last executing test programs:

1.300594315s ago: executing program 2 (id=1102):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0xf, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x78}, 0x1, 0x7}, 0x0)

1.300367609s ago: executing program 1 (id=1103):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x42, &(0x7f0000000040), 0xcf)

1.234522274s ago: executing program 1 (id=1104):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000001c0)='GPL\x00', 0x4}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc)

1.234283157s ago: executing program 2 (id=1105):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x2, 0x0, 0x84)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x0})
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000a00050015"], 0x64}}, 0x20008040)

1.076403623s ago: executing program 1 (id=1106):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x1000000, 0x1}]}]}}, &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28)

980.34495ms ago: executing program 1 (id=1107):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r2, r1})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})

685.419816ms ago: executing program 2 (id=1108):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
close(0x3)
r1 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x42)

685.220055ms ago: executing program 2 (id=1109):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

685.005461ms ago: executing program 2 (id=1110):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000001cb, 0x22, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x80, 0x0}, 0x4000080)
recvmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2042)

684.767185ms ago: executing program 2 (id=1111):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x22)
recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230007)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

480.535524ms ago: executing program 0 (id=1116):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x37}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

400.634767ms ago: executing program 0 (id=1117):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0)

399.094967ms ago: executing program 0 (id=1118):
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)

100.724165ms ago: executing program 0 (id=1119):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a80000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffff0000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740f6df546c14000f80080001"], 0xa8}}, 0x74800)

99.786695ms ago: executing program 0 (id=1120):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x6, 0x6e, 0x0, 0x0, @str=']\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

474.353µs ago: executing program 1 (id=1121):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)

313.068µs ago: executing program 0 (id=1122):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback, 0xffffffffffffffff, 0x5, 0xc}, 0x20)

