last executing test programs:

5.251439296s ago: executing program 0 (id=1009):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x30000, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38)

5.172993839s ago: executing program 0 (id=1010):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x9, 0x0, r0}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000240), 0x0}, 0x20)

5.172496464s ago: executing program 0 (id=1012):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x2, 0x2}}, 0x80, 0x0, 0xfffffffffffffcb5}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

5.119447655s ago: executing program 0 (id=1015):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095981dac1e7daa71dedad078997c4f09d6c6ecd2e58be4d17fed0f2a71bd05f86359f46bab354c15146ca3b5a09aa535d41ad7135adeb82a7ab5f3ef2d2643d4654caf64003b2311d6e1e73019354059cea214946055ea52c1a0b93720ab75573c1e8e630c1dd374851402e9e57443791325bc8d443e13dc89b2ef763c12652d271cb95a119b48f952dcf36e16a88bc5e6ec57fc6af4c988648393cc33a258f6a61d09157aea710f3eaee6cfb9422760282fa3f96ca9"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000012c0)='writeback_sb_inodes_requeue\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x2e}, 0x28)
socket$kcm(0x28, 0x1, 0x0)
socket$kcm(0x28, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xe048d302f6527ed6}, 0xfc2fd648db7d52be)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r6, 0x1, 0x28, &(0x7f0000000000), 0x4)
recvmsg(r6, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.051164315s ago: executing program 1 (id=1037):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4, 0x6e}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x14, 0x0, 0x0, @uid}]}]}, 0x2c}}, 0x0)

3.050819357s ago: executing program 1 (id=1038):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11486, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x1}, 0x200418, 0x2e, 0xfffffbff, 0x4, 0x2, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400"], 0x48)
socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000050000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x90, 0xd, 0x0, 0x0, 0x0, 0x2, 0x3013a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x32328d25}, 0x14188, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x24006840)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4541], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)

344.013726ms ago: executing program 2 (id=1042):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)

343.538581ms ago: executing program 1 (id=1043):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

308.424957ms ago: executing program 2 (id=1044):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4050000000000007910830000000000070000000000000095000000000000000637f79d237f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

301.944419ms ago: executing program 0 (id=1045):
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf", 0x4f}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xcfa4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b2266"], 0xfdef)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x2, 0xd5, 0x0, 0x7, 0x43, 0x40, 0x0, 0x8000, 0x3018, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x104000, 0xe, 0x0, 0x0, 0x4000000000, 0x80001000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {0x0, 0xfe}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = gettid()
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4d31, 0xc0051, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x0, 0x1, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x180, 0xc8, 0x400000, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20b}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x8001, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x12, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x2100000}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000002100)='syzkaller\x00', 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a8064c15494f90324fc", 0x13}], 0x1}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000000206010200000000000000000700ffff0500010006000000050005000a00000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000a9ce8ae9ea0753398ed21129cfa7f140ba3b04b1b511c2b7c2139c0406c9d438bb1259bbb1160b2243aa536c92d1fceb24a5ad65e8d0ba5e07b470dbd0bc2cfbdea9372fc0b6e08f18c678f0c5ce277f44"], 0x4c}, 0x1, 0x0, 0x0, 0x4044081}, 0x4008000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)

256.548762ms ago: executing program 1 (id=1046):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r3=>0x0, 0x0})
close(r3)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$inet(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20000001)
sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0)

256.374378ms ago: executing program 2 (id=1047):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

252.15074ms ago: executing program 2 (id=1048):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0xc, 0xffffffff, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x200, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

172.895666ms ago: executing program 1 (id=1049):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x10, 0x0, 0x1300)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001380)=@in6={0xa, 0x4e21, 0x0, @loopback, 0x1000000}, 0x80, 0x0}, 0x0)

119.827662ms ago: executing program 1 (id=1050):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x73)
socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000600)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0)

119.482736ms ago: executing program 2 (id=1051):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0x400000000000000b, 0x2914b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x3}, 0x11efa, 0x4, 0x7, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)

3.594909ms ago: executing program 2 (id=1052):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x100440d0)

