removed
[   75.317527][ T5717] team0 (unregistering): Port device team_slave_0 removed
[   75.737446][   T55] Bluetooth: hci2: command tx timeout
[   75.739625][   T55] Bluetooth: hci1: command tx timeout
[   75.742240][ T5910] Bluetooth: hci0: command tx timeout
[   75.905883][ T5906] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.915635][ T5906] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.936517][ T5906] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.946906][ T5906] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.031472][ T5904] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   76.045817][ T5904] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   76.101129][ T5904] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   76.114003][ T5904] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   76.201577][ T5906] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.423852][ T5906] 8021q: adding VLAN 0 to HW filter on device team0
[   76.504953][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.508499][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.519761][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.522790][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.540106][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'.
[   76.619757][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.674801][ T5904] 8021q: adding VLAN 0 to HW filter on device team0
[   76.706001][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.709106][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.740519][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.743516][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.960913][ T5906] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.023666][ T5906] veth0_vlan: entered promiscuous mode
[   77.059585][ T5906] veth1_vlan: entered promiscuous mode
[   77.109900][ T5906] veth0_macvtap: entered promiscuous mode
[   77.129591][ T5906] veth1_macvtap: entered promiscuous mode
[   77.135567][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.172319][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.197682][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.223898][ T5886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.238279][ T5886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.241124][ T5886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.244904][ T5886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.273313][ T5904] veth0_vlan: entered promiscuous mode
[   77.308715][ T5904] veth1_vlan: entered promiscuous mode
[   77.415639][ T5904] veth0_macvtap: entered promiscuous mode
[   77.426693][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.427861][ T5904] veth1_macvtap: entered promiscuous mode
[   77.435165][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.483110][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.503829][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.508071][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.510227][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.533623][ T5886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.545711][ T5886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.562487][ T5886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.566675][ T5886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.715841][ T6048] tipc: Started in network mode
[   77.724564][ T6048] tipc: Node identity 3205cfe50c14, cluster identity 4711
[   77.728316][ T6048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.743423][ T6048] syzkaller0: entered promiscuous mode
[   77.745669][ T6048] syzkaller0: entered allmulticast mode
[   77.771040][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.774302][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.781637][ T6048] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   77.815544][ T6048] tipc: Resetting bearer <eth:syzkaller0>
[   77.819103][ T5237] Bluetooth: hci0: command tx timeout
[   77.819729][ T5910] Bluetooth: hci1: command tx timeout
[   77.821495][   T55] Bluetooth: hci2: command tx timeout
[   77.835897][ T6046] tipc: Resetting bearer <eth:syzkaller0>
[   77.863475][ T6046] tipc: Disabling bearer <eth:syzkaller0>
[   77.903394][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.912832][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.041873][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'.
[   78.178600][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'.
[   78.192343][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'.
[   78.196215][ T6069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.318948][ T6074] netlink: 44 bytes leftover after parsing attributes in process `syz.1.49'.
[   78.323295][ T6074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.49'.
[   79.115995][ T6106] tipc: Started in network mode
[   79.125301][ T6106] tipc: Node identity 5a8808b42e1e, cluster identity 4711
[   79.135011][ T6106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.139439][ T6106] syzkaller0: entered promiscuous mode
[   79.141696][ T6106] syzkaller0: entered allmulticast mode
[   79.170676][ T6106] tipc: Resetting bearer <eth:syzkaller0>
[   79.192746][ T6104] tipc: Resetting bearer <eth:syzkaller0>
[   79.213527][ T6104] tipc: Disabling bearer <eth:syzkaller0>
[   79.542597][ T6120] nicvf0: entered promiscuous mode
[   79.823203][ T6128] netlink: 52 bytes leftover after parsing attributes in process `syz.1.73'.
[   79.826414][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'.
[   79.841705][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'.
[   79.897360][ T5910] Bluetooth: hci0: command tx timeout
[   79.897573][ T5237] Bluetooth: hci2: command tx timeout
[   79.907490][ T5237] Bluetooth: hci1: command tx timeout
[   79.949331][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'.
[   80.201052][ T6150] Bluetooth: MGMT ver 1.23
[   81.093913][ T6198] netlink: 'syz.1.104': attribute type 12 has an invalid length.
[   81.590588][ T6226] __nla_validate_parse: 6 callbacks suppressed
[   81.590604][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.117'.
[   81.736753][   T96] IPVS: starting estimator thread 0...
[   81.773013][ T6233] netlink: 32 bytes leftover after parsing attributes in process `syz.1.120'.
[   81.791228][ T6230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.837335][ T6231] IPVS: using max 41 ests per chain, 98400 per kthread
[   82.144674][ T6243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.353577][ T6294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.471553][ T6294] syzkaller0: entered promiscuous mode
[   83.474307][ T6294] syzkaller0: entered allmulticast mode
[   83.499438][ T6294] tipc: Resetting bearer <eth:syzkaller0>
[   83.527792][ T6293] tipc: Resetting bearer <eth:syzkaller0>
[   84.063689][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'.
[   84.066683][ T6311] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   84.071300][ T6311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.368102][ T6047] tipc: Node number set to 1041354725
[   84.963511][ T6293] tipc: Disabling bearer <eth:syzkaller0>
[   84.996818][ T6315] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.114645][ T6315] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.214816][ T6315] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.333360][ T6315] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.339155][ T6331] netlink: 716 bytes leftover after parsing attributes in process `syz.2.157'.
[   85.493116][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.543353][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.555306][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.605480][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.660579][ T5893] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   85.719453][  T794] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   85.882738][ T6350] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   86.098419][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   86.122824][ T6376] warning: `syz.0.175' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   86.137607][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.176'.
[   86.243498][ T6383] Driver unsupported XDP return value 0 on prog  (id 20) dev N/A, expect packet loss!
[   86.602828][ T6405] Zero length message leads to an empty skb
[   86.868657][   T10] cfg80211: failed to load regulatory.db
[   87.181326][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   87.186380][ T6426] netlink: 'syz.1.194': attribute type 13 has an invalid length.