0s ago: executing program 1 (id=1123):
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc)
close(0x3)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x100000830d}, 0x4500, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000580)={0x0, r1}, 0x10)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000100)})
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:64993' (ED25519) to the list of known hosts.
syzkaller login: [   56.098446][ T5830] cgroup: Unknown subsys name 'net'
[   56.253073][ T5830] cgroup: Unknown subsys name 'cpuset'
[   56.260013][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.873640][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.842727][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.846414][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.849908][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.853441][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.856770][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.903245][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.906487][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.909373][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.912676][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.915684][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.941926][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.949068][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.951932][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.955325][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.965733][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.083692][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   64.186888][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.190537][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.193715][ T5844] bridge_slave_0: entered allmulticast mode
[   64.197841][ T5844] bridge_slave_0: entered promiscuous mode
[   64.207242][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.210534][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.213394][ T5844] bridge_slave_1: entered allmulticast mode
[   64.217247][ T5844] bridge_slave_1: entered promiscuous mode
[   64.310639][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.332939][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.386758][ T5844] team0: Port device team_slave_0 added
[   64.390502][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   64.400941][ T5844] team0: Port device team_slave_1 added
[   64.441135][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.443781][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.452300][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.465917][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   64.473989][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.476745][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.486714][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.633654][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.636396][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.639589][ T5849] bridge_slave_0: entered allmulticast mode
[   64.643125][ T5849] bridge_slave_0: entered promiscuous mode
[   64.647301][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.650117][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.652733][ T5849] bridge_slave_1: entered allmulticast mode
[   64.656475][ T5849] bridge_slave_1: entered promiscuous mode
[   64.691841][ T5844] hsr_slave_0: entered promiscuous mode
[   64.694845][ T5844] hsr_slave_1: entered promiscuous mode
[   64.705585][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.708769][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.711795][ T5852] bridge_slave_0: entered allmulticast mode
[   64.715042][ T5852] bridge_slave_0: entered promiscuous mode
[   64.719041][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.721253][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.723572][ T5852] bridge_slave_1: entered allmulticast mode
[   64.726305][ T5852] bridge_slave_1: entered promiscuous mode
[   64.772989][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.778994][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.793047][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.812390][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.875587][ T5849] team0: Port device team_slave_0 added
[   64.887897][ T5852] team0: Port device team_slave_0 added
[   64.892190][ T5849] team0: Port device team_slave_1 added
[   64.896208][ T5852] team0: Port device team_slave_1 added
[   64.939769][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.941961][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.950340][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.980273][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.982437][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.990655][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.995269][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.998736][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.008970][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.022531][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.024781][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.033182][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.095477][ T5849] hsr_slave_0: entered promiscuous mode
[   65.097744][ T5849] hsr_slave_1: entered promiscuous mode
[   65.100660][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   65.102682][ T5849] Cannot create hsr debugfs directory
[   65.125793][ T5852] hsr_slave_0: entered promiscuous mode
[   65.128178][ T5852] hsr_slave_1: entered promiscuous mode
[   65.130478][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   65.132264][ T5852] Cannot create hsr debugfs directory
[   65.211364][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.219167][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.231189][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.250088][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.361109][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.370045][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.376762][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.392024][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.446864][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.451701][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.457638][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.463157][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.521308][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.546663][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   65.566481][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.568900][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.589823][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.592333][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.606140][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.644110][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   65.654952][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.657823][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.681366][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.683601][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.691081][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.735049][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   65.756805][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.759771][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.785351][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.788188][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.845897][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.897520][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.952073][   T55] Bluetooth: hci1: command tx timeout
[   65.954597][   T55] Bluetooth: hci0: command tx timeout
[   65.965760][ T5844] veth0_vlan: entered promiscuous mode
[   65.977924][ T5844] veth1_vlan: entered promiscuous mode
[   66.015071][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.023387][ T5844] veth0_macvtap: entered promiscuous mode
[   66.028631][ T5848] Bluetooth: hci2: command tx timeout
[   66.042260][ T5844] veth1_macvtap: entered promiscuous mode
[   66.065012][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.074311][ T5849] veth0_vlan: entered promiscuous mode
[   66.086671][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.094599][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.100633][ T5849] veth1_vlan: entered promiscuous mode