0s ago: executing program 0 (id=1053):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002d00090027bd7000000000000400000008001a8004000380"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50316' (ED25519) to the list of known hosts.
syzkaller login: [   48.174959][ T5779] cgroup: Unknown subsys name 'net'
[   48.258328][ T5779] cgroup: Unknown subsys name 'cpuset'
[   48.263586][ T5779] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.720608][ T5779] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.437294][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.442962][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.446002][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.449663][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.453050][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.525514][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.163229][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.167847][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.170915][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.175261][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.179608][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.236411][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.240041][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.243262][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.248156][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.254584][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.296454][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.300987][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.304247][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.308659][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.312258][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.568563][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   58.653838][ T5881] chnl_net:caif_netlink_parms(): no params data found
[   58.718492][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   58.726076][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.728831][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.731457][ T5877] bridge_slave_0: entered allmulticast mode
[   58.734811][ T5877] bridge_slave_0: entered promiscuous mode
[   58.754692][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.757083][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.759494][ T5877] bridge_slave_1: entered allmulticast mode
[   58.762813][ T5877] bridge_slave_1: entered promiscuous mode
[   58.815984][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.827525][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.830146][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.832781][ T5881] bridge_slave_0: entered allmulticast mode
[   58.836311][ T5881] bridge_slave_0: entered promiscuous mode
[   58.845471][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.850624][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.853377][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.856625][ T5881] bridge_slave_1: entered allmulticast mode
[   58.860298][ T5881] bridge_slave_1: entered promiscuous mode
[   58.921802][ T5877] team0: Port device team_slave_0 added
[   58.938462][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.941088][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.943928][ T5879] bridge_slave_0: entered allmulticast mode
[   58.956136][ T5879] bridge_slave_0: entered promiscuous mode
[   58.960969][ T5877] team0: Port device team_slave_1 added
[   58.966287][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.970350][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.973277][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.976849][ T5879] bridge_slave_1: entered allmulticast mode
[   58.980618][ T5879] bridge_slave_1: entered promiscuous mode
[   58.994862][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.024041][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.026920][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.035702][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.049660][ T5881] team0: Port device team_slave_0 added
[   59.065656][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.068226][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.085142][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.090654][ T5881] team0: Port device team_slave_1 added
[   59.105328][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.125963][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.140575][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.143376][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.152750][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.157216][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.159375][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.168221][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.186693][ T5879] team0: Port device team_slave_0 added
[   59.190973][ T5879] team0: Port device team_slave_1 added
[   59.246429][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.249285][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.259889][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.278307][ T5881] hsr_slave_0: entered promiscuous mode
[   59.281036][ T5881] hsr_slave_1: entered promiscuous mode
[   59.286708][ T5877] hsr_slave_0: entered promiscuous mode
[   59.289291][ T5877] hsr_slave_1: entered promiscuous mode
[   59.291331][ T5877] debugfs: 'hsr0' already exists in 'hsr'
[   59.293218][ T5877] Cannot create hsr debugfs directory
[   59.297795][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.300695][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.311547][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.386067][ T5879] hsr_slave_0: entered promiscuous mode
[   59.389080][ T5879] hsr_slave_1: entered promiscuous mode
[   59.391885][ T5879] debugfs: 'hsr0' already exists in 'hsr'
[   59.394195][ T5879] Cannot create hsr debugfs directory
[   59.617666][ T5877] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.625722][ T5877] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.631397][ T5877] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.643292][ T5877] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.688389][ T5881] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.694077][ T5881] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.713182][ T5881] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.718177][ T5881] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.779519][ T5879] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.788124][ T5879] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.796612][ T5879] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.801437][ T5879] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.821411][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.855393][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   59.875372][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.881311][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.884261][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.890757][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.893695][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.939299][ T5881] 8021q: adding VLAN 0 to HW filter on device team0