[   87.205960][ T6426] netlink: 'syz.1.194': attribute type 17 has an invalid length.
[   87.209626][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   87.274815][ T6424] syz.0.196 uses obsolete (PF_INET,SOCK_PACKET)
[   87.310636][ T6437] netlink: 'syz.2.198': attribute type 30 has an invalid length.
[   87.342655][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'.
[   87.356624][ T6426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.459474][ T6426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.519778][ T6433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.616737][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'.
[   87.623601][ T6419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.767377][   T96] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   87.940703][ T6462] netlink: 'syz.2.208': attribute type 12 has an invalid length.
[   88.571301][ T6477] batadv_slave_1: entered promiscuous mode
[   88.574762][ T6476] batadv_slave_1: left promiscuous mode
[   88.829703][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.833494][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.006265][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.020587][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.210234][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.213891][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.218243][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.221060][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.725789][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'.
[   89.733165][ T6523] netlink: 'syz.1.229': attribute type 1 has an invalid length.
[   89.803690][ T6526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.229'.
[   89.813236][ T6526] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   90.305026][ T6554] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.620385][ T6566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.701451][ T6566] syzkaller0: entered promiscuous mode
[   90.704137][ T6566] syzkaller0: entered allmulticast mode
[   90.708829][ T6566] tipc: Resetting bearer <eth:syzkaller0>
[   90.723006][ T6565] tipc: Resetting bearer <eth:syzkaller0>
[   91.699266][ T6047] tipc: Node number set to 1955989684
[   92.114644][ T6565] tipc: Disabling bearer <eth:syzkaller0>
[   92.176014][ T6605] dvmrp0: entered allmulticast mode
[   92.369124][ T6614] bridge_slave_0: left allmulticast mode
[   92.371270][ T6614] bridge_slave_0: left promiscuous mode
[   92.373697][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.378700][ T6616] netlink: 132 bytes leftover after parsing attributes in process `syz.1.272'.
[   92.386739][ T6614] bridge_slave_1: left allmulticast mode
[   92.396047][ T6614] bridge_slave_1: left promiscuous mode
[   92.399989][ T6614] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.416062][ T6617] netlink: 'syz.2.271': attribute type 10 has an invalid length.
[   92.419544][ T6617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.271'.
[   92.420151][ T6614] bond0: (slave bond_slave_0): Releasing backup interface
[   92.431465][ T6614] bond0: (slave bond_slave_1): Releasing backup interface
[   92.447511][ T6614] team0: Port device team_slave_0 removed
[   92.462141][ T6614] team0: Port device team_slave_1 removed
[   92.465365][ T6614] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.471765][ T6614] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.476743][ T6614] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.481752][ T6614] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.506394][ T6617] batman_adv: batadv0: Adding interface: virt_wifi0
[   92.512090][ T6617] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.527168][ T6617] batman_adv: batadv0: Interface activated: virt_wifi0
[   93.530358][ T6648] netlink: 'syz.0.286': attribute type 3 has an invalid length.
[   94.051642][ T6670] netlink: 'syz.1.297': attribute type 11 has an invalid length.
[   94.069389][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'.
[   94.116698][ T6673] syz.0.299 (6673) used greatest stack depth: 17912 bytes left
[   95.451938][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'.
[   95.579123][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'.
[   96.571950][ T6712] macvtap1: entered promiscuous mode
[   96.573991][ T6712] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   96.700819][ T6735] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[   96.738253][ T6738] netlink: 32 bytes leftover after parsing attributes in process `syz.1.327'.
[   97.299208][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.347'.
[   97.302601][ T6783] netlink: 'syz.0.347': attribute type 18 has an invalid length.
[   97.322171][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.322863][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.347'.
[   97.325388][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.325430][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.325455][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.338933][ T6783] netlink: 'syz.0.347': attribute type 18 has an invalid length.
[   97.563376][ T6793] netlink: 'syz.0.352': attribute type 10 has an invalid length.
[   97.569441][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.573567][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.585953][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.588631][ T6793] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.591770][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.594399][ T6793] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.600791][ T6793] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   97.609330][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'.
[   97.612408][ T6793] bridge_slave_1: left allmulticast mode
[   97.614378][ T6793] bridge_slave_1: left promiscuous mode
[   97.618476][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.623563][ T6793] bridge_slave_0: left allmulticast mode
[   97.625270][ T6793] bridge_slave_0: left promiscuous mode
[   97.629011][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.642175][ T6793] bond0: (slave bridge0): Releasing backup interface
[   98.183421][ T6820] lo speed is unknown, defaulting to 1000
[   98.188734][ T6820] lo speed is unknown, defaulting to 1000
[   98.192425][ T6820] lo speed is unknown, defaulting to 1000
[   98.210578][ T6820] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   98.219335][ T6820] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   98.261211][ T6820] lo speed is unknown, defaulting to 1000
[   98.276821][ T6820] lo speed is unknown, defaulting to 1000
[   98.291078][ T6820] lo speed is unknown, defaulting to 1000
[   98.482188][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.489494][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.696614][ T5886] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.701054][ T5886] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.704530][ T5886] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.710778][ T5886] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.714128][ T5886] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.722042][ T5886] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.729454][ T5886] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.732121][ T5886] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.055918][ T6859] lo speed is unknown, defaulting to 1000
[   99.064210][ T6862] openvswitch: netlink: IPv4 tun info is not correct
[   99.331588][ T6876] tipc: Started in network mode
[   99.333631][ T6876] tipc: Node identity 96e68992436, cluster identity 4711
[   99.336568][ T6876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.364892][ T6876] syzkaller0: entered promiscuous mode
[   99.367455][ T6876] syzkaller0: entered allmulticast mode
[   99.430828][ T6876] tipc: Resetting bearer <eth:syzkaller0>
[   99.435254][ T6875] tipc: Resetting bearer <eth:syzkaller0>
[   99.461587][ T6875] tipc: Disabling bearer <eth:syzkaller0>
[   99.920321][ T6904] netlink: 'syz.2.397': attribute type 27 has an invalid length.