[   66.107915][ T5861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.117124][ T5861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.122697][ T5861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.126773][ T5861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.213239][ T5849] veth0_macvtap: entered promiscuous mode
[   66.227153][ T5849] veth1_macvtap: entered promiscuous mode
[   66.241096][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.243572][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.251848][ T5852] veth0_vlan: entered promiscuous mode
[   66.266333][ T5852] veth1_vlan: entered promiscuous mode
[   66.295537][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.296993][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.299687][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.317243][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.335819][ T5852] veth0_macvtap: entered promiscuous mode
[   66.342131][ T5861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.345631][ T5861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.363176][ T5861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.376071][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.384354][ T5852] veth1_macvtap: entered promiscuous mode
[   66.391935][ T5861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.426600][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.441634][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.461296][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.493782][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.497111][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.513972][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.515576][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.516692][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.572814][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.577307][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.605773][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.613122][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.659267][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.662079][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.029229][ T5848] Bluetooth: hci0: command tx timeout
[   68.029291][   T55] Bluetooth: hci1: command tx timeout
[   68.109743][   T55] Bluetooth: hci2: command tx timeout
[   68.672019][ T5943] netlink: 'syz.2.15': attribute type 29 has an invalid length.
[   68.676134][ T5943] netlink: 'syz.2.15': attribute type 29 has an invalid length.
[   68.957919][ T5954] netlink: 'syz.1.20': attribute type 10 has an invalid length.
[   68.962396][ T5955] syz.0.21: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   68.969429][ T5955] CPU: 0 UID: 0 PID: 5955 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) 
[   68.969441][ T5955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   68.969447][ T5955] Call Trace:
[   68.969452][ T5955]  <TASK>
[   68.969467][ T5955]  dump_stack_lvl+0x189/0x250
[   68.969483][ T5955]  ? __pfx_dump_stack_lvl+0x10/0x10
[   68.969493][ T5955]  ? __pfx__printk+0x10/0x10
[   68.969511][ T5955]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   68.969522][ T5955]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   68.969532][ T5955]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   68.969542][ T5955]  warn_alloc+0x214/0x310
[   68.969555][ T5955]  ? stack_depot_save_flags+0x41b/0x860
[   68.969567][ T5955]  ? __pfx_warn_alloc+0x10/0x10
[   68.969580][ T5955]  ? kasan_save_track+0x4f/0x80
[   68.969590][ T5955]  ? xskq_create+0x56/0x170
[   68.969599][ T5955]  ? xsk_init_queue+0xb0/0x110
[   68.969645][ T5955]  ? xsk_setsockopt+0x57b/0x8d0
[   68.969655][ T5955]  ? do_sock_setsockopt+0x17c/0x1b0
[   68.969667][ T5955]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   68.969674][ T5955]  ? do_syscall_64+0xfa/0x3b0
[   68.969684][ T5955]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.969695][ T5955]  __vmalloc_node_range_noprof+0x125/0x12f0
[   68.969721][ T5955]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   68.969735][ T5955]  ? __kasan_kmalloc+0x93/0xb0
[   68.969746][ T5955]  vmalloc_user_noprof+0xad/0xf0
[   68.969760][ T5955]  ? xskq_create+0xbf/0x170
[   68.969769][ T5955]  xskq_create+0xbf/0x170
[   68.969780][ T5955]  xsk_init_queue+0xb0/0x110
[   68.969790][ T5955]  xsk_setsockopt+0x57b/0x8d0
[   68.969801][ T5955]  ? __pfx_xsk_setsockopt+0x10/0x10
[   68.969809][ T5955]  ? __pfx_aa_sk_perm+0x10/0x10
[   68.969822][ T5955]  ? __fget_files+0x2a/0x420
[   68.969828][ T5955]  ? aa_sock_opt_perm+0xff/0x1b0
[   68.969836][ T5955]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   68.969844][ T5955]  ? __pfx_xsk_setsockopt+0x10/0x10
[   68.969854][ T5955]  do_sock_setsockopt+0x17c/0x1b0
[   68.969867][ T5955]  __x64_sys_setsockopt+0x13f/0x1b0
[   68.969877][ T5955]  do_syscall_64+0xfa/0x3b0
[   68.969886][ T5955]  ? lockdep_hardirqs_on+0x9c/0x150
[   68.969896][ T5955]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.969903][ T5955]  ? exc_page_fault+0x9f/0xf0
[   68.969914][ T5955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.969921][ T5955] RIP: 0033:0x7fbc0eb8ebe9
[   68.969929][ T5955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.969936][ T5955] RSP: 002b:00007fbc0fa77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   68.969944][ T5955] RAX: ffffffffffffffda RBX: 00007fbc0edb5fa0 RCX: 00007fbc0eb8ebe9
[   68.969950][ T5955] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[   68.969955][ T5955] RBP: 00007fbc0ec11e19 R08: 0000000000000004 R09: 0000000000000000
[   68.969960][ T5955] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   68.969965][ T5955] R13: 00007fbc0edb6038 R14: 00007fbc0edb5fa0 R15: 00007fff053afb08
[   68.969978][ T5955]  </TASK>
[   68.972680][ T5955] Mem-Info:
[   68.975417][ T5954] team0: Device veth1_macvtap failed to register rx_handler
[   68.975835][ T5955] active_anon:5544 inactive_anon:0 isolated_anon:0
[   68.975835][ T5955]  active_file:1193 inactive_file:38207 isolated_file:0
[   68.975835][ T5955]  unevictable:1768 dirty:1391 writeback:0
[   68.975835][ T5955]  slab_reclaimable:9227 slab_unreclaimable:51401
[   68.975835][ T5955]  mapped:18058 shmem:2428 pagetables:932
[   68.975835][ T5955]  sec_pagetables:0 bounce:0
[   68.975835][ T5955]  kernel_misc_reclaimable:0
[   68.975835][ T5955]  free:303304 free_pcp:22163 free_cma:0
[   69.115674][ T5955] Node 0 active_anon:10592kB inactive_anon:0kB active_file:3748kB inactive_file:144788kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35548kB dirty:5384kB writeback:0kB shmem:4900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4672kB pagetables:2416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   69.150267][ T5955] Node 1 active_anon:11584kB inactive_anon:0kB active_file:1024kB inactive_file:8040kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36616kB dirty:180kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6672kB pagetables:1448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   69.164765][ T5955] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   69.179734][ T5955] lowmem_reserve[]: 0 811 811 811 811
[   69.182462][ T5955] Node 0 DMA32 free:296412kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10524kB inactive_anon:0kB active_file:3748kB inactive_file:144788kB unevictable:3536kB writepending:5384kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:39788kB local_pcp:21700kB free_cma:0kB
[   69.197053][ T5955] lowmem_reserve[]: 0 0 0 0 0
[   69.202959][ T5955] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   69.218720][ T5955] lowmem_reserve[]: 0 0 854 854 854
[   69.221493][ T5955] Node 1 Normal free:441608kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11584kB inactive_anon:0kB active_file:1024kB inactive_file:8040kB unevictable:3536kB writepending:180kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:50428kB local_pcp:21796kB free_cma:0kB
[   69.236840][ T5955] lowmem_reserve[]: 0 0 0 0 0
[   69.239677][ T5955] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   69.245464][ T5955] Node 0 DMA32: 76*4kB (UME) 2030*8kB (UM) 21*16kB (UM) 148*32kB (UME) 25*64kB (UME) 8*128kB (UME) 5*256kB (U) 1*512kB (U) 2*1024kB (ME) 1*2048kB (U) 65*4096kB (M) = 296368kB
[   69.254196][ T5955] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   69.262075][ T5955] Node 1 Normal: 112*4kB (ME) 265*8kB (UM) 126*16kB (UME) 7*32kB (ME) 9*64kB (M) 14*128kB (M) 13*256kB (ME) 8*512kB (UM) 11*1024kB (ME) 7*2048kB (UM) 98*4096kB (M) = 441608kB