[   59.962074][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.965148][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.997620][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.000518][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.059580][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.089339][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   60.099024][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.108694][  T164] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.111687][  T164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.124222][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.127169][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.206716][ T5877] veth0_vlan: entered promiscuous mode
[   60.217627][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.220319][ T5866] Bluetooth: hci0: command tx timeout
[   60.228877][ T5877] veth1_vlan: entered promiscuous mode
[   60.280242][ T5881] veth0_vlan: entered promiscuous mode
[   60.284961][ T5866] Bluetooth: hci1: command tx timeout
[   60.291888][ T5877] veth0_macvtap: entered promiscuous mode
[   60.315396][ T5877] veth1_macvtap: entered promiscuous mode
[   60.319370][ T5881] veth1_vlan: entered promiscuous mode
[   60.352413][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.358853][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.364963][ T5866] Bluetooth: hci2: command tx timeout
[   60.368883][ T5881] veth0_macvtap: entered promiscuous mode
[   60.376313][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.381565][ T5881] veth1_macvtap: entered promiscuous mode
[   60.397755][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.408579][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.411535][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.426357][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.435550][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.445819][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.467427][ T5889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.477870][ T5906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.484000][ T5879] veth0_vlan: entered promiscuous mode
[   60.487565][ T5906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.505954][ T5906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.512187][ T5879] veth1_vlan: entered promiscuous mode
[   60.596865][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.602284][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.607908][ T5879] veth0_macvtap: entered promiscuous mode
[   60.617070][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.620153][ T5879] veth1_macvtap: entered promiscuous mode
[   60.624209][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.649544][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.652208][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.659752][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.663472][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.671886][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.690684][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.717266][ T5889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.727746][ T5906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.731353][ T5906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.756358][ T5906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.798227][ T5946] netlink: 'syz.0.11': attribute type 21 has an invalid length.
[   60.811818][ T5946] netlink: 'syz.0.11': attribute type 1 has an invalid length.
[   60.855607][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.858781][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.903434][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.908830][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.047521][ T5950] Zero length message leads to an empty skb
[   61.126480][ T5958] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.144290][    C0] hrtimer: interrupt took 33153 ns
[   61.224775][ T5950] syz.1.16 (5950) used greatest stack depth: 18176 bytes left
[   61.432869][ T5983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.489786][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'.
[   61.548150][ T5866] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[   61.568377][ T5993] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   61.721973][ T6006] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.41'.
[   61.756622][ T6008] netlink: 'syz.0.42': attribute type 12 has an invalid length.
[   61.760507][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43'.
[   61.766620][ T6008] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.42'.
[   61.882695][ T6014] netlink: 'syz.0.46': attribute type 21 has an invalid length.
[   61.992778][ T6020] netlink: 'syz.1.45': attribute type 3 has an invalid length.
[   61.998367][ T6020] netlink: 152 bytes leftover after parsing attributes in process `syz.1.45'.
[   62.284909][ T5866] Bluetooth: hci0: command tx timeout
[   62.306749][ T6025] openvswitch: netlink: Unknown key attributes 1
[   62.365616][ T5866] Bluetooth: hci1: command tx timeout
[   62.436381][ T6033] tap0: tun_chr_ioctl cmd 1074812118
[   62.446929][ T5866] Bluetooth: hci2: command tx timeout
[   62.549795][ T6037] netlink: 56 bytes leftover after parsing attributes in process `syz.2.55'.
[   63.779205][ T6089] netlink: 'syz.2.80': attribute type 4 has an invalid length.
[   64.428545][ T5866] Bluetooth: hci0: command tx timeout
[   64.454548][ T5866] Bluetooth: hci1: command tx timeout
[   64.470738][ T6120] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.537036][ T5866] Bluetooth: hci2: command tx timeout
[   64.925546][ T6130] =======================================================
[   64.925546][ T6130] WARNING: The mand mount option has been deprecated and
[   64.925546][ T6130]          and is ignored by this kernel. Remove the mand
[   64.925546][ T6130]          option from the mount to silence this warning.
[   64.925546][ T6130] =======================================================
[   65.735671][ T6147] netlink: 'syz.1.106': attribute type 23 has an invalid length.
[   65.931915][ T6162] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   66.059530][ T6170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.111426][ T6176] netlink: 'syz.2.121': attribute type 29 has an invalid length.
[   66.116354][ T6176] netlink: 'syz.2.121': attribute type 29 has an invalid length.
[   66.120415][ T6176] netlink: 'syz.2.121': attribute type 29 has an invalid length.
[   66.259555][ T6186] netlink: 'syz.1.123': attribute type 16 has an invalid length.
[   66.263070][ T6186] netlink: 156 bytes leftover after parsing attributes in process `syz.1.123'.
[   66.377375][ T6180] netlink: 809 bytes leftover after parsing attributes in process `syz.1.123'.
[   66.381963][ T6180] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.123'.
[   66.386838][ T6180] netlink: 809 bytes leftover after parsing attributes in process `syz.1.123'.
[   66.445958][ T5866] Bluetooth: hci0: command tx timeout
[   66.552177][ T5866] Bluetooth: hci1: command tx timeout
[   66.604854][ T5866] Bluetooth: hci2: command tx timeout
[   66.610729][ T6192] netlink: 763 bytes leftover after parsing attributes in process `syz.2.126'.
[   66.616334][ T6192] netlink: 'syz.2.126': attribute type 10 has an invalid length.
[   66.619394][ T6192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.126'.
[   66.622891][ T6192] team0: entered promiscuous mode
[   66.624915][ T6192] team_slave_0: entered promiscuous mode
[   66.626867][ T6192] team_slave_1: entered promiscuous mode
[   66.628837][ T6192] team0: entered allmulticast mode
[   66.630677][ T6192] team_slave_0: entered allmulticast mode
[   66.632526][ T6192] team_slave_1: entered allmulticast mode
[   66.635862][ T6192] bridge0: port 3(team0) entered blocking state
[   66.638442][ T6192] bridge0: port 3(team0) entered disabled state
[   66.642793][ T6192] bridge0: port 3(team0) entered blocking state