[   99.923649][ T6904] netlink: 'syz.2.397': attribute type 27 has an invalid length.
[  100.049786][ T6910] netlink: 172 bytes leftover after parsing attributes in process `syz.1.400'.
[  100.056200][ T6910] netlink: 172 bytes leftover after parsing attributes in process `syz.1.400'.
[  100.179959][ T6918] vlan2: entered promiscuous mode
[  100.182169][ T6918] macvtap0: entered promiscuous mode
[  100.226932][ T6920] netlink: 104 bytes leftover after parsing attributes in process `syz.2.404'.
[  100.305970][ T6922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.314937][ T6922] syzkaller0: entered promiscuous mode
[  100.319039][ T6922] syzkaller0: entered allmulticast mode
[  100.333589][ T6922] tipc: Resetting bearer <eth:syzkaller0>
[  100.338859][ T6921] tipc: Resetting bearer <eth:syzkaller0>
[  100.346268][ T6921] tipc: Disabling bearer <eth:syzkaller0>
[  100.669903][ T6932] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  101.000061][ T6948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.088190][ T6955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.421'.
[  101.091458][ T6955] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  101.127817][ T6958] netlink: 84 bytes leftover after parsing attributes in process `syz.1.422'.
[  101.352499][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'.
[  101.355586][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'.
[  101.371191][ T6976] ipvlan2: entered allmulticast mode
[  101.376289][ T6976] dummy0: entered allmulticast mode
[  101.763715][ T7002] netlink: 'syz.0.441': attribute type 1 has an invalid length.
[  101.766764][ T7002] netlink: 224 bytes leftover after parsing attributes in process `syz.0.441'.
[  101.821212][ T7004] netlink: 'syz.2.442': attribute type 7 has an invalid length.
[  101.824283][ T7004] netlink: 'syz.2.442': attribute type 8 has an invalid length.
[  102.520175][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'.
[  103.018903][   T33] audit: type=1800 audit(1757535497.275:2): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.465" name="blkio.bfq.time_recursive" dev="tmpfs" ino=662 res=0 errno=0
[  103.080896][ T7053] lo speed is unknown, defaulting to 1000
[  103.264418][ T7076] netlink: 104 bytes leftover after parsing attributes in process `syz.0.469'.
[  103.271685][ T7066] lo speed is unknown, defaulting to 1000
[  103.685427][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.474'.
[  104.169588][ T7120] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  104.407353][ T5886] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.411224][ T5886] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.416759][ T5886] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.427121][ T5886] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.451634][ T7131] lo speed is unknown, defaulting to 1000
[  104.845876][ T7160] netlink: 'syz.0.502': attribute type 1 has an invalid length.
[  105.311533][ T7162] bond1: (slave bridge0): making interface the new active one
[  105.315053][ T7162] bond1: (slave bridge0): Enslaving as an active interface with an up link
[  105.416436][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'.
[  105.486046][ T7179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.489192][ T7179] IPv6: NLM_F_CREATE should be set when creating new route
[  105.492064][ T7179] IPv6: NLM_F_CREATE should be set when creating new route
[  105.599424][ T7183] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  105.603997][ T7183] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  106.233760][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.532'.
[  106.256272][ T7226] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.271155][ T7226] macvlan2: entered promiscuous mode
[  106.273257][ T7226] macvlan2: entered allmulticast mode
[  106.275897][ T7226] bond1: entered promiscuous mode
[  106.279621][ T7226] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  106.283804][ T7226] bond1: left promiscuous mode
[  106.842202][ T7266] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.548'.
[  106.954034][ T7269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.549'.
[  107.351808][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'.
[  108.050531][ T5717] nci: nci_rx_work: unknown MT 0x1
[  109.180843][ T7376] netlink: 240 bytes leftover after parsing attributes in process `syz.2.592'.
[  109.240007][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'.
[  109.243642][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'.
[  109.252127][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'.
[  109.275256][ T7378] 8021q: adding VLAN 0 to HW filter on device bond3
[  109.665808][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'.
[  109.682826][ T7388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.685785][ T7388] IPv6: NLM_F_CREATE should be set when creating new route
[  109.691757][ T7388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.694749][ T7388] IPv6: NLM_F_CREATE should be set when creating new route
[  109.922935][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'.
[  109.926804][ T7403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.223202][ T7415] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  110.272718][ T7417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.608'.
[  110.275903][ T7417] netlink: 3 bytes leftover after parsing attributes in process `syz.1.608'.
[  110.341936][ T7422] netlink: 36 bytes leftover after parsing attributes in process `syz.1.608'.
[  110.345673][ T7422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.608'.
[  110.821628][ T7442] netlink: 'syz.2.619': attribute type 21 has an invalid length.
[  111.237669][ T5886] syzkaller0: tun_net_xmit 76
[  111.240729][ T5886] syzkaller0: tun_net_xmit 48
[  111.244917][ T7460] syzkaller0: tun_net_xmit 76
[  111.248446][ T7460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.257549][   T46] syzkaller0: tun_net_xmit 76
[  111.366819][ T7456] tipc: Resetting bearer <eth:syzkaller0>
[  112.594151][ T7456] tipc: Disabling bearer <eth:syzkaller0>
[  113.095205][ T7500] team0: Device gtp1 is of different type
[  113.382613][ T7521] Bluetooth: MGMT ver 1.23
[  114.324924][ T7577] netlink: 'syz.1.671': attribute type 1 has an invalid length.
[  114.340522][ T7577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.590648][ T7599] __nla_validate_parse: 5 callbacks suppressed
[  114.590673][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.679'.
[  114.765016][ T7607] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  115.001914][ T7615] netlink: 'syz.2.687': attribute type 5 has an invalid length.
[  115.123464][ T7623] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.691'.
[  115.165647][ T7625] netlink: 'syz.2.692': attribute type 21 has an invalid length.
[  115.169183][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'.
[  115.192756][ T5886] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.192834][ T7625] netlink: 'syz.2.692': attribute type 21 has an invalid length.
[  115.196230][ T5886] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.196264][ T5886] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.196290][ T5886] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.207186][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'.