[   69.276546][ T5955] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   69.281162][ T5955] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   69.285401][ T5955] 41828 total pagecache pages
[   69.287720][ T5955] 0 pages in swap cache
[   69.290232][ T5955] Free swap  = 124996kB
[   69.292936][ T5955] Total swap = 124996kB
[   69.295128][ T5955] 786301 pages RAM
[   69.297043][ T5955] 0 pages HighMem/MovableOnly
[   69.299954][ T5955] 241329 pages reserved
[   69.303561][ T5955] 0 pages cma reserved
[   69.318207][ T5961] syzkaller1: tun_chr_ioctl cmd 1074025677
[   69.320864][ T5961] syzkaller1: linktype set to 780
[   69.348021][ T5958] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22'.
[   69.369766][ T5958] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22'.
[   69.394465][ T5958] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22'.
[   69.425328][    C1] hrtimer: interrupt took 102134 ns
[   69.837227][   T55] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[   69.849902][ T5975] netlink: 104 bytes leftover after parsing attributes in process `syz.1.28'.
[   70.108639][ T5848] Bluetooth: hci1: command tx timeout
[   70.110847][ T5848] Bluetooth: hci0: command tx timeout
[   70.188343][ T5235] Bluetooth: hci2: command tx timeout
[   70.463514][ T6017] netlink: 'syz.0.46': attribute type 39 has an invalid length.
[   71.107285][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.110292][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   72.188408][ T5235] Bluetooth: hci0: command tx timeout
[   72.190760][ T5235] Bluetooth: hci1: command 0x0419 tx timeout
[   72.270836][ T5848] Bluetooth: hci2: command tx timeout
[   72.347827][ T6054] syzkaller0: entered promiscuous mode
[   72.352024][ T6054] syzkaller0: entered allmulticast mode
[   72.381335][ T6064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.64'.
[   72.430407][ T6065] netlink: 60 bytes leftover after parsing attributes in process `syz.0.64'.
[   72.434612][ T6066] netlink: 60 bytes leftover after parsing attributes in process `syz.0.64'.
[   73.287033][ T6109] netlink: 68 bytes leftover after parsing attributes in process `syz.0.81'.
[   73.541492][ T6114] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.83'.
[   74.182329][ T6121] warning: `syz.2.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.268502][   T55] Bluetooth: hci1: command 0x0419 tx timeout
[   75.324061][ T6125] sit0: entered allmulticast mode
[   75.329129][ T6126] sit0: entered promiscuous mode
[   75.427939][ T6136] syz.2.91 uses obsolete (PF_INET,SOCK_PACKET)
[   75.437622][ T6134] Zero length message leads to an empty skb
[   75.695936][ T6147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.95'.
[   75.699822][ T6147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.95'.
[   75.796308][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.96'.
[   75.801159][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.96'.
[   75.895073][ T6153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.97'.
[   76.311823][ T6164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.102'.
[   76.314663][ T6164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.102'.
[   77.777372][ T6187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.875861][ T6193] netlink: 388 bytes leftover after parsing attributes in process `syz.2.114'.
[   78.686180][ T6202] netlink: 'syz.1.118': attribute type 39 has an invalid length.
[   78.715757][ T6204] netlink: 103 bytes leftover after parsing attributes in process `syz.1.119'.
[   79.573998][ T6227] netlink: 'syz.2.128': attribute type 6 has an invalid length.
[   79.576940][ T6227] netlink: 'syz.2.128': attribute type 7 has an invalid length.
[   79.579862][ T6227] netlink: 9 bytes leftover after parsing attributes in process `syz.2.128'.
[   79.586498][ T6227] netlink: 'syz.2.128': attribute type 6 has an invalid length.
[   79.595234][ T6227] netlink: 'syz.2.128': attribute type 7 has an invalid length.
[   79.737959][ T6239] Driver unsupported XDP return value 0 on prog  (id 64) dev N/A, expect packet loss!
[   80.621316][ T6240] delete_channel: no stack
[   81.038014][ T6270] IPv6: Can't replace route, no match found
[   81.320348][   T47] cfg80211: failed to load regulatory.db
[   81.637546][ T6272] delete_channel: no stack
[   81.642527][ T6272] delete_channel: no stack
[   82.033072][ T6291] __nla_validate_parse: 4 callbacks suppressed
[   82.033089][ T6291] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.156'.
[   82.129502][ T6296] netlink: 'syz.1.159': attribute type 2 has an invalid length.
[   82.132778][ T6296] netlink: 51 bytes leftover after parsing attributes in process `syz.1.159'.
[   83.040131][   T55] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[   83.263847][ T6348] tap0: tun_chr_ioctl cmd 1074025675
[   83.269155][ T6348] tap0: persist disabled
[   83.323516][ T6352] netlink: 'syz.2.179': attribute type 1 has an invalid length.
[   83.378869][ T6357] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.783060][ T6367] netlink: 192 bytes leftover after parsing attributes in process `syz.0.185'.
[   83.793498][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[   83.796849][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[   84.235886][ T6358] delete_channel: no stack
[   84.802163][ T6374] netlink: 'syz.1.188': attribute type 2 has an invalid length.
[   84.804833][ T6374] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.188'.
[   84.891379][ T6380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.191'.
[   85.943764][ T6405] bridge0: port 3(veth0_vlan) entered blocking state
[   85.946924][ T6405] bridge0: port 3(veth0_vlan) entered disabled state
[   85.950272][ T6405] veth0_vlan: entered allmulticast mode
[   85.953418][ T6405] veth0_vlan: left allmulticast mode
[   86.138908][ T6423] netlink: 10 bytes leftover after parsing attributes in process `syz.0.211'.
[   86.178796][ T6427] netlink: 'syz.2.213': attribute type 10 has an invalid length.
[   86.505343][ T6444] syzkaller1: tun_chr_ioctl cmd 1074025677
[   86.507785][ T6444] syzkaller1: linktype set to 780
[   86.618938][ T6451] syzkaller1: tun_chr_ioctl cmd 1074025677
[   86.621434][ T6451] syzkaller1: linktype set to 805
[   86.845739][ T6462] netlink: 332 bytes leftover after parsing attributes in process `syz.0.228'.
[   87.180168][ T6479] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.236'.
[   87.524731][   T55] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[   87.699124][ T6505] ksmbd: Unknown IPC event: 1, ignore.
[   87.745729][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'.
[   87.991677][ T6528] netlink: 10 bytes leftover after parsing attributes in process `syz.0.258'.
[   88.198645][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'.
[   88.215945][ T6545] netlink: 125 bytes leftover after parsing attributes in process `syz.2.259'.
[   88.219531][ T6545] netlink: 142 bytes leftover after parsing attributes in process `syz.2.259'.
[   88.499808][ T6554] netlink: 'syz.1.268': attribute type 29 has an invalid length.
[   88.503210][ T6554] netlink: 'syz.1.268': attribute type 3 has an invalid length.
[   88.506496][ T6554] netlink: 132 bytes leftover after parsing attributes in process `syz.1.268'.
[   88.719873][ T6561] netlink: 'syz.1.271': attribute type 1 has an invalid length.
[   88.723120][ T6561] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.271'.
[   89.153549][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[   89.319713][ T6569] netlink: 596 bytes leftover after parsing attributes in process `syz.0.274'.
[   89.365097][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'.
[   89.946787][ T6585] netlink: 'syz.2.282': attribute type 13 has an invalid length.
[   90.696500][ T6585] erspan0: refused to change device tx_queue_len
[   90.699197][ T6585] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   91.101574][ T6607] netlink: 'syz.0.292': attribute type 33 has an invalid length.
[   91.495167][ T6610] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   91.500297][ T6610] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   93.629393][ T5848] Bluetooth: hci0: command 0x0406 tx timeout
[   94.407370][ T6695] netlink: 'syz.2.333': attribute type 10 has an invalid length.
[   94.414690][ T6697] netlink: 'syz.0.334': attribute type 1 has an invalid length.
[   94.417957][ T6697] __nla_validate_parse: 4 callbacks suppressed
