last executing test programs:

3.909883836s ago: executing program 1 (id=1138):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0xc000)

3.851020199s ago: executing program 1 (id=1139):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xf, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)

3.722911683s ago: executing program 1 (id=1143):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000)
r2 = accept4(r0, 0x0, 0x0, 0x80000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xa}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FRA_DST={0x14, 0x1, @remote}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054)
setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2)
sendmsg$alg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r7 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r7, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1ea1772acf", 0x22}, {&(0x7f0000000080)="e14375812493b65c2cad3ff10481890666d248ff8de5efc72ff8a889f410bf2d1cfe7fbcc29d8f00562ade8a67c72c62c75b7ad335433396c4a0426291511a71a555255111756d1efcc23af35c5bf5d07a514f298928a735c26be2e53e0fff4ee7b3ffbff554b6077cf87d9e11f3c32b9af89abef7d65ea80e787a55018b2e45db7a5fec803c7c0da148d37e95e8be15f7fd1cffeb7a897f1896b96b286b56a52c34ebc1631b116f88bc7dc2c97a577284031c913339227f53553945bf818031e4200d5328d1e92a16869713ffdef988acbff08f5e20032d42677fac", 0xdc}, {&(0x7f0000000180)="ae352ad209582c3ace556142a1327be3b135502feb930bde", 0x18}, {&(0x7f0000000200)="5ee18776dff5442ac20ae821cab7d227f6dfe3ed2d342b5a0da2be4451ad98ecefa0c55a2e4d16079634b4e22fd0afb785becaa7f11ac89dfd09ce9fb78deb1b1817dc56969feb31bf105aad559cf4874dfdf97d18bb7604a817da44c90e1ed930f33efee3984ad2f52e8e3237d76bf98d38795b398bc15b", 0x78}, {&(0x7f0000000540)="95d13135e218eabf70ac850a7e6dd6a25f634b76def4fef822c10a47fbfaa5bde00365452f79ba250e3bfd3df858a8e92d9e3535168dbf6cac790e4d1fa9ef65299355d0c75799e75c90fec701ad8f89c3b115d17beb8e6e6716bb1d646bcca45485a11272d312c6bb1b36aea56f0e24830676bf6b733175cfcf1b19dd6a7a85f523f8e348f9128a4ef48f560a8e0a1b9ff73a04699e6645f0f670b25e3ae799f7a2ee4fd95e80e00189dc7d93e1e4cca9c8ce4ca7ee203c3155b3623ee24e995dd42e67d22f5eb7f766567a247a0f981782f525b126919b9b0adeadff07f29ce8c874", 0xe3}, {&(0x7f0000000640)="1dcbc85af9feec85cdaa90a1f6bb5eca3475c705496a92d182147efa66cf148382493989558a401839427396285c136c7fb1ebd274e08452a219d6f628ebb9408650139466606c4c0b1a2bfeff287f23d5151bdeb54e8d21e2d1916360a117fbcbcf6cfa61c24dde9f441b300f4e4d66698caa882bf762bfa566e76cbf8e4bd1ed199dacf2367d50ec09216127e9e5f168fb85d01333cba55a89ad021e0c79d79b9ccb75fb50059fcd959664abb5600ac38d", 0xb2}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x30, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0e4387aa3e2d356dcb1c5eb1d0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x90)

2.881034009s ago: executing program 1 (id=1162):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x6}]}}}]}, 0x3c}}, 0x0)

2.796928701s ago: executing program 1 (id=1163):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
accept(r0, 0x0, 0x0)

2.73091309s ago: executing program 1 (id=1164):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="a4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="8c7e9846", 0x4}], 0x1}}], 0x2, 0xc8040)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6)

1.909657834s ago: executing program 0 (id=1190):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x10000000}]}}]}, 0x3c}}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008050}, 0x20004044)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r10, 0x7800, 0x7800, 0x6, 0x6, {{0x26, 0x4, 0x3, 0xd, 0x98, 0x64, 0x0, 0xc, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0xb, "91c6a38b8e39dea2b3"}, @timestamp_addr={0x44, 0x54, 0x52, 0x1, 0x8, [{@remote, 0x40}, {@remote, 0xc}, {@empty}, {@multicast1, 0x4}, {@rand_addr=0x64010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xa}, {@multicast1}, {@private=0xa010101, 0xb}, {@empty, 0xe8c}, {@rand_addr=0x64010101, 0x3}]}, @generic={0x89, 0xb, "2c28ebc234b6b12dc0"}, @end, @lsrr={0x83, 0x13, 0x5c, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast]}, @generic={0x0, 0x2}, @lsrr={0x83, 0x3, 0x5b}]}}}}})
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r12, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

1.684661018s ago: executing program 0 (id=1195):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = epoll_create1(0x0)
r1 = socket(0x1, 0x80802, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001})
shutdown(r1, 0x0)