[   66.645157][ T6192] bridge0: port 3(team0) entered forwarding state
[   66.759905][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'.
[   66.763954][ T6194] openvswitch: netlink: Unknown nsh attribute 0
[   66.768726][ T6194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.866747][ T6197] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.129'.
[   66.891178][ T6196] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.129'.
[   66.897548][ T6197] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.129'.
[   67.266565][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'.
[   67.673885][ T6225] netlink: 104 bytes leftover after parsing attributes in process `syz.0.142'.
[   67.822102][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'.
[   67.876161][ T6231] netlink: 232 bytes leftover after parsing attributes in process `syz.2.144'.
[   67.878798][ T6225] netlink: 'syz.0.142': attribute type 11 has an invalid length.
[   67.898968][ T6231] netlink: 'syz.2.144': attribute type 5 has an invalid length.
[   67.914513][ T6231] netlink: 'syz.2.144': attribute type 7 has an invalid length.
[   67.926775][ T6224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.926973][ T6231] : entered promiscuous mode
[   70.883342][ T6347] netlink: 'syz.2.187': attribute type 13 has an invalid length.
[   71.058551][ T6347] bridge0: port 3(team0) entered disabled state
[   71.062072][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.065948][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.173075][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.176163][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.211720][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.226992][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.424198][ T5889] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.428871][ T5889] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.432617][ T5889] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.444548][ T5906] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.494333][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   72.739371][ T6389] __nla_validate_parse: 9 callbacks suppressed
[   72.739386][ T6389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.203'.
[   72.803656][ T6389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.106293][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.207'.
[   73.344572][ T6405] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.209'.
[   73.813150][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'.
[   73.873386][ T6430] Illegal XDP return value 4294967274 on prog  (id 75) dev N/A, expect packet loss!
[   73.901632][ T6428] netlink: 'syz.0.219': attribute type 10 has an invalid length.
[   73.911022][ T6428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.219'.
[   73.917655][ T6428] dummy0: entered promiscuous mode
[   73.934889][ T6428] bridge0: port 3(dummy0) entered blocking state
[   73.947338][ T6428] bridge0: port 3(dummy0) entered disabled state
[   73.957253][ T6428] dummy0: entered allmulticast mode
[   73.989821][ T6428] bridge0: port 3(dummy0) entered blocking state
[   73.995596][ T6428] bridge0: port 3(dummy0) entered forwarding state
[   76.717694][ T6489] netlink: 802 bytes leftover after parsing attributes in process `syz.0.248'.
[   76.759640][ T6493] nft_compat: unsupported protocol 0
[   77.199581][ T6529] netlink: 124 bytes leftover after parsing attributes in process `syz.2.267'.
[   77.202500][ T6529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.267'.
[   77.236863][ T6527] netlink: 'syz.0.266': attribute type 12 has an invalid length.
[   77.240674][ T6527] netlink: 132 bytes leftover after parsing attributes in process `syz.0.266'.
[   77.342401][ T6530] syz.0.266 (6530) used obsolete PPPIOCDETACH ioctl
[   77.379724][ T6527] syz.0.266 uses obsolete (PF_INET,SOCK_PACKET)
[   77.862557][ T6553] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.277'.
[   77.869771][ T6553] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ecN^{is|ؖS
[   79.701639][ T5866] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   80.540164][ T6625] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.304'.
[   80.543953][ T6620] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.304'.
[   80.550201][ T6624] netlink: 'syz.1.306': attribute type 12 has an invalid length.
[   80.552909][ T6624] netlink: 132 bytes leftover after parsing attributes in process `syz.1.306'.
[   80.557024][ T6625] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.304'.
[   80.596724][ T6627] netlink: 'syz.0.308': attribute type 27 has an invalid length.
[   80.601592][ T6627] netlink: 164 bytes leftover after parsing attributes in process `syz.0.308'.
[   81.002379][ T6647] netlink: 180 bytes leftover after parsing attributes in process `syz.0.314'.
[   81.315170][ T6652] netlink: 64 bytes leftover after parsing attributes in process `syz.1.313'.
[   81.345307][ T6657] netlink: 'syz.0.318': attribute type 21 has an invalid length.
[   81.412705][  T971] cfg80211: failed to load regulatory.db
[   82.251459][ T6668] netlink: 'syz.0.323': attribute type 97 has an invalid length.
[   82.264627][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'.
[   82.271796][ T6668] netlink: 'syz.0.323': attribute type 97 has an invalid length.
[   82.287170][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'.
[   82.419201][ T6677] netlink: 'syz.1.327': attribute type 29 has an invalid length.
[   82.423184][ T6677] netlink: 'syz.1.327': attribute type 29 has an invalid length.
[   82.430541][ T6677] unsupported nla_type 58
[   82.878708][ T6704] __nla_validate_parse: 4 callbacks suppressed
[   82.878721][ T6704] netlink: 14 bytes leftover after parsing attributes in process `syz.0.340'.
[   82.889181][ T6706] netlink: 'syz.1.341': attribute type 39 has an invalid length.
[   82.893644][ T6706] veth0_macvtap: left promiscuous mode
[   82.950907][ T6708] netlink: 'syz.1.342': attribute type 29 has an invalid length.
[   82.955886][ T6708] netlink: 'syz.1.342': attribute type 29 has an invalid length.
[   83.663945][ T6744] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.358'.
[   83.719790][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'.
[   83.909193][ T6761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'.
[   83.912678][ T6761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'.
[   84.060080][ T6746] syzkaller0: entered promiscuous mode
[   84.061997][ T6746] syzkaller0: entered allmulticast mode
[   84.070574][ T6746] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   84.331942][ T6772] netlink: 44 bytes leftover after parsing attributes in process `syz.0.370'.
[   84.583878][ T6781] lo speed is unknown, defaulting to 1000
[   84.588219][ T6781] lo speed is unknown, defaulting to 1000
[   84.599273][ T6781] lo speed is unknown, defaulting to 1000
[   84.618492][ T6781] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   84.740901][ T6781] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   84.862803][ T6781] lo speed is unknown, defaulting to 1000
[   84.871732][ T6781] lo speed is unknown, defaulting to 1000
[   84.884829][ T6781] lo speed is unknown, defaulting to 1000
[   85.141121][ T6792] netlink: 360 bytes leftover after parsing attributes in process `syz.0.379'.
[   85.343007][ T6802] netlink: 132 bytes leftover after parsing attributes in process `syz.1.384'.
[   85.358128][ T6802] hsr0 speed is unknown, defaulting to 1000
[   85.360792][ T6802] hsr0 speed is unknown, defaulting to 1000
[   85.366206][ T6802] hsr0 speed is unknown, defaulting to 1000
[   85.385779][ T6802] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   85.401665][ T6804] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.382'.