[  115.400658][ T7637] netlink: 'syz.0.697': attribute type 2 has an invalid length.
[  115.490098][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'.
[  115.748238][ T7657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.707'.
[  115.835512][ T7665] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  116.977878][ T7681] netlink: 'syz.2.719': attribute type 1 has an invalid length.
[  117.163640][ T7669] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  117.185768][ T7681] 8021q: adding VLAN 0 to HW filter on device bond4
[  117.208348][ T7683] veth3: entered promiscuous mode
[  117.215005][ T7683] bond4: (slave veth3): Enslaving as an active interface with a down link
[  117.222736][ T7684] erspan0: entered allmulticast mode
[  117.377820][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.724'.
[  117.475943][ T7706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.728'.
[  117.755819][ T7726] netlink: 'syz.0.735': attribute type 3 has an invalid length.
[  118.329223][ T7743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.743'.
[  119.654102][ T7789] lo speed is unknown, defaulting to 1000
[  119.753094][ T7791] netlink: 'syz.2.764': attribute type 10 has an invalid length.
[  119.789251][ T7800] block nbd1: not configured, cannot reconfigure
[  119.815194][ T7801] netlink: 'syz.2.764': attribute type 10 has an invalid length.
[  119.829498][ T7791] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.832421][ T7801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.764'.
[  119.846194][ T7791] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  119.969806][ T7797] lo speed is unknown, defaulting to 1000
[  120.027459][ T7801] batadv0: entered promiscuous mode
[  120.029943][ T7801] batadv0: entered allmulticast mode
[  120.079258][ T7801] bond0: (slave batadv0): Releasing backup interface
[  120.119524][ T7801] bridge0: port 1(batadv0) entered blocking state
[  120.121589][ T7801] bridge0: port 1(batadv0) entered disabled state
[  120.160935][ T7811] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.165111][ T7811] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  120.326841][ T7812] netlink: 256 bytes leftover after parsing attributes in process `syz.1.770'.
[  120.333170][ T7812] netlink: 48 bytes leftover after parsing attributes in process `syz.1.770'.
[  120.357670][ T5717] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  120.362666][ T5717] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  120.894053][ T7823] netlink: zone id is out of range
[  120.898578][ T7823] netlink: zone id is out of range
[  120.913652][ T7823] netlink: zone id is out of range
[  120.916105][ T7823] netlink: zone id is out of range
[  120.980675][ T7824] netlink: del zone limit has 4 unknown bytes
[  120.985633][ T7823] netlink: set zone limit has 4 unknown bytes
[  121.214897][ T7840] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.781'.
[  121.225054][ T7840] syz_tun: entered allmulticast mode
[  121.231815][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'.
[  121.239190][ T7839] syz_tun: left allmulticast mode
[  121.281903][ T7844] netlink: 36 bytes leftover after parsing attributes in process `syz.1.784'.
[  122.233193][ T7902] team0: entered promiscuous mode
[  122.235099][ T7902] team_slave_0: entered promiscuous mode
[  122.250911][ T7902] team_slave_1: entered promiscuous mode
[  122.253332][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'.
[  122.256852][ T7904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.261866][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'.
[  122.455799][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'.
[  122.469733][ T7902] team0 (unregistering): left promiscuous mode
[  122.472455][ T7902] team_slave_0: left promiscuous mode
[  122.475087][ T7902] team_slave_1: left promiscuous mode
[  122.482647][ T7902] team0 (unregistering): Port device team_slave_0 removed
[  122.487669][ T7902] team0 (unregistering): Port device team_slave_1 removed
[  123.271277][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.823'.
[  125.498369][ T8000] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  125.502595][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'.
[  125.507161][ T8000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.852'.
[  125.516598][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'.
[  125.524052][ T8003] netlink: 180 bytes leftover after parsing attributes in process `syz.0.853'.
[  125.528143][ T8003] netlink: 180 bytes leftover after parsing attributes in process `syz.0.853'.
[  125.531720][ T8003] netlink: 14 bytes leftover after parsing attributes in process `syz.0.853'.
[  125.575425][ T8005] netlink: 45 bytes leftover after parsing attributes in process `syz.0.854'.
[  125.686519][ T8011] netlink: 'syz.1.857': attribute type 2 has an invalid length.
[  125.710291][ T8011] k*]: entered promiscuous mode
[  125.787735][ T8011] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.799903][ T8011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.819651][ T5314] lo speed is unknown, defaulting to 1000
[  125.822463][ T5314] syz1: Port: 1 Link ACTIVE
[  125.871916][ T8022] erspan0: left allmulticast mode
[  126.073809][ T8022] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  126.176699][ T8022] veth3: left promiscuous mode
[  126.188376][ T8018] veth0_to_team: entered promiscuous mode
[  126.190609][ T8018] veth0_to_team: entered allmulticast mode
[  126.193641][ T5886] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.207240][ T5886] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.220770][ T5886] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.223960][ T5886] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.237776][ T5886] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.241524][ T5886] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.245106][ T5886] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.276180][ T5886] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.389323][ T8038] netlink: 'syz.1.868': attribute type 11 has an invalid length.
[  126.522466][ T6047] IPVS: starting estimator thread 0...
[  126.627163][ T8046] IPVS: using max 40 ests per chain, 96000 per kthread
[  126.651045][ T8057] netlink: 'syz.0.876': attribute type 1 has an invalid length.
[  126.654023][ T8057] netlink: 'syz.0.876': attribute type 4 has an invalid length.
[  126.657226][ T8057] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.876'.
[  126.660930][ T8057] netlink: 'syz.0.876': attribute type 1 has an invalid length.
[  126.663568][ T8057] netlink: 'syz.0.876': attribute type 4 has an invalid length.
[  126.666530][ T8057] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.876'.
[  126.754728][ T8063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.878'.
[  126.831465][ T8065] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  127.072336][ T8081] dvmrp1: entered allmulticast mode
[  127.085487][ T8081] dvmrp1: left allmulticast mode
[  127.865364][ T8137] nbd: must specify a size in bytes for the device
[  127.899944][ T8139] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  129.972403][ T8231] netlink: 'syz.1.947': attribute type 1 has an invalid length.