799.19157ms ago: executing program 0 (id=1198):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x24, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)

709.231424ms ago: executing program 0 (id=1199):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x400, 0x0, {0x7}, [@generic='~']}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0)

638.553566ms ago: executing program 0 (id=1201):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)={0x38, r1, 0x1, 0x4000000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0xc000)

637.696447ms ago: executing program 0 (id=1203):
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
r0 = socket(0x10, 0x3, 0x0)
close(0x3)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
accept$netrom(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
recvmmsg(r1, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
close(0x4)

231.224286ms ago: executing program 2 (id=1209):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newsa={0x144, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {0x1, 0x0, 0x2}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'morus640-generic\x00'}, 0x0, 0x80}}, @extra_flags={0x8, 0x18, 0x5}]}, 0x144}}, 0x0)

148.184175ms ago: executing program 2 (id=1210):
socket$packet(0x11, 0x2, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c)

147.824817ms ago: executing program 2 (id=1211):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001240)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x10)
close(r1)

80.938678ms ago: executing program 2 (id=1212):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x18, 0x0, 0x2}, 0x28)

80.708336ms ago: executing program 2 (id=1213):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

0s ago: executing program 2 (id=1214):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28644' (ED25519) to the list of known hosts.
syzkaller login: [   56.046952][ T5810] cgroup: Unknown subsys name 'net'
[   56.172055][ T5810] cgroup: Unknown subsys name 'cpuset'
[   56.178645][ T5810] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.383739][ T5810] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.171456][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.174044][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.426677][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.431678][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.434820][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.439074][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.456145][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.460794][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.463886][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.479111][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.493974][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.498889][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.562763][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.566027][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.580356][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.593994][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.603082][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.894578][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   71.981817][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   72.097437][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.101994][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.104874][ T5857] bridge_slave_0: entered allmulticast mode
[   72.110014][ T5857] bridge_slave_0: entered promiscuous mode
[   72.129503][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.132414][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.135302][ T5857] bridge_slave_1: entered allmulticast mode
[   72.139817][ T5857] bridge_slave_1: entered promiscuous mode
[   72.170774][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   72.210025][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.213677][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.216609][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.220648][ T5854] bridge_slave_0: entered allmulticast mode
[   72.223777][ T5854] bridge_slave_0: entered promiscuous mode
[   72.255397][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.260082][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.262503][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.264725][ T5854] bridge_slave_1: entered allmulticast mode
[   72.267392][ T5854] bridge_slave_1: entered promiscuous mode
[   72.330656][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.335569][ T5857] team0: Port device team_slave_0 added
[   72.344851][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.351058][ T5857] team0: Port device team_slave_1 added
[   72.412360][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.414737][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.418761][ T5864] bridge_slave_0: entered allmulticast mode
[   72.421641][ T5864] bridge_slave_0: entered promiscuous mode
[   72.438188][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.440467][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.448865][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.453516][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.455984][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.459304][ T5864] bridge_slave_1: entered allmulticast mode
[   72.462020][ T5864] bridge_slave_1: entered promiscuous mode
[   72.466906][ T5854] team0: Port device team_slave_0 added
[   72.472932][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.475323][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.483423][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.497163][ T5854] team0: Port device team_slave_1 added
[   72.536380][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.557248][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.559966][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.569738][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.575505][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.578519][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.588614][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.595299][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.650817][ T5864] team0: Port device team_slave_0 added
[   72.654457][ T5864] team0: Port device team_slave_1 added
[   72.715455][ T5854] hsr_slave_0: entered promiscuous mode
[   72.718150][ T5854] hsr_slave_1: entered promiscuous mode
[   72.725615][ T5857] hsr_slave_0: entered promiscuous mode
[   72.729286][ T5857] hsr_slave_1: entered promiscuous mode
[   72.731980][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.735141][ T5857] Cannot create hsr debugfs directory
[   72.750196][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.752401][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.762062][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.767884][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.770120][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.779284][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.931181][ T5864] hsr_slave_0: entered promiscuous mode
[   72.934259][ T5864] hsr_slave_1: entered promiscuous mode
[   72.936931][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.940757][ T5864] Cannot create hsr debugfs directory