[   94.417969][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[   94.428741][ T6695] team0: Device ipvlan1 failed to register rx_handler
[   96.036549][ T6748] netlink: 'syz.1.356': attribute type 11 has an invalid length.
[   96.041883][ T6748] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.356'.
[   96.105474][ T6749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.422016][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'.
[   97.425661][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'.
[   97.503194][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.367'.
[   97.546086][ T6780] netlink: 56 bytes leftover after parsing attributes in process `syz.1.370'.
[   97.721860][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'.
[   97.726728][ T6793] netlink: 2 bytes leftover after parsing attributes in process `syz.1.376'.
[   97.903126][ T6812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'.
[   98.111867][ T6829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'.
[   98.153371][ T6834] netlink: 'syz.0.395': attribute type 3 has an invalid length.
[   98.181269][   T55] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17
[   98.181288][   T55] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[   98.390064][ T6854] sit0: entered allmulticast mode
[   98.706722][ T6857] netdevsim0: mtu less than device minimum
[   99.246433][ T6873] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   99.249482][ T6873] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   99.481588][ T6881] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   99.504784][ T6881] netlink: 'syz.2.414': attribute type 10 has an invalid length.
[   99.760278][ T6881] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  101.716810][ T6947] __nla_validate_parse: 5 callbacks suppressed
[  101.716821][ T6947] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.440'.
[  101.721588][ T6947] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  102.750744][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'.
[  102.833567][ T6975] netlink: 'syz.0.452': attribute type 1 has an invalid length.
[  102.836215][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'.
[  103.124402][ T6996] netlink: 'syz.2.463': attribute type 39 has an invalid length.
[  103.163262][ T7000] netlink: 'syz.0.465': attribute type 3 has an invalid length.
[  103.168201][ T7000] netlink: 132 bytes leftover after parsing attributes in process `syz.0.465'.
[  103.254873][ T7006] netlink: 34 bytes leftover after parsing attributes in process `syz.0.467'.
[  103.496959][ T7028] netlink: 'syz.1.477': attribute type 4 has an invalid length.
[  103.502373][ T7028] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.477'.
[  104.137096][ T7088] netlink: 'syz.2.504': attribute type 10 has an invalid length.
[  104.210492][ T7088] bond0: (slave wlan1): Releasing backup interface
[  104.244237][ T7095] netlink: 'syz.1.507': attribute type 19 has an invalid length.
[  105.846881][ T7129] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.522'.
[  105.970313][ T7139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.526'.
[  106.084960][ T7151] netlink: 60 bytes leftover after parsing attributes in process `syz.2.533'.
[  106.106710][ T7153] netlink: 60 bytes leftover after parsing attributes in process `syz.0.534'.
[  106.361972][ T7176] netlink: 'syz.1.545': attribute type 25 has an invalid length.
[  106.747825][ T7204] netlink: 'syz.1.558': attribute type 10 has an invalid length.
[  106.865445][ T7206] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  106.870409][ T7206] netlink: 'syz.0.559': attribute type 2 has an invalid length.
[  106.873748][ T7206] __nla_validate_parse: 3 callbacks suppressed
[  106.873762][ T7206] netlink: 12374 bytes leftover after parsing attributes in process `syz.0.559'.
[  107.666193][ T7232] netlink: 11318 bytes leftover after parsing attributes in process `syz.2.570'.
[  108.366000][ T7235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.572'.
[  108.370779][ T7235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.572'.
[  108.374969][ T7235] netlink: 60 bytes leftover after parsing attributes in process `syz.1.572'.
[  108.417670][ T7237] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.573'.
[  108.560791][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'.
[  108.653662][ T7255] mac80211_hwsim hwsim5 .3#c: renamed from wlan1 (while UP)
[  109.669581][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'.
[  109.676428][ T7293] netlink: 'syz.1.597': attribute type 10 has an invalid length.
[  110.274331][ T7330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.615'.
[  110.480557][ T7349] sctp: [Deprecated]: syz.2.620 (pid 7349) Use of int in max_burst socket option deprecated.
[  110.480557][ T7349] Use struct sctp_assoc_value instead
[  110.523476][ T7352] netlink: 'syz.0.624': attribute type 1 has an invalid length.
[  110.526885][ T7352] netlink: 'syz.0.624': attribute type 2 has an invalid length.
[  111.239329][ T7390] netlink: 'syz.0.634': attribute type 10 has an invalid length.
[  111.241950][ T7390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.634'.
[  111.244962][ T7390] ipvlan1: entered promiscuous mode
[  111.247671][ T7390] ipvlan1: entered allmulticast mode
[  111.252400][ T7390] veth0_vlan: entered allmulticast mode
[  111.256085][ T7390] bridge0: port 3(ipvlan1) entered blocking state
[  111.259153][ T7390] bridge0: port 3(ipvlan1) entered disabled state
[  111.262898][ T7390] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  111.370221][ T7395] netlink: 'syz.0.636': attribute type 10 has an invalid length.
[  111.376510][ T7395] bridge0: port 3(macsec0) entered blocking state
[  111.380953][ T7395] bridge0: port 3(macsec0) entered disabled state
[  111.383860][ T7395] macsec0: entered allmulticast mode
[  111.385574][ T7395] veth1_macvtap: entered allmulticast mode
[  111.401851][ T7395] macsec0: entered promiscuous mode
[  111.413652][ T7395] bridge0: port 3(macsec0) entered blocking state
[  111.416913][ T7395] bridge0: port 3(macsec0) entered forwarding state
[  112.823693][ T7432] wg0 speed is unknown, defaulting to 1000
[  112.826795][ T7432] wg0 speed is unknown, defaulting to 1000
[  112.833145][ T7432] wg0 speed is unknown, defaulting to 1000
[  112.840910][ T7432] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  112.852310][ T7432] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  112.893373][ T7432] wg0 speed is unknown, defaulting to 1000
[  112.897948][ T7432] wg0 speed is unknown, defaulting to 1000
[  112.907076][ T7432] wg0 speed is unknown, defaulting to 1000
[  112.950820][ T7442] __nla_validate_parse: 2 callbacks suppressed
[  112.950837][ T7442] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.654'.
[  112.957877][ T7442] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.654'.
[  112.967401][ T7442] tc_dump_action: action bad kind
[  113.046447][ T7446] netlink: 'syz.1.656': attribute type 10 has an invalid length.
[  113.947549][ T7500] delete_channel: no stack
[  114.701714][ T7533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.695'.
[  114.778797][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'.
[  114.815717][   T33] audit: type=1107 audit(1755623310.272:2): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  114.861804][ T7547] netlink: 'syz.0.701': attribute type 3 has an invalid length.
[  114.864290][ T7547] netlink: 199752 bytes leftover after parsing attributes in process `syz.0.701'.
[  119.106421][ T7586] netlink: 'syz.1.718': attribute type 13 has an invalid length.
[  119.133331][ T7590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.721'.
[  119.140457][ T7586] netlink: 'syz.1.718': attribute type 17 has an invalid length.
[  119.144277][ T7590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.721'.
[  119.229478][ T7586] sit0: left allmulticast mode
[  119.571948][ T7586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.618929][ T7599] netlink: 96 bytes leftover after parsing attributes in process `syz.0.724'.
[  119.679424][ T7586] syz.1.718 (7586) used greatest stack depth: 18424 bytes left
[  119.746574][ T7608] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.729'.
[  119.911235][ T7612] netlink: 132 bytes leftover after parsing attributes in process `syz.1.730'.
[  119.939313][ T7612] netlink: 132 bytes leftover after parsing attributes in process `syz.1.730'.
[  120.063122][ T7622] netlink: 'syz.0.733': attribute type 13 has an invalid length.