[  130.000472][ T8231] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.032936][ T8231] veth3: entered promiscuous mode
[  130.040568][ T8231] bond2: (slave veth3): Enslaving as an active interface with an up link
[  131.184991][ T8284] : renamed from vlan1
[  131.264228][ T8286] netlink: 'syz.0.969': attribute type 1 has an invalid length.
[  131.275475][ T8286] __nla_validate_parse: 4 callbacks suppressed
[  131.275486][ T8286] netlink: 224 bytes leftover after parsing attributes in process `syz.0.969'.
[  131.294241][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'.
[  131.299586][ T8288] netlink: 156 bytes leftover after parsing attributes in process `syz.2.970'.
[  131.340905][ T8286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.969'.
[  131.450600][ T8294] dvmrp1: entered allmulticast mode
[  131.651798][ T8307] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  131.675246][ T8308] lo speed is unknown, defaulting to 1000
[  131.818955][ T5237] Bluetooth: hci2: command tx timeout
[  132.329079][ T8342] netlink: 'syz.0.995': attribute type 1 has an invalid length.
[  132.332244][ T8342] netlink: 'syz.0.995': attribute type 1 has an invalid length.
[  132.334806][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.995'.
[  132.341442][ T8342] block nbd0: shutting down sockets
[  132.717761][ T8362] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1005'.
[  132.852654][ T8375] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  132.939536][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.942259][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  133.266762][ T8391] IPVS: Error connecting to the multicast addr
[  133.309739][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1016'.
[  133.477849][ T8398] 8021q: adding VLAN 0 to HW filter on device bond3
[  134.163761][ T8448] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  134.204243][ T8451] netlink: 'syz.0.1044': attribute type 21 has an invalid length.
[  134.210057][ T8451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1044'.
[  135.238742][ T8480] sctp: [Deprecated]: syz.0.1057 (pid 8480) Use of int in maxseg socket option.
[  135.238742][ T8480] Use struct sctp_assoc_value instead
[  135.537243][ T8495] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1062'.
[  135.616440][ T5237] Bluetooth: hci2: link tx timeout
[  135.627431][ T5237] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.647280][ T5910] Bluetooth: hci2: link tx timeout
[  135.649422][ T5910] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.742164][ T5910] Bluetooth: hci2: link tx timeout
[  135.744303][ T5910] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.769177][ T5910] Bluetooth: hci2: link tx timeout
[  135.771865][ T5910] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.888938][ T8515] lo speed is unknown, defaulting to 1000
[  136.244683][ T5910] Bluetooth: hci2: link tx timeout
[  136.252715][ T5910] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  136.512243][ T8552] lo speed is unknown, defaulting to 1000
[  136.527170][ T5910] Bluetooth: hci2: link tx timeout
[  136.529418][ T5910] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  136.769213][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'.
[  136.778112][ T5910] Bluetooth: hci2: link tx timeout
[  136.780292][ T5910] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  136.915167][ T8574] syzkaller1: entered promiscuous mode
[  136.924169][ T8574] syzkaller1: entered allmulticast mode
[  137.042610][ T8583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.246775][ T8592] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  137.263982][ T5893] lo speed is unknown, defaulting to 1000
[  137.266254][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'.
[  137.274972][ T5893] syz1: Port: 1 Link DOWN
[  137.280698][ T5910] Bluetooth: hci2: link tx timeout
[  137.282662][ T5910] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  137.285882][ T5910] Bluetooth: hci2: link tx timeout
[  137.287881][ T5910] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  137.386985][ T8609] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  137.399778][ T8609] batadv0: left allmulticast mode
[  137.401458][ T8609] batadv0: left promiscuous mode
[  137.405963][ T8609] bridge0: port 1(batadv0) entered disabled state
[  137.410763][ T8609] batman_adv: batadv0: Removing interface: virt_wifi0
[  137.414518][ T8609] bond4: (slave veth3): Releasing active interface
[  137.422272][ T8608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.427790][ T8608] syzkaller0: entered promiscuous mode
[  137.431757][ T8608] syzkaller0: entered allmulticast mode
[  137.435665][ T8609] netlink: 'syz.2.1110': attribute type 10 has an invalid length.
[  137.438253][ T8609] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  137.449530][ T8609] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  137.462803][ T8608] tipc: Resetting bearer <eth:syzkaller0>
[  137.476673][ T8609] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  137.480143][ T8609] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  137.485854][ T8607] tipc: Resetting bearer <eth:syzkaller0>
[  137.499612][ T8607] tipc: Disabling bearer <eth:syzkaller0>
[  137.520794][ T8613] tun0: tun_chr_ioctl cmd 2148045848
[  137.523734][ T8613] tun0: tun_chr_ioctl cmd 21731
[  137.571238][ T5910] Bluetooth: hci2: link tx timeout
[  137.574151][ T5910] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  137.657248][ T5910] Bluetooth: hci2: command 0x0406 tx timeout
[  137.706829][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1114'.
[  137.710718][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1114'.
[  137.802350][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'.
[  137.814332][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'.
[  137.829051][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'.
[  137.834064][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'.
[  138.718328][ T8660] netlink: 'syz.2.1134': attribute type 12 has an invalid length.
[  138.721595][ T8660] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1134'.
[  138.959007][ T8671] openvswitch: netlink: Missing key (keys=40, expected=80)
[  139.172779][ T8681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  139.368730][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'.
[  139.536597][ T8701] netlink: 'syz.1.1154': attribute type 2 has an invalid length.
[  139.540499][ T8701] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  140.265825][ T8750] bridge2: entered promiscuous mode
[  140.268131][ T8750] bridge2: entered allmulticast mode
[  140.281136][ T8750] team0: Port device bridge2 added
[  140.429047][ T8759] rdma_op ffff88811d7419f0 conn xmit_rdma 0000000000000000
[  140.866120][ T8777] netlink: 'syz.0.1188': attribute type 12 has an invalid length.