[   85.418580][ T6802] hsr0 speed is unknown, defaulting to 1000
[   85.421638][ T6802] hsr0 speed is unknown, defaulting to 1000
[   85.425686][ T6802] hsr0 speed is unknown, defaulting to 1000
[   85.778160][ T6806] validate_nla: 5 callbacks suppressed
[   85.778217][ T6806] netlink: 'syz.1.385': attribute type 33 has an invalid length.
[   85.785981][ T6806] netlink: 152 bytes leftover after parsing attributes in process `syz.1.385'.
[   86.046759][ T6828] blkio.reset_stats is deprecated
[   86.133751][ T6833] netlink: 'syz.0.396': attribute type 46 has an invalid length.
[   86.616849][ T6853] netlink: 'syz.1.405': attribute type 10 has an invalid length.
[   86.687903][ T6855] netlink: 'syz.1.405': attribute type 29 has an invalid length.
[   86.691157][ T6855] netlink: 'syz.1.405': attribute type 3 has an invalid length.
[   87.595094][ T6853] team0: Device ipvlan1 failed to register rx_handler
[   88.302553][ T6886] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   88.306419][ T6886] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   88.323296][ T6885] __nla_validate_parse: 3 callbacks suppressed
[   88.323310][ T6885] netlink: 188 bytes leftover after parsing attributes in process `syz.2.418'.
[   88.589483][ T6893] sit0: entered allmulticast mode
[   88.608556][ T6893] sit0: entered promiscuous mode
[   89.654969][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.429'.
[   89.882657][ T6918] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.430'.
[   89.888317][ T6918] netlink: zone id is out of range
[   89.890489][ T6918] netlink: zone id is out of range
[   89.892564][ T6918] netlink: get zone limit has 8 unknown bytes
[   89.936461][ T6911] netlink: 32 bytes leftover after parsing attributes in process `syz.2.428'.
[   89.944654][ T6911] openvswitch: netlink: Missing key (keys=40, expected=100)
[   89.957501][ T6920] netlink: 'syz.0.431': attribute type 13 has an invalid length.
[   89.961149][ T6920] netlink: 'syz.0.431': attribute type 17 has an invalid length.
[   90.171259][ T6920] sit0: left promiscuous mode
[   90.173465][ T6920] sit0: left allmulticast mode
[   90.737692][ T6920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.753984][  T971] lo speed is unknown, defaulting to 1000
[   90.896214][   T33] audit: type=1107 audit(1758651406.634:2): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   91.046880][ T6938] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.438'.
[   91.051244][ T6937] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.438'.
[   91.092555][ T6942] netlink: 104 bytes leftover after parsing attributes in process `syz.1.440'.
[   91.095786][ T6938] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.438'.
[   91.199689][ T6945] syzkaller0: entered promiscuous mode
[   91.201902][ T6945] syzkaller0: entered allmulticast mode
[   92.153557][ T6977] netlink: 'syz.2.456': attribute type 29 has an invalid length.
[   92.279977][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.462'.
[   92.286214][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.462'.
[   93.215921][ T7033] netlink: 'syz.2.482': attribute type 21 has an invalid length.
[   93.291316][ T7036] netlink: 'syz.2.483': attribute type 21 has an invalid length.
[   93.475996][ T7044] netlink: 'syz.1.487': attribute type 10 has an invalid length.
[   93.479449][ T7046] netlink: 'syz.2.488': attribute type 10 has an invalid length.
[   93.502531][ T7044] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.514201][ T7044] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   94.881446][ T7112] netlink: 'syz.1.516': attribute type 5 has an invalid length.
[   94.885032][ T7112] netlink: 'syz.1.516': attribute type 7 has an invalid length.
[   94.888264][ T7112] __nla_validate_parse: 4 callbacks suppressed
[   94.888273][ T7112] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.516'.
[   95.168595][ T7136] netlink: 'syz.1.525': attribute type 7 has an invalid length.
[   95.247880][ T7141] netlink: 68 bytes leftover after parsing attributes in process `syz.1.527'.
[   95.322487][ T7145] xt_socket: unknown flags 0x20
[   95.379940][ T7149] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   95.383283][ T7149] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   95.558135][ T7158] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.533'.
[   95.696446][ T7165] netlink: 80 bytes leftover after parsing attributes in process `syz.0.538'.
[   95.703438][ T7165] netlink: 80 bytes leftover after parsing attributes in process `syz.0.538'.
[   95.779458][ T7169] netlink: 'syz.2.541': attribute type 9 has an invalid length.
[   96.453792][ T7207] netlink: 'syz.0.558': attribute type 2 has an invalid length.
[   96.457214][ T7207] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.558'.
[   96.748791][ T7234] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.570'.
[   96.938014][ T7247] lo speed is unknown, defaulting to 1000
[   96.941096][ T7247] hsr0 speed is unknown, defaulting to 1000
[   97.229936][ T7259] C: renamed from team_slave_0 (while UP)
[   97.298620][ T7259] netlink: 164 bytes leftover after parsing attributes in process `syz.0.580'.
[   97.706808][ T7279] validate_nla: 3 callbacks suppressed
[   97.706817][ T7279] netlink: 'syz.1.587': attribute type 2 has an invalid length.
[   97.723339][ T7279] k*: entered promiscuous mode
[   98.004070][ T7308] netlink: 'syz.0.602': attribute type 19 has an invalid length.
[   98.011163][ T7312] netlink: 'syz.1.604': attribute type 10 has an invalid length.
[   98.012775][ T7308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.602'.
[   98.013674][ T7312] netlink: 'syz.1.604': attribute type 16 has an invalid length.
[   98.019250][ T7312] netlink: 156 bytes leftover after parsing attributes in process `syz.1.604'.
[   98.127450][ T7318] netlink: 'syz.2.607': attribute type 5 has an invalid length.
[   98.785464][ T7361] openvswitch: netlink: Invalid VLAN frame
[   98.830315][ T7367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.679931][ T7406] netlink: 'syz.2.647': attribute type 11 has an invalid length.
[   99.684699][ T7405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.301950][ T7422] netlink: 'syz.0.654': attribute type 21 has an invalid length.
[  100.311556][ T7422] __nla_validate_parse: 9 callbacks suppressed
[  100.311569][ T7422] netlink: 156 bytes leftover after parsing attributes in process `syz.0.654'.
[  100.829219][ T7438] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.834037][ T7438] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  101.692230][ T7464] netlink: 'syz.2.671': attribute type 10 has an invalid length.
[  101.976700][ T7474] sctp: [Deprecated]: syz.2.676 (pid 7474) Use of int in max_burst socket option deprecated.
[  101.976700][ T7474] Use struct sctp_assoc_value instead
[  101.990586][ T7474] netlink: 'syz.2.676': attribute type 3 has an invalid length.
[  102.171455][ T7482] netlink: 132 bytes leftover after parsing attributes in process `syz.2.680'.
[  102.416385][ T7502] netlink: 830 bytes leftover after parsing attributes in process `syz.2.689'.
[  102.500669][ T7510] netlink: 76 bytes leftover after parsing attributes in process `syz.2.694'.
[  102.501724][ T7508] netlink: 'syz.1.693': attribute type 10 has an invalid length.
[  102.514585][ T7508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.693'.
[  102.528069][ T7508] batman_adv: batadv0: Adding interface: virt_wifi0
[  102.530846][ T7508] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.545283][ T7508] batman_adv: batadv0: Interface activated: virt_wifi0
[  102.659506][ T7520] netlink: 'syz.0.699': attribute type 32 has an invalid length.