[  120.067066][ T7622] netlink: 'syz.0.733': attribute type 17 has an invalid length.
[  120.356669][ T7622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.796675][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'.
[  120.800952][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.744'.
[  120.806076][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'.
[  121.019139][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.753'.
[  121.098196][ T7667] netlink: 'syz.2.756': attribute type 39 has an invalid length.
[  121.115030][ T7669] netlink: 'syz.1.757': attribute type 21 has an invalid length.
[  121.384255][ T7677] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.559357][ T7691] netlink: 'syz.1.767': attribute type 10 has an invalid length.
[  123.302287][ T7740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.664178][ T7749] netlink: 'syz.2.794': attribute type 8 has an invalid length.
[  123.702803][ T7708] Set syz1 is full, maxelem 65536 reached
[  124.777842][ T7768] can: request_module (can-proto-0) failed.
[  124.795209][ T7771] sctp: [Deprecated]: syz.2.804 (pid 7771) Use of struct sctp_assoc_value in delayed_ack socket option.
[  124.795209][ T7771] Use struct sctp_sack_info instead
[  125.035311][ T7790] __nla_validate_parse: 7 callbacks suppressed
[  125.035334][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.812'.
[  125.105619][ T7795] netlink: 'syz.1.814': attribute type 28 has an invalid length.
[  125.111016][ T7795] netlink: 'syz.1.814': attribute type 3 has an invalid length.
[  125.113415][ T7795] netlink: 132 bytes leftover after parsing attributes in process `syz.1.814'.
[  125.559662][ T7824] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.828'.
[  125.936599][ T7838] netlink: 182 bytes leftover after parsing attributes in process `syz.0.834'.
[  126.037405][ T7842] netlink: 132 bytes leftover after parsing attributes in process `syz.2.836'.
[  126.113344][ T7850] netlink: 92 bytes leftover after parsing attributes in process `syz.0.840'.
[  126.116724][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.840'.
[  126.120008][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.840'.
[  126.626866][ T7887] netlink: 'syz.2.855': attribute type 12 has an invalid length.
[  126.630468][ T7887] netlink: 132 bytes leftover after parsing attributes in process `syz.2.855'.
[  127.267792][ T7920] netlink: 188 bytes leftover after parsing attributes in process `syz.2.871'.
[  127.502349][ T7925] netlink: 'syz.2.871': attribute type 10 has an invalid length.
[  127.516018][ T7925] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  127.623376][ T7927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.636659][ T7913] wg0 speed is unknown, defaulting to 1000
[  128.143376][ T7958] netlink: 'syz.0.884': attribute type 3 has an invalid length.
[  128.416912][ T7980] wg0 speed is unknown, defaulting to 1000
[  129.192347][ T7996] netlink: 'syz.1.901': attribute type 1 has an invalid length.
[  129.435066][ T8012] netlink: 'syz.1.908': attribute type 7 has an invalid length.
[  129.874200][ T8034] syzkaller1: tun_chr_ioctl cmd 2148553947
[  130.121979][ T8044] __nla_validate_parse: 3 callbacks suppressed
[  130.121996][ T8044] netlink: 2 bytes leftover after parsing attributes in process `syz.1.922'.
[  130.193639][ T8044] batadv_slave_1: entered promiscuous mode
[  130.694055][ T8059] netlink: 'syz.2.929': attribute type 41 has an invalid length.
[  130.696678][ T8059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.929'.
[  130.722166][ T8055] netlink: 'syz.0.927': attribute type 28 has an invalid length.
[  130.824877][ T8065] netlink: 188 bytes leftover after parsing attributes in process `syz.0.932'.
[  130.978265][ T8071] netlink: 'syz.0.932': attribute type 10 has an invalid length.
[  130.986464][ T8071] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  131.099036][ T8073] netlink: 763 bytes leftover after parsing attributes in process `syz.2.934'.
[  131.102570][ T8073] netlink: 'syz.2.934': attribute type 10 has an invalid length.
[  131.105008][ T8073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.934'.
[  131.107812][ T8073] team0: entered promiscuous mode
[  131.117325][ T8073] team_slave_0: entered promiscuous mode
[  131.119448][ T8073] team_slave_1: entered promiscuous mode
[  131.121361][ T8073] team0: entered allmulticast mode
[  131.123857][ T8073] team_slave_0: entered allmulticast mode
[  131.126297][ T8073] team_slave_1: entered allmulticast mode
[  131.140444][ T8073] bridge0: port 3(team0) entered blocking state
[  131.145829][ T8073] bridge0: port 3(team0) entered disabled state
[  131.156794][ T8073] bridge0: port 3(team0) entered blocking state
[  131.159631][ T8073] bridge0: port 3(team0) entered forwarding state
[  132.107031][ T8110] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.951'.
[  132.513199][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.515641][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  135.731846][ T8148] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  136.844683][ T8175] netlink: zone id is out of range
[  136.846669][ T8175] netlink: zone id is out of range
[  136.849688][ T8175] netlink: zone id is out of range
[  136.851577][ T8175] netlink: zone id is out of range
[  136.853151][ T8175] netlink: zone id is out of range
[  136.854737][ T8175] netlink: zone id is out of range
[  136.856283][ T8175] netlink: zone id is out of range
[  136.857835][ T8175] netlink: zone id is out of range
[  136.860076][ T8175] netlink: zone id is out of range
[  137.156670][ T8197] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.989'.
[  137.229101][ T8207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.993'.
[  137.233187][ T8207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.993'.
[  137.237195][ T8207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.993'.
[  137.351978][ T8215] netlink: 'syz.0.996': attribute type 28 has an invalid length.
[  137.355173][ T8215] netlink: 'syz.0.996': attribute type 29 has an invalid length.
[  137.364131][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'.
[  137.367482][ T8215] netlink: 132 bytes leftover after parsing attributes in process `syz.0.996'.
[  137.454696][ T8221] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.998'.
[  138.903100][ T8254] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1011'.
[  138.906888][ T8254] batadv_slave_1: entered promiscuous mode
[  139.088001][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'.
[  139.247871][ T8266] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  139.652225][ T8296] netlink: 'syz.2.1030': attribute type 21 has an invalid length.
[  139.654956][ T8296] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1030'.
[  143.224707][ T8434] __nla_validate_parse: 1 callbacks suppressed
[  143.224719][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'.
[  143.351901][ T8442] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1067'.
[  143.484794][ T8456] netlink: 'syz.0.1073': attribute type 13 has an invalid length.
[  143.487407][ T8456] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1073'.
[  143.490727][ T8456] : renamed from syz_tun (while UP)
[  143.495563][ T8456] : refused to change device tx_queue_len
[  143.500272][ T8456] net_ratelimit: 81 callbacks suppressed
[  143.500286][ T8456] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  143.542537][ T8460] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1075'.
[  143.897059][ T8487] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1089'.
[  145.036176][ T8543] netlink: 'syz.0.1114': attribute type 27 has an invalid length.
[  145.039907][ T8543] netlink: 'syz.0.1114': attribute type 1 has an invalid length.
[  145.043121][ T8543] bridge0: port 1(bridge_slave_0) entered learning state
[  145.224727][ T8551] wg0 speed is unknown, defaulting to 1000
[  145.459598][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'.
[  145.508726][ T8557] netlink: 'syz.0.1120': attribute type 11 has an invalid length.
[  145.623853][ T8565] ==================================================================
[  145.627201][ T8565] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  145.630453][ T8565] Read of size 2 at addr ffff8880277eca42 by task syz.0.1124/8565
[  145.634704][ T8565] 
[  145.635712][ T8565] CPU: 1 UID: 0 PID: 8565 Comm: syz.0.1124 Not tainted syzkaller #0 PREEMPT(full) 
[  145.635730][ T8565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.635741][ T8565] Call Trace:
[  145.635747][ T8565]  <TASK>
[  145.635754][ T8565]  dump_stack_lvl+0x189/0x250
[  145.635777][ T8565]  ? __kasan_check_byte+0x12/0x40
[  145.635799][ T8565]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.635816][ T8565]  ? lock_release+0x4b/0x3e0
[  145.635838][ T8565]  ? __virt_addr_valid+0x4a5/0x5c0
[  145.635857][ T8565]  print_report+0xca/0x240
[  145.635871][ T8565]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  145.635892][ T8565]  kasan_report+0x118/0x150
[  145.635911][ T8565]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  145.635937][ T8565]  __xfrm_state_lookup+0x6ad/0x8d0
[  145.635961][ T8565]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  145.635985][ T8565]  xfrm_input_state_lookup+0x6e9/0xa60
[  145.636009][ T8565]  ? xfrm_input_state_lookup+0xcf/0xa60
[  145.636031][ T8565]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  145.636051][ T8565]  ? xfrm_parse_spi+0x300/0x680
[  145.636070][ T8565]  xfrm_input+0x425c/0x72c0
[  145.636092][ T8565]  ? vti6_input_proto+0x56e/0x720
[  145.636109][ T8565]  xfrm6_esp_rcv+0xa9/0x220
[  145.636124][ T8565]  ? __pfx_xfrm6_esp_rcv+0x10/0x10
[  145.636137][ T8565]  ip6_protocol_deliver_rcu+0xe0b/0x15c0
[  145.636165][ T8565]  ip6_input_finish+0x191/0x370
[  145.636185][ T8565]  NF_HOOK+0x30c/0x3a0
[  145.636203][ T8565]  ? __pfx_ip6_input_finish+0x10/0x10
[  145.636221][ T8565]  ? NF_HOOK+0x9a/0x3a0
[  145.636237][ T8565]  ? __pfx_NF_HOOK+0x10/0x10
[  145.636255][ T8565]  ? __pfx_ip6_input_finish+0x10/0x10
[  145.636277][ T8565]  ip6_input+0x16a/0x270
[  145.636293][ T8565]  ? ip6_input+0x23/0x270
[  145.636312][ T8565]  NF_HOOK+0x30c/0x3a0
[  145.636327][ T8565]  ? skb_orphan+0x4f/0xd0
[  145.636345][ T8565]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  145.636362][ T8565]  ? NF_HOOK+0x9a/0x3a0
[  145.636378][ T8565]  ? __pfx_NF_HOOK+0x10/0x10
[  145.636396][ T8565]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  145.636416][ T8565]  __netif_receive_skb+0xd3/0x380
[  145.636437][ T8565]  ? netif_receive_skb+0x115/0x790
[  145.636462][ T8565]  netif_receive_skb+0x1cb/0x790
[  145.636478][ T8565]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  145.636495][ T8565]  ? __pfx_netif_receive_skb+0x10/0x10
[  145.636512][ T8565]  ? perf_trace_preemptirq_template+0x280/0x340
[  145.636533][ T8565]  ? tun_rx_batched+0x160/0x730
[  145.636547][ T8565]  tun_rx_batched+0x1b9/0x730
[  145.636560][ T8565]  ? __lock_acquire+0xab9/0xd20
[  145.636581][ T8565]  ? __pfx_tun_rx_batched+0x10/0x10
[  145.636596][ T8565]  ? tun_get_user+0x266c/0x3e20
[  145.636613][ T8565]  tun_get_user+0x2aa2/0x3e20
[  145.636658][ T8565]  ? tun_get_user+0x266c/0x3e20
[  145.636673][ T8565]  ? aa_file_perm+0x44d/0x1550
[  145.636688][ T8565]  ? __pfx_tun_get_user+0x10/0x10
[  145.636698][ T8565]  ? perf_swevent_event+0x113/0x5e0
[  145.636716][ T8565]  ? __pfx___futex_wait+0x10/0x10
[  145.636738][ T8565]  ? ref_tracker_alloc+0x318/0x460
[  145.636757][ T8565]  ? __lock_acquire+0xab9/0xd20
[  145.636775][ T8565]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  145.636794][ T8565]  ? tun_get+0x1c/0x2f0
[  145.636807][ T8565]  ? tun_get+0x1c/0x2f0
[  145.636819][ T8565]  ? tun_get+0x1c/0x2f0
[  145.636832][ T8565]  tun_chr_write_iter+0x113/0x200
[  145.636853][ T8565]  vfs_write+0x5c9/0xb30
[  145.636872][ T8565]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  145.636893][ T8565]  ? __pfx_vfs_write+0x10/0x10
[  145.636914][ T8565]  ? __fget_files+0x2a/0x420
[  145.636929][ T8565]  ksys_write+0x145/0x250
[  145.636947][ T8565]  ? __pfx_ksys_write+0x10/0x10
[  145.636964][ T8565]  ? rcu_is_watching+0x15/0xb0
[  145.636979][ T8565]  ? do_syscall_64+0xbe/0x3b0
[  145.637000][ T8565]  do_syscall_64+0xfa/0x3b0
[  145.637019][ T8565]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.637036][ T8565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.637050][ T8565]  ? exc_page_fault+0x9f/0xf0
[  145.637068][ T8565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.637081][ T8565] RIP: 0033:0x7fbc0eb8ebe9
[  145.637094][ T8565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.637106][ T8565] RSP: 002b:00007fbc0fa77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  145.637122][ T8565] RAX: ffffffffffffffda RBX: 00007fbc0edb5fa0 RCX: 00007fbc0eb8ebe9
[  145.637134][ T8565] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8
[  145.637143][ T8565] RBP: 00007fbc0ec11e19 R08: 0000000000000000 R09: 0000000000000000
[  145.637152][ T8565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.637160][ T8565] R13: 00007fbc0edb6038 R14: 00007fbc0edb5fa0 R15: 00007fff053afb08
[  145.637177][ T8565]  </TASK>
[  145.637183][ T8565] 
[  145.820641][ T8565] Allocated by task 6569:
[  145.822408][ T8565]  kasan_save_track+0x3e/0x80
[  145.824365][ T8565]  __kasan_slab_alloc+0x6c/0x80
[  145.826390][ T8565]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  145.828711][ T8565]  xfrm_state_alloc+0x24/0x2f0
[  145.830710][ T8565]  __find_acq_core+0x8a7/0x1c00
[  145.832735][ T8565]  xfrm_find_acq+0x78/0xa0
[  145.834597][ T8565]  xfrm_alloc_userspi+0x6b3/0xc90
[  145.836710][ T8565]  xfrm_user_rcv_msg+0x7a3/0xab0
[  145.838761][ T8565]  netlink_rcv_skb+0x208/0x470
[  145.840771][ T8565]  xfrm_netlink_rcv+0x79/0x90
[  145.842698][ T8565]  netlink_unicast+0x82f/0x9e0
[  145.844703][ T8565]  netlink_sendmsg+0x805/0xb30
[  145.846714][ T8565]  __sock_sendmsg+0x21c/0x270
[  145.848661][ T8565]  ____sys_sendmsg+0x505/0x830
[  145.850642][ T8565]  ___sys_sendmsg+0x21f/0x2a0
[  145.852599][ T8565]  __x64_sys_sendmsg+0x19b/0x260
[  145.854678][ T8565]  do_syscall_64+0xfa/0x3b0
[  145.856557][ T8565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.858978][ T8565] 
[  145.859988][ T8565] Freed by task 9:
[  145.861548][ T8565]  kasan_save_track+0x3e/0x80
[  145.863503][ T8565]  kasan_save_free_info+0x46/0x50
[  145.865591][ T8565]  __kasan_slab_free+0x5b/0x80
[  145.867640][ T8565]  kmem_cache_free+0x18f/0x400
[  145.869631][ T8565]  xfrm_state_gc_task+0x52d/0x6b0
[  145.871734][ T8565]  process_scheduled_works+0xae1/0x17b0
[  145.874017][ T8565]  worker_thread+0x8a0/0xda0
[  145.875951][ T8565]  kthread+0x711/0x8a0
[  145.877652][ T8565]  ret_from_fork+0x3fc/0x770
[  145.879347][ T8565]  ret_from_fork_asm+0x1a/0x30
[  145.880819][ T8565] 
[  145.881551][ T8565] The buggy address belongs to the object at ffff8880277ec900
[  145.881551][ T8565]  which belongs to the cache xfrm_state of size 928
[  145.885725][ T8565] The buggy address is located 322 bytes inside of
[  145.885725][ T8565]  freed 928-byte region [ffff8880277ec900, ffff8880277ecca0)
[  145.889846][ T8565] 
[  145.890582][ T8565] The buggy address belongs to the physical page:
[  145.892507][ T8565] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880277ec900 pfn:0x277ec
[  145.895522][ T8565] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  145.898402][ T8565] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  145.901311][ T8565] page_type: f5(slab)
[  145.902891][ T8565] raw: 00fff00000000040 ffff888104f27280 dead000000000122 0000000000000000
[  145.906183][ T8565] raw: ffff8880277ec900 00000000800e000d 00000000f5000000 0000000000000000
[  145.909481][ T8565] head: 00fff00000000040 ffff888104f27280 dead000000000122 0000000000000000
[  145.912817][ T8565] head: ffff8880277ec900 00000000800e000d 00000000f5000000 0000000000000000
[  145.916149][ T8565] head: 00fff00000000002 ffffea00009dfb01 00000000ffffffff 00000000ffffffff
[  145.919503][ T8565] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  145.922117][ T8565] page dumped because: kasan: bad access detected
[  145.924086][ T8565] page_owner tracks the page as allocated
[  145.925841][ T8565] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6229, tgid 6228 (syz.1.130), ts 79566410730, free_ts 79502455309
[  145.932236][ T8565]  post_alloc_hook+0x240/0x2a0
[  145.934146][ T8565]  get_page_from_freelist+0x21e4/0x22c0
[  145.935877][ T8565]  __alloc_frozen_pages_noprof+0x181/0x370
[  145.937650][ T8565]  alloc_pages_mpol+0x232/0x4a0
[  145.939124][ T8565]  allocate_slab+0x8a/0x370
[  145.940921][ T8565]  ___slab_alloc+0xbeb/0x1410
[  145.942694][ T8565]  kmem_cache_alloc_noprof+0x283/0x3c0
[  145.944349][ T8565]  xfrm_state_alloc+0x24/0x2f0
[  145.945824][ T8565]  xfrm_add_acquire+0xf7/0xb20
[  145.947368][ T8565]  xfrm_user_rcv_msg+0x7a3/0xab0
[  145.949009][ T8565]  netlink_rcv_skb+0x208/0x470
[  145.950657][ T8565]  xfrm_netlink_rcv+0x79/0x90