[  141.019036][ T8787] ==================================================================
[  141.022435][ T8787] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  141.025541][ T8787] Read of size 4 at addr ffff888028e94544 by task syz.0.1193/8787
[  141.029645][ T8787] 
[  141.030674][ T8787] CPU: 1 UID: 0 PID: 8787 Comm: syz.0.1193 Not tainted syzkaller #0 PREEMPT(full) 
[  141.030685][ T8787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.030692][ T8787] Call Trace:
[  141.030705][ T8787]  <TASK>
[  141.030711][ T8787]  dump_stack_lvl+0x189/0x250
[  141.030724][ T8787]  ? __kasan_check_byte+0x12/0x40
[  141.030738][ T8787]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.030747][ T8787]  ? lock_release+0x4b/0x3e0
[  141.030761][ T8787]  ? __virt_addr_valid+0x4a5/0x5c0
[  141.030772][ T8787]  print_report+0xca/0x240
[  141.030779][ T8787]  ? xfrm_alloc_spi+0x570/0xf30
[  141.030788][ T8787]  kasan_report+0x118/0x150
[  141.030799][ T8787]  ? xfrm_alloc_spi+0x570/0xf30
[  141.030809][ T8787]  xfrm_alloc_spi+0x570/0xf30
[  141.030819][ T8787]  ? xfrm_alloc_spi+0x2a0/0xf30
[  141.030830][ T8787]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  141.030840][ T8787]  ? xfrm_find_acq+0x87/0xa0
[  141.030850][ T8787]  xfrm_alloc_userspi+0x70b/0xc90
[  141.030863][ T8787]  ? apparmor_capable+0x137/0x1b0
[  141.030872][ T8787]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  141.030882][ T8787]  ? __nla_parse+0x40/0x60
[  141.030894][ T8787]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.030905][ T8787]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.030937][ T8787]  ? __pfx___mutex_trylock_common+0x10/0x10
[  141.030946][ T8787]  ? rcu_is_watching+0x15/0xb0
[  141.030954][ T8787]  ? trace_contention_end+0x39/0x120
[  141.030962][ T8787]  ? __mutex_lock+0x335/0x1350
[  141.030970][ T8787]  netlink_rcv_skb+0x208/0x470
[  141.030982][ T8787]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.030991][ T8787]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  141.031005][ T8787]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.031017][ T8787]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.031028][ T8787]  xfrm_netlink_rcv+0x79/0x90
[  141.031038][ T8787]  netlink_unicast+0x82f/0x9e0
[  141.031050][ T8787]  ? __pfx_netlink_unicast+0x10/0x10
[  141.031061][ T8787]  ? netlink_sendmsg+0x642/0xb30
[  141.031068][ T8787]  ? skb_put+0x11b/0x210
[  141.031076][ T8787]  netlink_sendmsg+0x805/0xb30
[  141.031084][ T8787]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.031091][ T8787]  ? aa_sock_msg_perm+0xf1/0x1d0
[  141.031098][ T8787]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  141.031106][ T8787]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.031112][ T8787]  __sock_sendmsg+0x21c/0x270
[  141.031123][ T8787]  ____sys_sendmsg+0x505/0x830
[  141.031132][ T8787]  ? __pfx_____sys_sendmsg+0x10/0x10
[  141.031141][ T8787]  ? import_iovec+0x74/0xa0
[  141.031150][ T8787]  ___sys_sendmsg+0x21f/0x2a0
[  141.031158][ T8787]  ? __pfx____sys_sendmsg+0x10/0x10
[  141.031172][ T8787]  ? __fget_files+0x2a/0x420
[  141.031189][ T8787]  ? __fget_files+0x3a0/0x420
[  141.031203][ T8787]  __x64_sys_sendmsg+0x19b/0x260
[  141.031212][ T8787]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  141.031223][ T8787]  ? rcu_is_watching+0x15/0xb0
[  141.031231][ T8787]  ? do_syscall_64+0xbe/0x3b0
[  141.031239][ T8787]  do_syscall_64+0xfa/0x3b0
[  141.031246][ T8787]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.031257][ T8787]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.031264][ T8787]  ? exc_page_fault+0x9f/0xf0
[  141.031275][ T8787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.031282][ T8787] RIP: 0033:0x7fbd0b38eba9
[  141.031323][ T8787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.031331][ T8787] RSP: 002b:00007fbd0c1b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  141.031341][ T8787] RAX: ffffffffffffffda RBX: 00007fbd0b5d5fa0 RCX: 00007fbd0b38eba9
[  141.031348][ T8787] RDX: 0000000024000000 RSI: 0000200000000540 RDI: 0000000000000003
[  141.031353][ T8787] RBP: 00007fbd0b411e19 R08: 0000000000000000 R09: 0000000000000000
[  141.031358][ T8787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.031362][ T8787] R13: 00007fbd0b5d6038 R14: 00007fbd0b5d5fa0 R15: 00007fff57dfdae8
[  141.031372][ T8787]  </TASK>
[  141.031374][ T8787] 
[  141.174990][ T8787] Allocated by task 6692:
[  141.176738][ T8787]  kasan_save_track+0x3e/0x80
[  141.178680][ T8787]  __kasan_slab_alloc+0x6c/0x80
[  141.180584][ T8787]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  141.182754][ T8787]  xfrm_state_alloc+0x24/0x2f0
[  141.184581][ T8787]  __find_acq_core+0x8a7/0x1c00
[  141.186563][ T8787]  xfrm_find_acq+0x78/0xa0
[  141.188335][ T8787]  xfrm_alloc_userspi+0x6b3/0xc90
[  141.190425][ T8787]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.192470][ T8787]  netlink_rcv_skb+0x208/0x470
[  141.194358][ T8787]  xfrm_netlink_rcv+0x79/0x90
[  141.196231][ T8787]  netlink_unicast+0x82f/0x9e0
[  141.198175][ T8787]  netlink_sendmsg+0x805/0xb30
[  141.200069][ T8787]  __sock_sendmsg+0x21c/0x270
[  141.201907][ T8787]  ____sys_sendmsg+0x505/0x830
[  141.203659][ T8787]  ___sys_sendmsg+0x21f/0x2a0