[  102.662738][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'.
[  102.828446][ T7528] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24
[  102.990016][ T7540] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.710'.
[  103.092234][ T7552] netlink: 'syz.2.715': attribute type 29 has an invalid length.
[  103.097838][ T7552] netlink: 'syz.2.715': attribute type 29 has an invalid length.
[  103.101711][ T7552] netlink: 500 bytes leftover after parsing attributes in process `syz.2.715'.
[  103.271501][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'.
[  103.275648][ T7561] netlink: 312 bytes leftover after parsing attributes in process `syz.0.717'.
[  104.236170][ T7593] netlink: 'syz.1.733': attribute type 1 has an invalid length.
[  105.524090][ T5238] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  105.527049][ T5238] Bluetooth: hci0: connection err: -111
[  106.188964][ T7648] __nla_validate_parse: 7 callbacks suppressed
[  106.189036][ T7648] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.756'.
[  106.430211][ T7664] netlink: 144 bytes leftover after parsing attributes in process `syz.1.765'.
[  106.615593][ T7674] netlink: 168 bytes leftover after parsing attributes in process `syz.1.767'.
[  106.770137][ T7686] netlink: 'syz.1.775': attribute type 3 has an invalid length.
[  106.773898][ T7686] netlink: 'syz.1.775': attribute type 2 has an invalid length.
[  106.779470][ T7686] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.775'.
[  106.815774][ T5238] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12
[  106.895105][ T7693] netlink: ct family unspecified
[  106.897211][ T7693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.176243][ T7706] lo: entered allmulticast mode
[  107.184226][  T971] lo speed is unknown, defaulting to 1000
[  107.187041][  T971] syz2: Port: 1 Link DOWN
[  107.192074][ T7706] lo: entered promiscuous mode
[  107.193797][ T7706] lo: left allmulticast mode
[  107.198205][   T24] lo speed is unknown, defaulting to 1000
[  107.204393][   T24] syz2: Port: 1 Link ACTIVE
[  107.264900][ T7711] netlink: 'syz.0.785': attribute type 1 has an invalid length.
[  107.275625][ T7711] netlink: 17 bytes leftover after parsing attributes in process `syz.0.785'.
[  107.322716][ T7715] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.787'.
[  107.328229][ T7715] tc_dump_action: action bad kind
[  107.453398][ T7721] netlink: 'syz.0.790': attribute type 39 has an invalid length.
[  107.951667][ T7735] netlink: 'syz.2.797': attribute type 2 has an invalid length.
[  108.147708][ T7740] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.799'.
[  108.287924][ T7750] netlink: 'syz.2.803': attribute type 9 has an invalid length.
[  108.291186][ T7750] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.803'.
[  108.579093][ T7766] netlink: 92 bytes leftover after parsing attributes in process `syz.0.809'.
[  108.582501][ T7766] netlink: 92 bytes leftover after parsing attributes in process `syz.0.809'.
[  108.844501][ T5238] Bluetooth: hci2: command tx timeout
[  109.447896][ T5238] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6
[  109.554046][ T7812] veth0_vlan: entered allmulticast mode
[  109.593905][ T7812] : renamed from vlan0
[  109.698198][ T7818] netlink: 'syz.1.832': attribute type 3 has an invalid length.
[  111.566785][ T7873] netlink: 'syz.1.854': attribute type 25 has an invalid length.
[  113.079825][ T7899] svc: failed to register nfsdv3 RPC service (errno 111).
[  113.085276][ T7899] svc: failed to register nfsaclv3 RPC service (errno 111).
[  113.588261][ T7901] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  113.592260][ T7901] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  114.130124][ T7929] __nla_validate_parse: 3 callbacks suppressed
[  114.130139][ T7929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.876'.
[  114.138620][ T7929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.876'.
[  115.152817][ T7961] netlink: 'syz.1.891': attribute type 17 has an invalid length.
[  115.440790][ T7965] netlink: 'syz.2.893': attribute type 21 has an invalid length.
[  115.443951][ T7965] netlink: 132 bytes leftover after parsing attributes in process `syz.2.893'.
[  115.689805][ T7984] Unknown options in mask b7f2
[  115.794074][ T5238] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  115.803739][ T5238] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  116.215176][ T8017] netlink: 'syz.0.916': attribute type 6 has an invalid length.
[  116.218568][ T8017] netlink: 168 bytes leftover after parsing attributes in process `syz.0.916'.
[  116.395901][ T8026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  116.587899][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'.
[  116.881992][ T8057] netlink: 76 bytes leftover after parsing attributes in process `syz.1.935'.
[  117.563614][ T8100] netlink: 830 bytes leftover after parsing attributes in process `syz.2.956'.
[  117.782135][ T8105] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.958'.
[  120.096583][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1492245668 wd_nsec: 1492245751
[  120.833240][ T8174] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.989'.
[  121.193474][ T8191] tap0: tun_chr_ioctl cmd 35108
[  123.115789][ T8207] xt_l2tp: missing protocol rule (udp|l2tpip)
[  123.341586][ T8220] netlink: 'syz.0.1012': attribute type 22 has an invalid length.
[  123.366409][ T5238] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[  123.582894][ T8238] netlink: 'syz.1.1020': attribute type 21 has an invalid length.
[  123.737570][ T8244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1023'.
[  123.741447][ T8244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1023'.
[  123.912850][ T5238] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11
[  124.153701][ T8265] netlink: 'syz.1.1032': attribute type 1 has an invalid length.
[  124.387007][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'.
[  128.548854][ T8313] ==================================================================
[  128.551593][ T8313] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  128.554347][ T8313] Read of size 2 at addr ffff88810dbcc142 by task syz.0.1054/8313
[  128.558001][ T8313] 
[  128.558862][ T8313] CPU: 1 UID: 0 PID: 8313 Comm: syz.0.1054 Not tainted syzkaller #0 PREEMPT(full) 
[  128.558871][ T8313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.558876][ T8313] Call Trace:
[  128.558880][ T8313]  <TASK>
[  128.558884][ T8313]  dump_stack_lvl+0x189/0x250
[  128.558895][ T8313]  ? __kasan_check_byte+0x12/0x40
[  128.558907][ T8313]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.558914][ T8313]  ? lock_release+0x4b/0x3e0
[  128.558925][ T8313]  ? __virt_addr_valid+0x4a5/0x5c0
[  128.558934][ T8313]  print_report+0xca/0x240
[  128.558940][ T8313]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  128.558949][ T8313]  kasan_report+0x118/0x150
[  128.558954][ T8313]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  128.558963][ T8313]  __xfrm_state_lookup+0x6ad/0x8d0
[  128.558973][ T8313]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  128.558981][ T8313]  ? xfrm_state_lookup+0x45/0x1e0
[  128.558991][ T8313]  xfrm_state_lookup+0x11e/0x1e0
[  128.559002][ T8313]  ipcomp4_init_state+0x205/0xb20
[  128.559014][ T8313]  ? __xfrm_init_state+0x7ef/0x13f0
[  128.559021][ T8313]  __xfrm_init_state+0xa76/0x13f0
[  128.559027][ T8313]  ? __xfrm_init_state+0x7ef/0x13f0
[  128.559034][ T8313]  xfrm_add_sa+0x2f5b/0x4070
[  128.559041][ T8313]  ? __pfx_xfrm_add_sa+0x10/0x10
[  128.559046][ T8313]  ? apparmor_capable+0x137/0x1b0
[  128.559056][ T8313]  ? __nla_parse+0x40/0x60