[   73.179677][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.191202][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.216860][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.248497][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.326190][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.341634][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.351023][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.360426][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.435470][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.443418][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.450715][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.457178][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.498615][ T5218] Bluetooth: hci1: command tx timeout
[   73.562881][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.571425][ T5218] Bluetooth: hci0: command tx timeout
[   73.610607][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   73.618780][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.639372][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.641648][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.646111][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.648994][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.658250][ T5218] Bluetooth: hci2: command tx timeout
[   73.673783][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   73.695521][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.705332][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.708117][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.728652][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.730830][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.742500][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   73.764714][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.766902][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.785052][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.787363][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.954055][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.040987][ T5857] veth0_vlan: entered promiscuous mode
[   74.047148][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.066493][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.074079][ T5857] veth1_vlan: entered promiscuous mode
[   74.126142][ T5857] veth0_macvtap: entered promiscuous mode
[   74.136930][ T5854] veth0_vlan: entered promiscuous mode
[   74.143438][ T5857] veth1_macvtap: entered promiscuous mode
[   74.156262][ T5854] veth1_vlan: entered promiscuous mode
[   74.183782][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.186865][ T5864] veth0_vlan: entered promiscuous mode
[   74.198842][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.211192][ T5864] veth1_vlan: entered promiscuous mode
[   74.223786][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.228220][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.231076][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.234716][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.299924][ T5854] veth0_macvtap: entered promiscuous mode
[   74.311304][ T5854] veth1_macvtap: entered promiscuous mode
[   74.320391][ T5864] veth0_macvtap: entered promiscuous mode
[   74.341463][ T5864] veth1_macvtap: entered promiscuous mode
[   74.371406][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.401482][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.403976][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.404665][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.414909][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.449920][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.461380][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.465101][ T5658] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.465588][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.471359][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.474603][ T5658] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.486514][ T5658] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.500429][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.503456][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.519977][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.523554][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.580491][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.651198][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.653727][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.704436][ T1202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.706487][ T5920] bond0: Unable to set down delay as MII monitoring is disabled
[   74.706919][ T1202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.735583][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.742370][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.798455][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.801446][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.404375][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.30'.
[   75.570098][ T5218] Bluetooth: hci1: command tx timeout
[   75.649064][ T5218] Bluetooth: hci0: command tx timeout
[   75.728194][ T5218] Bluetooth: hci2: command tx timeout
[   75.805717][ T5981] netlink: 6 bytes leftover after parsing attributes in process `syz.0.42'.
[   75.935091][ T5989] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.313475][ T6011] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.666245][ T6026] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   76.718994][ T6030] netlink: 'syz.0.63': attribute type 9 has an invalid length.
[   76.721507][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'.
[   76.749307][ T6030] hsr0: entered promiscuous mode
[   76.751826][ T6030] macvlan2: entered promiscuous mode
[   76.754118][ T6030] macvlan2: entered allmulticast mode
[   76.756278][ T6030] hsr0: entered allmulticast mode
[   76.761391][ T6030] hsr_slave_0: entered allmulticast mode
[   76.763619][ T6030] hsr_slave_1: entered allmulticast mode
[   76.886106][ T6039] Bluetooth: MGMT ver 1.23
[   76.991532][ T6050] warning: `syz.1.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.653196][ T5218] Bluetooth: hci1: command tx timeout
[   77.728696][ T5218] Bluetooth: hci0: command tx timeout
[   77.808605][ T5218] Bluetooth: hci2: command tx timeout
[   78.244238][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.2.103'.
[   78.259038][ T6122] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   78.326522][ T6126] openvswitch: netlink: Tunnel attr 7 has unexpected len 4 expected 0
[   78.341765][ T6124] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   78.682990][ T6148] netlink: 256 bytes leftover after parsing attributes in process `syz.2.117'.
[   78.978681][ T6159] syz.2.122 uses obsolete (PF_INET,SOCK_PACKET)
[   79.240924][ T6169] tipc: Started in network mode
[   79.243132][ T6169] tipc: Node identity f2a9104c1bf1, cluster identity 4711
[   79.246121][ T6169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.256333][ T6169] syzkaller0: entered promiscuous mode
[   79.260287][ T6169] syzkaller0: entered allmulticast mode
[   79.304784][ T6169] tipc: Resetting bearer <eth:syzkaller0>
[   79.313975][ T6168] tipc: Resetting bearer <eth:syzkaller0>