[  141.205068][ T8787]  __x64_sys_sendmsg+0x19b/0x260
[  141.206953][ T8787]  do_syscall_64+0xfa/0x3b0
[  141.208751][ T8787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.210748][ T8787] 
[  141.211735][ T8787] Freed by task 5314:
[  141.213234][ T8787]  kasan_save_track+0x3e/0x80
[  141.215151][ T8787]  kasan_save_free_info+0x46/0x50
[  141.217071][ T8787]  __kasan_slab_free+0x5b/0x80
[  141.218781][ T8787]  kmem_cache_free+0x18f/0x400
[  141.220210][ T8787]  xfrm_state_gc_task+0x52d/0x6b0
[  141.222203][ T8787]  process_scheduled_works+0xae1/0x17b0
[  141.224466][ T8787]  worker_thread+0x8a0/0xda0
[  141.226370][ T8787]  kthread+0x711/0x8a0
[  141.228010][ T8787]  ret_from_fork+0x3fc/0x770
[  141.229663][ T8787]  ret_from_fork_asm+0x1a/0x30
[  141.231571][ T8787] 
[  141.232502][ T8787] The buggy address belongs to the object at ffff888028e94480
[  141.232502][ T8787]  which belongs to the cache xfrm_state of size 928
[  141.237532][ T8787] The buggy address is located 196 bytes inside of
[  141.237532][ T8787]  freed 928-byte region [ffff888028e94480, ffff888028e94820)
[  141.242192][ T8787] 
[  141.243104][ T8787] The buggy address belongs to the physical page:
[  141.245669][ T8787] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028e94480 pfn:0x28e94
[  141.248799][ T8787] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  141.251460][ T8787] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  141.254536][ T8787] page_type: f5(slab)
[  141.256243][ T8787] raw: 00fff00000000040 ffff88801aba18c0 dead000000000122 0000000000000000
[  141.259679][ T8787] raw: ffff888028e94480 00000000800e000d 00000000f5000000 0000000000000000
[  141.263137][ T8787] head: 00fff00000000040 ffff88801aba18c0 dead000000000122 0000000000000000
[  141.266681][ T8787] head: ffff888028e94480 00000000800e000d 00000000f5000000 0000000000000000
[  141.270374][ T8787] head: 00fff00000000002 ffffea0000a3a501 00000000ffffffff 00000000ffffffff
[  141.273995][ T8787] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  141.277075][ T8787] page dumped because: kasan: bad access detected
[  141.279687][ T8787] page_owner tracks the page as allocated
[  141.281703][ T8787] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6392, tgid 6391 (syz.0.183), ts 87062412184, free_ts 80519201378
[  141.288537][ T8787]  post_alloc_hook+0x240/0x2a0
[  141.290233][ T8787]  get_page_from_freelist+0x21e4/0x22c0
[  141.292062][ T8787]  __alloc_frozen_pages_noprof+0x181/0x370
[  141.293842][ T8787]  alloc_pages_mpol+0x232/0x4a0
[  141.295383][ T8787]  allocate_slab+0x8a/0x370
[  141.296898][ T8787]  ___slab_alloc+0xbeb/0x1410
[  141.298848][ T8787]  kmem_cache_alloc_noprof+0x283/0x3c0
[  141.300681][ T8787]  xfrm_state_alloc+0x24/0x2f0
[  141.302290][ T8787]  xfrm_state_find+0x37d4/0x5400
[  141.303966][ T8787]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  141.306192][ T8787]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  141.308303][ T8787]  xfrm_lookup_route+0x3c/0x1c0
[  141.310299][ T8787]  udp_sendmsg+0x142e/0x2170
[  141.312164][ T8787]  __sock_sendmsg+0x19c/0x270
[  141.314251][ T8787]  ____sys_sendmsg+0x52d/0x830
[  141.316247][ T8787]  ___sys_sendmsg+0x21f/0x2a0
[  141.318295][ T8787] page last free pid 5871 tgid 5871 stack trace:
[  141.320940][ T8787]  __free_frozen_pages+0xbc4/0xd30
[  141.323118][ T8787]  __put_partials+0x156/0x1a0
[  141.325136][ T8787]  put_cpu_partial+0x17c/0x250
[  141.327186][ T8787]  __slab_free+0x2d5/0x3c0
[  141.329022][ T8787]  qlist_free_all+0x97/0x140
[  141.330870][ T8787]  kasan_quarantine_reduce+0x148/0x160
[  141.333007][ T8787]  __kasan_slab_alloc+0x22/0x80
[  141.334956][ T8787]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  141.337165][ T8787]  getname_flags+0xb8/0x540
[  141.339019][ T8787]  __x64_sys_rename+0x5d/0x90
[  141.341009][ T8787]  do_syscall_64+0xfa/0x3b0
[  141.342868][ T8787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.345255][ T8787] 
[  141.346252][ T8787] Memory state around the buggy address:
[  141.348521][ T8787]  ffff888028e94400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  141.351665][ T8787]  ffff888028e94480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.354977][ T8787] >ffff888028e94500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.358287][ T8787]                                            ^
[  141.360738][ T8787]  ffff888028e94580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.363751][ T8787]  ffff888028e94600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.366610][ T8787] ==================================================================
[  141.369833][ T8787] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  141.372886][ T8787] CPU: 1 UID: 0 PID: 8787 Comm: syz.0.1193 Not tainted syzkaller #0 PREEMPT(full) 
[  141.376528][ T8787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.380601][ T8787] Call Trace:
[  141.381941][ T8787]  <TASK>
[  141.383091][ T8787]  dump_stack_lvl+0x99/0x250
[  141.384921][ T8787]  ? __asan_memcpy+0x40/0x70
[  141.386798][ T8787]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.388865][ T8787]  ? __pfx__printk+0x10/0x10
[  141.390700][ T8787]  vpanic+0x281/0x750
[  141.392340][ T8787]  ? __pfx_vpanic+0x10/0x10
[  141.394070][ T8787]  ? irqentry_exit+0x74/0x90