[  128.559064][ T8313]  xfrm_user_rcv_msg+0x7a3/0xab0
[  128.559074][ T8313]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  128.559088][ T8313]  ? __pfx___mutex_trylock_common+0x10/0x10
[  128.559095][ T8313]  ? rcu_is_watching+0x15/0xb0
[  128.559102][ T8313]  ? trace_contention_end+0x39/0x120
[  128.559108][ T8313]  ? __mutex_lock+0x335/0x1350
[  128.559117][ T8313]  netlink_rcv_skb+0x208/0x470
[  128.559126][ T8313]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  128.559135][ T8313]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  128.559144][ T8313]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.559151][ T8313]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.559158][ T8313]  xfrm_netlink_rcv+0x79/0x90
[  128.559167][ T8313]  netlink_unicast+0x82f/0x9e0
[  128.559174][ T8313]  ? __pfx_netlink_unicast+0x10/0x10
[  128.559181][ T8313]  ? netlink_sendmsg+0x642/0xb30
[  128.559188][ T8313]  ? skb_put+0x11b/0x210
[  128.559196][ T8313]  netlink_sendmsg+0x805/0xb30
[  128.559205][ T8313]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.559213][ T8313]  ? aa_sock_msg_perm+0xf1/0x1d0
[  128.559221][ T8313]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  128.559229][ T8313]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.559236][ T8313]  __sock_sendmsg+0x21c/0x270
[  128.559243][ T8313]  ____sys_sendmsg+0x505/0x830
[  128.559256][ T8313]  ? __pfx_____sys_sendmsg+0x10/0x10
[  128.559270][ T8313]  ? import_iovec+0x74/0xa0
[  128.559313][ T8313]  ___sys_sendmsg+0x21f/0x2a0
[  128.559328][ T8313]  ? __pfx____sys_sendmsg+0x10/0x10
[  128.559348][ T8313]  ? __fget_files+0x2a/0x420
[  128.559361][ T8313]  ? __fget_files+0x3a0/0x420
[  128.559372][ T8313]  __x64_sys_sendmsg+0x19b/0x260
[  128.559385][ T8313]  ? perf_trace_run_bpf_submit+0x100/0x170
[  128.559399][ T8313]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  128.559414][ T8313]  ? rcu_is_watching+0x15/0xb0
[  128.559427][ T8313]  ? do_syscall_64+0xbe/0x3b0
[  128.559440][ T8313]  do_syscall_64+0xfa/0x3b0
[  128.559454][ T8313]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.559543][ T8313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.559553][ T8313]  ? exc_page_fault+0x9f/0xf0
[  128.559562][ T8313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.559569][ T8313] RIP: 0033:0x7f2096d8ec29
[  128.559576][ T8313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.559582][ T8313] RSP: 002b:00007f2094fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.559590][ T8313] RAX: ffffffffffffffda RBX: 00007f2096fd5fa0 RCX: 00007f2096d8ec29
[  128.559596][ T8313] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  128.559600][ T8313] RBP: 00007f2096e11e41 R08: 0000000000000000 R09: 0000000000000000
[  128.559605][ T8313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.559609][ T8313] R13: 00007f2096fd6038 R14: 00007f2096fd5fa0 R15: 00007ffeca9ae248
[  128.559616][ T8313]  </TASK>
[  128.559619][ T8313] 
[  128.703994][ T8313] Allocated by task 6821:
[  128.705414][ T8313]  kasan_save_track+0x3e/0x80
[  128.706939][ T8313]  __kasan_slab_alloc+0x6c/0x80
[  128.708520][ T8313]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  128.710273][ T8313]  xfrm_state_alloc+0x24/0x2f0
[  128.711899][ T8313]  __find_acq_core+0x8a7/0x1c00
[  128.713757][ T8313]  xfrm_find_acq+0x78/0xa0
[  128.715333][ T8313]  xfrm_alloc_userspi+0x6b3/0xc90
[  128.716967][ T8313]  xfrm_user_rcv_msg+0x7a3/0xab0
[  128.718608][ T8313]  netlink_rcv_skb+0x208/0x470
[  128.720169][ T8313]  xfrm_netlink_rcv+0x79/0x90
[  128.721760][ T8313]  netlink_unicast+0x82f/0x9e0
[  128.723350][ T8313]  netlink_sendmsg+0x805/0xb30
[  128.724902][ T8313]  __sock_sendmsg+0x21c/0x270
[  128.726437][ T8313]  ____sys_sendmsg+0x505/0x830
[  128.727985][ T8313]  ___sys_sendmsg+0x21f/0x2a0
[  128.729520][ T8313]  __x64_sys_sendmsg+0x19b/0x260
[  128.731114][ T8313]  do_syscall_64+0xfa/0x3b0
[  128.732639][ T8313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.734592][ T8313] 
[  128.735387][ T8313] Freed by task 24:
[  128.736631][ T8313]  kasan_save_track+0x3e/0x80
[  128.738167][ T8313]  kasan_save_free_info+0x46/0x50
[  128.739799][ T8313]  __kasan_slab_free+0x5b/0x80
[  128.741364][ T8313]  kmem_cache_free+0x18f/0x400
[  128.742914][ T8313]  xfrm_state_gc_task+0x52d/0x6b0
[  128.744552][ T8313]  process_scheduled_works+0xae1/0x17b0
[  128.746343][ T8313]  worker_thread+0x8a0/0xda0
[  128.747836][ T8313]  kthread+0x711/0x8a0
[  128.749187][ T8313]  ret_from_fork+0x439/0x7d0
[  128.751079][ T8313]  ret_from_fork_asm+0x1a/0x30
[  128.753043][ T8313] 
[  128.754032][ T8313] The buggy address belongs to the object at ffff88810dbcc000
[  128.754032][ T8313]  which belongs to the cache xfrm_state of size 928
[  128.758801][ T8313] The buggy address is located 322 bytes inside of
[  128.758801][ T8313]  freed 928-byte region [ffff88810dbcc000, ffff88810dbcc3a0)
[  128.763166][ T8313] 
[  128.763978][ T8313] The buggy address belongs to the physical page:
[  128.766051][ T8313] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810dbcd200 pfn:0x10dbcc
[  128.769308][ T8313] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  128.772022][ T8313] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  128.774503][ T8313] page_type: f5(slab)
[  128.775836][ T8313] raw: 057ff00000000040 ffff88801db77280 dead000000000122 0000000000000000
[  128.778619][ T8313] raw: ffff88810dbcd200 00000000800e0007 00000000f5000000 0000000000000000
[  128.781388][ T8313] head: 057ff00000000040 ffff88801db77280 dead000000000122 0000000000000000
[  128.784428][ T8313] head: ffff88810dbcd200 00000000800e0007 00000000f5000000 0000000000000000
[  128.787311][ T8313] head: 057ff00000000002 ffffea000436f301 00000000ffffffff 00000000ffffffff
[  128.790085][ T8313] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  128.792864][ T8313] page dumped because: kasan: bad access detected
[  128.794925][ T8313] page_owner tracks the page as allocated
[  128.796788][ T8313] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6645, tgid 6644 (syz.1.313), ts 81237915278, free_ts 79184554224
[  128.803491][ T8313]  post_alloc_hook+0x240/0x2a0
[  128.805442][ T8313]  get_page_from_freelist+0x21e4/0x22c0
[  128.807451][ T8313]  __alloc_frozen_pages_noprof+0x181/0x370
[  128.809419][ T8313]  alloc_pages_mpol+0x232/0x4a0
[  128.811361][ T8313]  allocate_slab+0x8a/0x370
[  128.813176][ T8313]  ___slab_alloc+0xbeb/0x1420
[  128.815028][ T8313]  kmem_cache_alloc_noprof+0x283/0x3c0
[  128.817124][ T8313]  xfrm_state_alloc+0x24/0x2f0
[  128.818741][ T8313]  xfrm_add_sa+0x17d1/0x4070
[  128.820605][ T8313]  xfrm_user_rcv_msg+0x7a3/0xab0
[  128.822624][ T8313]  netlink_rcv_skb+0x208/0x470
[  128.824536][ T8313]  xfrm_netlink_rcv+0x79/0x90
[  128.826392][ T8313]  netlink_unicast+0x82f/0x9e0
[  128.828309][ T8313]  netlink_sendmsg+0x805/0xb30
[  128.830231][ T8313]  __sock_sendmsg+0x21c/0x270
[  128.832157][ T8313]  ____sys_sendmsg+0x505/0x830
[  128.833819][ T8313] page last free pid 6580 tgid 6578 stack trace:
[  128.835921][ T8313]  __free_frozen_pages+0xbc4/0xd30
[  128.837626][ T8313]  __put_partials+0x156/0x1a0
[  128.839163][ T8313]  put_cpu_partial+0x17c/0x250
[  128.840661][ T8313]  __slab_free+0x2d5/0x3c0
[  128.842117][ T8313]  qlist_free_all+0x97/0x140
[  128.843706][ T8313]  kasan_quarantine_reduce+0x148/0x160
[  128.845545][ T8313]  __kasan_slab_alloc+0x22/0x80
[  128.847155][ T8313]  __kmalloc_cache_noprof+0x1be/0x3d0
[  128.848922][ T8313]  bpf_int_jit_compile+0x1b9/0x1450
[  128.850796][ T8313]  bpf_prog_select_runtime+0x49e/0x810
[  128.852530][ T8313]  bpf_prog_load+0x1343/0x1930
[  128.854184][ T8313]  __sys_bpf+0x4ff/0x850