[  145.952320][ T8565]  netlink_unicast+0x82f/0x9e0
[  145.953888][ T8565]  netlink_sendmsg+0x805/0xb30
[  145.955369][ T8565]  __sock_sendmsg+0x21c/0x270
[  145.956852][ T8565]  ____sys_sendmsg+0x505/0x830
[  145.958379][ T8565] page last free pid 6222 tgid 6222 stack trace:
[  145.960507][ T8565]  __free_frozen_pages+0xbc4/0xd30
[  145.962516][ T8565]  __slab_free+0x303/0x3c0
[  145.964197][ T8565]  qlist_free_all+0x97/0x140
[  145.965695][ T8565]  kasan_quarantine_reduce+0x148/0x160
[  145.967465][ T8565]  __kasan_slab_alloc+0x22/0x80
[  145.969069][ T8565]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  145.971013][ T8565]  getname_flags+0xb8/0x540
[  145.972790][ T8565]  __x64_sys_symlinkat+0x7a/0xb0
[  145.974552][ T8565]  do_syscall_64+0xfa/0x3b0
[  145.976004][ T8565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.977862][ T8565] 
[  145.978645][ T8565] Memory state around the buggy address:
[  145.980560][ T8565]  ffff8880277ec900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  145.983157][ T8565]  ffff8880277ec980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  145.985743][ T8565] >ffff8880277eca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  145.988241][ T8565]                                            ^
[  145.990314][ T8565]  ffff8880277eca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  145.993233][ T8565]  ffff8880277ecb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  145.995818][ T8565] ==================================================================
[  145.998648][ T8565] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  146.001095][ T8565] CPU: 1 UID: 0 PID: 8565 Comm: syz.0.1124 Not tainted syzkaller #0 PREEMPT(full) 
[  146.004035][ T8565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.007229][ T8565] Call Trace:
[  146.008306][ T8565]  <TASK>
[  146.009229][ T8565]  dump_stack_lvl+0x99/0x250
[  146.010945][ T8565]  ? __asan_memcpy+0x40/0x70
[  146.012758][ T8565]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.014779][ T8565]  ? __pfx__printk+0x10/0x10
[  146.016584][ T8565]  vpanic+0x281/0x750
[  146.018193][ T8565]  ? __pfx_vpanic+0x10/0x10
[  146.019996][ T8565]  ? irqentry_exit+0x74/0x90
[  146.021849][ T8565]  panic+0xb9/0xc0
[  146.023333][ T8565]  ? __pfx_panic+0x10/0x10
[  146.025099][ T8565]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  146.027472][ T8565]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  146.029371][ T8565]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  146.031366][ T8565]  check_panic_on_warn+0x89/0xb0
[  146.033176][ T8565]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  146.035239][ T8565]  end_report+0x78/0x160
[  146.036946][ T8565]  kasan_report+0x129/0x150
[  146.038773][ T8565]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  146.040871][ T8565]  __xfrm_state_lookup+0x6ad/0x8d0
[  146.042903][ T8565]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  146.045100][ T8565]  xfrm_input_state_lookup+0x6e9/0xa60
[  146.047285][ T8565]  ? xfrm_input_state_lookup+0xcf/0xa60
[  146.049467][ T8565]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  146.051841][ T8565]  ? xfrm_parse_spi+0x300/0x680
[  146.053762][ T8565]  xfrm_input+0x425c/0x72c0
[  146.055555][ T8565]  ? vti6_input_proto+0x56e/0x720
[  146.057534][ T8565]  xfrm6_esp_rcv+0xa9/0x220
[  146.059343][ T8565]  ? __pfx_xfrm6_esp_rcv+0x10/0x10
[  146.061337][ T8565]  ip6_protocol_deliver_rcu+0xe0b/0x15c0
[  146.063554][ T8565]  ip6_input_finish+0x191/0x370
[  146.065497][ T8565]  NF_HOOK+0x30c/0x3a0
[  146.067136][ T8565]  ? __pfx_ip6_input_finish+0x10/0x10
[  146.069259][ T8565]  ? NF_HOOK+0x9a/0x3a0
[  146.070928][ T8565]  ? __pfx_NF_HOOK+0x10/0x10
[  146.072758][ T8565]  ? __pfx_ip6_input_finish+0x10/0x10
[  146.074874][ T8565]  ip6_input+0x16a/0x270
[  146.076551][ T8565]  ? ip6_input+0x23/0x270
[  146.078272][ T8565]  NF_HOOK+0x30c/0x3a0
[  146.079907][ T8565]  ? skb_orphan+0x4f/0xd0
[  146.081778][ T8565]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  146.083646][ T8565]  ? NF_HOOK+0x9a/0x3a0
[  146.085061][ T8565]  ? __pfx_NF_HOOK+0x10/0x10
[  146.086521][ T8565]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  146.088529][ T8565]  __netif_receive_skb+0xd3/0x380
[  146.090537][ T8565]  ? netif_receive_skb+0x115/0x790
[  146.092561][ T8565]  netif_receive_skb+0x1cb/0x790
[  146.094506][ T8565]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  146.096289][ T8565]  ? __pfx_netif_receive_skb+0x10/0x10
[  146.097991][ T8565]  ? perf_trace_preemptirq_template+0x280/0x340
[  146.099881][ T8565]  ? tun_rx_batched+0x160/0x730
[  146.101356][ T8565]  tun_rx_batched+0x1b9/0x730
[  146.102768][ T8565]  ? __lock_acquire+0xab9/0xd20
[  146.104375][ T8565]  ? __pfx_tun_rx_batched+0x10/0x10
[  146.105997][ T8565]  ? tun_get_user+0x266c/0x3e20
[  146.107746][ T8565]  tun_get_user+0x2aa2/0x3e20
[  146.109601][ T8565]  ? tun_get_user+0x266c/0x3e20
[  146.111490][ T8565]  ? aa_file_perm+0x44d/0x1550
[  146.113366][ T8565]  ? __pfx_tun_get_user+0x10/0x10
[  146.115342][ T8565]  ? perf_swevent_event+0x113/0x5e0
[  146.117281][ T8565]  ? __pfx___futex_wait+0x10/0x10
[  146.119236][ T8565]  ? ref_tracker_alloc+0x318/0x460
[  146.121134][ T8565]  ? __lock_acquire+0xab9/0xd20
[  146.122933][ T8565]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  146.124805][ T8565]  ? tun_get+0x1c/0x2f0
[  146.126343][ T8565]  ? tun_get+0x1c/0x2f0
[  146.127750][ T8565]  ? tun_get+0x1c/0x2f0
[  146.129163][ T8565]  tun_chr_write_iter+0x113/0x200
[  146.131089][ T8565]  vfs_write+0x5c9/0xb30
[  146.132724][ T8565]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  146.134864][ T8565]  ? __pfx_vfs_write+0x10/0x10
[  146.136723][ T8565]  ? __fget_files+0x2a/0x420
[  146.138278][ T8565]  ksys_write+0x145/0x250
[  146.139601][ T8565]  ? __pfx_ksys_write+0x10/0x10
[  146.141070][ T8565]  ? rcu_is_watching+0x15/0xb0
[  146.142516][ T8565]  ? do_syscall_64+0xbe/0x3b0
[  146.144033][ T8565]  do_syscall_64+0xfa/0x3b0
[  146.145491][ T8565]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.147213][ T8565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.149179][ T8565]  ? exc_page_fault+0x9f/0xf0
[  146.150891][ T8565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.153080][ T8565] RIP: 0033:0x7fbc0eb8ebe9
[  146.154814][ T8565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.162166][ T8565] RSP: 002b:00007fbc0fa77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  146.165299][ T8565] RAX: ffffffffffffffda RBX: 00007fbc0edb5fa0 RCX: 00007fbc0eb8ebe9
[  146.168330][ T8565] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8
[  146.171260][ T8565] RBP: 00007fbc0ec11e19 R08: 0000000000000000 R09: 0000000000000000
[  146.174294][ T8565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.176818][ T8565] R13: 00007fbc0edb6038 R14: 00007fbc0edb5fa0 R15: 00007fff053afb08
[  146.179532][ T8565]  </TASK>
[  146.181364][ T8565] Kernel Offset: disabled
[  146.182971][ T8565] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:09:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e139ea0 RBP=ffffffff8172c195 RSP=ffffc90007066c78
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90007066e38 R11=ffffffff81ac3930
R12=0000000000000002 R13=ffffffff8e139ea0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d5bb8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd419e1d6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555585d73808 CR3=00000000389ac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f7628e12e53
XMM06=0000000000000000 00007f7628e12e4d XMM07=0000000000000000 00007f7628e12e61
XMM08=0000000000000000 00007f7628e12ee7 XMM09=0000000000000000 00007f7628e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002366 RDI=0000000000002367 RBP=00000000000003f8 RSP=ffffc9000629e870
R8 =ffff888107ec8237 R9 =1ffff11020fd9046 R10=dffffc0000000000 R11=ffffffff854ef930
R12=dffffc0000000000 R13=ffffffff99af9908 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854ef9ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbc0fa776c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000010000 CR3=0000000038ae2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbc0ed87498 00007fbc0ed87470 XMM03=00007fbc0ed874a8 00007fbc0ed874a0
XMM04=00007fbc0f8ed100 00007fbc0ed87460 XMM05=00007fbc0ed87478 00007fbc0ed874c0
XMM06=00007fbc0ed874b8 00007fbc0ed874b0 XMM07=00007fbc0ed874a8 00007fbc0ed874a0
XMM08=0000000000000000 00007fbc0ec12ee7 XMM09=0000000000000000 00007fbc0ec12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