[  141.395949][ T8787]  panic+0xb9/0xc0
[  141.397549][ T8787]  ? __pfx_panic+0x10/0x10
[  141.399439][ T8787]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  141.401836][ T8787]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  141.404196][ T8787]  ? xfrm_alloc_spi+0x570/0xf30
[  141.406136][ T8787]  check_panic_on_warn+0x89/0xb0
[  141.408137][ T8787]  ? xfrm_alloc_spi+0x570/0xf30
[  141.410102][ T8787]  end_report+0x78/0x160
[  141.411896][ T8787]  kasan_report+0x129/0x150
[  141.413781][ T8787]  ? xfrm_alloc_spi+0x570/0xf30
[  141.415819][ T8787]  xfrm_alloc_spi+0x570/0xf30
[  141.417764][ T8787]  ? xfrm_alloc_spi+0x2a0/0xf30
[  141.419724][ T8787]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  141.421901][ T8787]  ? xfrm_find_acq+0x87/0xa0
[  141.423786][ T8787]  xfrm_alloc_userspi+0x70b/0xc90
[  141.425821][ T8787]  ? apparmor_capable+0x137/0x1b0
[  141.427843][ T8787]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  141.430058][ T8787]  ? __nla_parse+0x40/0x60
[  141.431894][ T8787]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.433914][ T8787]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.436122][ T8787]  ? __pfx___mutex_trylock_common+0x10/0x10
[  141.438623][ T8787]  ? rcu_is_watching+0x15/0xb0
[  141.440610][ T8787]  ? trace_contention_end+0x39/0x120
[  141.442747][ T8787]  ? __mutex_lock+0x335/0x1350
[  141.444681][ T8787]  netlink_rcv_skb+0x208/0x470
[  141.446577][ T8787]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.448734][ T8787]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  141.450803][ T8787]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.452901][ T8787]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.455312][ T8787]  xfrm_netlink_rcv+0x79/0x90
[  141.457308][ T8787]  netlink_unicast+0x82f/0x9e0
[  141.459277][ T8787]  ? __pfx_netlink_unicast+0x10/0x10
[  141.461412][ T8787]  ? netlink_sendmsg+0x642/0xb30
[  141.463460][ T8787]  ? skb_put+0x11b/0x210
[  141.465199][ T8787]  netlink_sendmsg+0x805/0xb30
[  141.467188][ T8787]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.469327][ T8787]  ? aa_sock_msg_perm+0xf1/0x1d0
[  141.471364][ T8787]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  141.473547][ T8787]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.475737][ T8787]  __sock_sendmsg+0x21c/0x270
[  141.477652][ T8787]  ____sys_sendmsg+0x505/0x830
[  141.479539][ T8787]  ? __pfx_____sys_sendmsg+0x10/0x10
[  141.481582][ T8787]  ? import_iovec+0x74/0xa0
[  141.483426][ T8787]  ___sys_sendmsg+0x21f/0x2a0
[  141.485471][ T8787]  ? __pfx____sys_sendmsg+0x10/0x10
[  141.487788][ T8787]  ? __fget_files+0x2a/0x420
[  141.489577][ T8787]  ? __fget_files+0x3a0/0x420
[  141.491533][ T8787]  __x64_sys_sendmsg+0x19b/0x260
[  141.493539][ T8787]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  141.495708][ T8787]  ? rcu_is_watching+0x15/0xb0
[  141.497653][ T8787]  ? do_syscall_64+0xbe/0x3b0
[  141.499567][ T8787]  do_syscall_64+0xfa/0x3b0
[  141.501405][ T8787]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.503537][ T8787]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.505957][ T8787]  ? exc_page_fault+0x9f/0xf0
[  141.507867][ T8787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.510211][ T8787] RIP: 0033:0x7fbd0b38eba9
[  141.512054][ T8787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.519667][ T8787] RSP: 002b:00007fbd0c1b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  141.523026][ T8787] RAX: ffffffffffffffda RBX: 00007fbd0b5d5fa0 RCX: 00007fbd0b38eba9
[  141.526280][ T8787] RDX: 0000000024000000 RSI: 0000200000000540 RDI: 0000000000000003
[  141.529474][ T8787] RBP: 00007fbd0b411e19 R08: 0000000000000000 R09: 0000000000000000
[  141.532625][ T8787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.535412][ T8787] R13: 00007fbd0b5d6038 R14: 00007fbd0b5d5fa0 R15: 00007fff57dfdae8
[  141.538392][ T8787]  </TASK>
[  141.540109][ T8787] Kernel Offset: disabled
[  141.541715][ T8787] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:18:55  Registers:
info registers vcpu 0

CPU#0
RAX=e8b1c706b8d85300 RBX=ffffffff819683c8 RCX=e8b1c706b8d85300 RDX=0000000000000001
RSI=ffffffff8d9b8017 RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000540 CR3=000000002694c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fbd0b412e53
XMM06=0000000000000000 00007fbd0b412e4d XMM07=0000000000000000 00007fbd0b412e61
XMM08=0000000000000000 00007fbd0b412ee7 XMM09=0000000000000000 00007fbd0b412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001115 RDI=0000000000001116 RBP=00000000000003f8 RSP=ffffc900048de9f0
R8 =ffff88801f258237 R9 =1ffff11003e4b046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd90f R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbd0c1b26c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe24c6ff88 CR3=0000000036336000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbd0b5a7498 00007fbd0b5a7470 XMM03=00007fbd0b5a74a8 00007fbd0b5a74a0
XMM04=00007fbd0c10d100 00007fbd0b5a7460 XMM05=00007fbd0b5a7478 00007fbd0b5a74c0
XMM06=00007fbd0b5a74b8 00007fbd0b5a74b0 XMM07=00007fbd0b5a74a8 00007fbd0b5a74a0
XMM08=0000000000000000 00007fbd0b412ee7 XMM09=0000000000000000 00007fbd0b412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