[  128.855719][ T8313]  __x64_sys_bpf+0x7c/0x90
[  128.857467][ T8313]  do_syscall_64+0xfa/0x3b0
[  128.859337][ T8313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.861724][ T8313] 
[  128.862703][ T8313] Memory state around the buggy address:
[  128.864963][ T8313]  ffff88810dbcc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.868179][ T8313]  ffff88810dbcc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.871412][ T8313] >ffff88810dbcc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.874633][ T8313]                                            ^
[  128.877104][ T8313]  ffff88810dbcc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.880358][ T8313]  ffff88810dbcc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.883554][ T8313] ==================================================================
[  128.893620][ T8313] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  128.896515][ T8313] CPU: 1 UID: 0 PID: 8313 Comm: syz.0.1054 Not tainted syzkaller #0 PREEMPT(full) 
[  128.900206][ T8313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.904252][ T8313] Call Trace:
[  128.905679][ T8313]  <TASK>
[  128.906949][ T8313]  dump_stack_lvl+0x99/0x250
[  128.908944][ T8313]  ? __asan_memcpy+0x40/0x70
[  128.910919][ T8313]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.913078][ T8313]  ? __pfx__printk+0x10/0x10
[  128.915010][ T8313]  vpanic+0x281/0x750
[  128.916747][ T8313]  ? preempt_schedule+0xae/0xc0
[  128.918846][ T8313]  ? __pfx_vpanic+0x10/0x10
[  128.920811][ T8313]  ? preempt_schedule_common+0x83/0xd0
[  128.923153][ T8313]  ? preempt_schedule+0xae/0xc0
[  128.925235][ T8313]  ? __pfx_preempt_schedule+0x10/0x10
[  128.927529][ T8313]  panic+0xb9/0xc0
[  128.929123][ T8313]  ? __pfx_panic+0x10/0x10
[  128.931039][ T8313]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  128.933546][ T8313]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  128.935790][ T8313]  check_panic_on_warn+0x89/0xb0
[  128.937923][ T8313]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  128.940171][ T8313]  end_report+0x78/0x160
[  128.942085][ T8313]  kasan_report+0x129/0x150
[  128.944027][ T8313]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  128.946267][ T8313]  __xfrm_state_lookup+0x6ad/0x8d0
[  128.948433][ T8313]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  128.950813][ T8313]  ? xfrm_state_lookup+0x45/0x1e0
[  128.952931][ T8313]  xfrm_state_lookup+0x11e/0x1e0
[  128.955036][ T8313]  ipcomp4_init_state+0x205/0xb20
[  128.957166][ T8313]  ? __xfrm_init_state+0x7ef/0x13f0
[  128.959409][ T8313]  __xfrm_init_state+0xa76/0x13f0
[  128.961527][ T8313]  ? __xfrm_init_state+0x7ef/0x13f0
[  128.963702][ T8313]  xfrm_add_sa+0x2f5b/0x4070
[  128.965694][ T8313]  ? __pfx_xfrm_add_sa+0x10/0x10
[  128.967804][ T8313]  ? apparmor_capable+0x137/0x1b0
[  128.969947][ T8313]  ? __nla_parse+0x40/0x60
[  128.971872][ T8313]  xfrm_user_rcv_msg+0x7a3/0xab0
[  128.974005][ T8313]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  128.976345][ T8313]  ? __pfx___mutex_trylock_common+0x10/0x10
[  128.978835][ T8313]  ? rcu_is_watching+0x15/0xb0
[  128.980855][ T8313]  ? trace_contention_end+0x39/0x120
[  128.983079][ T8313]  ? __mutex_lock+0x335/0x1350
[  128.985054][ T8313]  netlink_rcv_skb+0x208/0x470
[  128.987042][ T8313]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  128.989315][ T8313]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  128.991526][ T8313]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.993717][ T8313]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.995926][ T8313]  xfrm_netlink_rcv+0x79/0x90
[  128.997935][ T8313]  netlink_unicast+0x82f/0x9e0
[  128.999987][ T8313]  ? __pfx_netlink_unicast+0x10/0x10
[  129.002208][ T8313]  ? netlink_sendmsg+0x642/0xb30
[  129.004296][ T8313]  ? skb_put+0x11b/0x210
[  129.006096][ T8313]  netlink_sendmsg+0x805/0xb30
[  129.007754][ T8313]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.009904][ T8313]  ? aa_sock_msg_perm+0xf1/0x1d0
[  129.012001][ T8313]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  129.014244][ T8313]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.016498][ T8313]  __sock_sendmsg+0x21c/0x270
[  129.018515][ T8313]  ____sys_sendmsg+0x505/0x830
[  129.020557][ T8313]  ? __pfx_____sys_sendmsg+0x10/0x10
[  129.022704][ T8313]  ? import_iovec+0x74/0xa0
[  129.024561][ T8313]  ___sys_sendmsg+0x21f/0x2a0
[  129.026201][ T8313]  ? __pfx____sys_sendmsg+0x10/0x10
[  129.028302][ T8313]  ? __fget_files+0x2a/0x420
[  129.030220][ T8313]  ? __fget_files+0x3a0/0x420
[  129.032228][ T8313]  __x64_sys_sendmsg+0x19b/0x260
[  129.034362][ T8313]  ? perf_trace_run_bpf_submit+0x100/0x170
[  129.036845][ T8313]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  129.039175][ T8313]  ? rcu_is_watching+0x15/0xb0
[  129.041238][ T8313]  ? do_syscall_64+0xbe/0x3b0
[  129.043240][ T8313]  do_syscall_64+0xfa/0x3b0
[  129.045184][ T8313]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.047369][ T8313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.049883][ T8313]  ? exc_page_fault+0x9f/0xf0
[  129.051903][ T8313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.054396][ T8313] RIP: 0033:0x7f2096d8ec29
[  129.056267][ T8313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.064300][ T8313] RSP: 002b:00007f2094fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.067794][ T8313] RAX: ffffffffffffffda RBX: 00007f2096fd5fa0 RCX: 00007f2096d8ec29
[  129.071073][ T8313] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  129.074346][ T8313] RBP: 00007f2096e11e41 R08: 0000000000000000 R09: 0000000000000000
[  129.077621][ T8313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.080907][ T8313] R13: 00007f2096fd6038 R14: 00007f2096fd5fa0 R15: 00007ffeca9ae248
[  129.084117][ T8313]  </TASK>
[  129.086146][ T8313] Kernel Offset: disabled
[  129.087862][ T8313] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:17:24  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff888021395bd0 RCX=0000000000000180 RDX=0000000000000100
RSI=dffffc0000000000 RDI=0000000000000000 RBP=0000000000000180 RSP=ffffc90006b87860
R8 =ffffe8ff146544c0 R9 =0000000000000100 R10=dffffc0000000000 R11=ffffed1004182001
R12=0000000000000001 R13=0000000000000010 R14=ffffffff8dbe2d10 R15=ffff88804b03aa88
RIP=ffffffff819b93a1 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555591d3500 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34621ff8 CR3=000000001f9f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81688aff ffffffff8133c59e
XMM02=ffffffff81c94f39 ffffffff8133c59e XMM03=ffffffff81c94eac ffffffff81c94eac
XMM04=ffffffff8173d728 ffffffff8173d60f XMM05=ffffffff8173d60f ffffffff8173d599
XMM06=ffffffff8173d599 ffffffff8173d37f XMM07=ffffffff8173d37f ffffffff8173d34f
XMM08=0000000000000000 00007fcc47a12f0f XMM09=0000000000000000 00007fcc47a12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000014a2 RDI=00000000000014a3 RBP=00000000000003f8 RSP=ffffc900069c6930
R8 =ffff888106500237 R9 =1ffff11020ca0046 R10=dffffc0000000000 R11=ffffffff85501440
R12=dffffc0000000000 R13=ffffffff99b038fd R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff855014bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2094fee6c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558f54d808 CR3=000000011e8e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2096fa7498 00007f2096fa7470 XMM03=00007f2096fa74a8 00007f2096fa74a0
XMM04=00007f2097b0d100 00007f2096fa7460 XMM05=00007f2096fa7478 00007f2096fa74c0
XMM06=00007f2096fa74b8 00007f2096fa74b0 XMM07=00007f2096fa74a8 00007f2096fa74a0
XMM08=0000000000000000 00007f2096e12f0f XMM09=0000000000000000 00007f2096e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