[   79.338398][ T6168] tipc: Disabling bearer <eth:syzkaller0>
[   79.738273][ T5218] Bluetooth: hci1: command tx timeout
[   79.783450][ T6189] batadv_slave_0: entered promiscuous mode
[   79.787244][ T6188] batadv_slave_0: left promiscuous mode
[   79.810144][ T5218] Bluetooth: hci0: command tx timeout
[   79.887832][ T5218] Bluetooth: hci2: command tx timeout
[   80.564006][ T6207] xt_l2tp: wrong L2TP version: 0
[   80.630187][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'.
[   80.695133][ T6213] netlink: 10 bytes leftover after parsing attributes in process `syz.0.145'.
[   80.842862][ T6224] netlink: 92 bytes leftover after parsing attributes in process `syz.0.149'.
[   81.823646][ T6261] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   83.255997][ T6335] Zero length message leads to an empty skb
[   83.305473][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'.
[   83.319360][ T6328] Illegal XDP return value 4294967274 on prog  (id 36) dev N/A, expect packet loss!
[   83.578782][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'.
[   83.809754][ T5658] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   86.148834][ T6433] netlink: 44 bytes leftover after parsing attributes in process `syz.2.235'.
[   86.151685][ T6433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.235'.
[   86.329901][ T5905] IPVS: starting estimator thread 0...
[   86.349055][ T6446] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   86.420697][ T6448] IPVS: using max 64 ests per chain, 153600 per kthread
[   86.534333][   T24] cfg80211: failed to load regulatory.db
[   88.213759][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'.
[   89.065929][ T6533] bridge0: entered promiscuous mode
[   89.333491][ T6548] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.284'.
[   89.343448][ T6544] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.284'.
[   89.521415][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'.
[   89.610732][ T6560] netlink: 452 bytes leftover after parsing attributes in process `syz.1.291'.
[   91.065140][ T6618] netlink: 22 bytes leftover after parsing attributes in process `syz.2.317'.
[   91.462559][ T6642] netlink: 64 bytes leftover after parsing attributes in process `syz.0.328'.
[   91.697399][ T6662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.335'.
[   91.707614][ T6662] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   91.778909][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'.
[   91.780318][ T6669] xt_nat: multiple ranges no longer supported
[   91.846187][ T6676] xt_CT: You must specify a L4 protocol and not use inversions on it
[   91.893546][ T6678] netlink: 'syz.2.344': attribute type 2 has an invalid length.
[   91.953507][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.346'.
[   92.032557][ T6692] netlink: 36 bytes leftover after parsing attributes in process `syz.1.343'.
[   92.035968][ T6692] netlink: 36 bytes leftover after parsing attributes in process `syz.1.343'.
[   92.429388][ T6709] x_tables: unsorted underflow at hook 2
[   93.097840][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'.
[   93.101877][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'.
[   93.546344][ T6744] netlink: 52 bytes leftover after parsing attributes in process `syz.2.372'.
[   93.553243][ T6744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.894882][ T6761] Cannot find add_set index 3 as target
[   94.050720][ T6769] netlink: 'syz.2.384': attribute type 2 has an invalid length.
[   94.345132][ T5872] rds_connect_path_complete: Cannot transition to state UP, current state is 5
[   94.640166][ T6804] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   94.760172][ T6811] netlink: 52 bytes leftover after parsing attributes in process `syz.2.405'.
[   94.846063][ T6816] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   94.880550][ T6819] erspan0: entered promiscuous mode
[   94.885641][ T6819] batman_adv: batadv0: Adding interface: macvlan2
[   94.890610][ T6819] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.901413][ T6819] batman_adv: batadv0: Interface activated: macvlan2
[   95.063112][ T6824] netlink: 'syz.2.410': attribute type 5 has an invalid length.
[   95.082108][ T6824] geneve2: entered promiscuous mode
[   95.084477][ T6824] geneve2: entered allmulticast mode
[   95.090496][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   95.094141][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   95.101584][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   95.105754][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   95.174517][ T6827] netlink: 'syz.2.411': attribute type 21 has an invalid length.
[   95.938459][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.941541][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.966342][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.970441][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.549858][ T6884] __nla_validate_parse: 4 callbacks suppressed
[   96.549873][ T6884] netlink: 56 bytes leftover after parsing attributes in process `syz.1.435'.
[   96.556276][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'.
[   96.693844][ T6896] netlink: 'syz.0.441': attribute type 1 has an invalid length.
[   96.732689][ T6896] bond1: entered promiscuous mode
[   96.734705][ T6896] bond1: entered allmulticast mode
[   96.740383][ T6896] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.755227][ T6896] bridge1: entered promiscuous mode
[   96.757410][ T6896] bridge1: entered allmulticast mode
[   96.759965][ T6899] netlink: 'syz.1.442': attribute type 10 has an invalid length.
[   96.764033][ T6896] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[   96.777021][ T6899] 8021q: adding VLAN 0 to HW filter on device team0
[   96.787065][ T6899] bond0: (slave team0): Enslaving as an active interface with an up link
[   96.839541][ T5872] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   96.885085][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.888650][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.958747][ T5658] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   97.011049][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.021615][ T6915] netlink: 48 bytes leftover after parsing attributes in process `syz.2.450'.
[   97.026468][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.115870][ T6896] hsr0: left allmulticast mode
[   97.118380][ T6896] hsr_slave_0: left allmulticast mode
[   97.120390][ T6896] hsr_slave_1: left allmulticast mode
[   97.152729][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.156247][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.172655][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.175727][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.249563][ T6926] netlink: 'syz.2.453': attribute type 1 has an invalid length.
[   97.327753][ T6926] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   97.368631][ T6935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.457'.
[   97.386567][ T6926] veth3: entered promiscuous mode
[   97.392676][ T6926] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   97.413085][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[   97.421502][ T5658] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   97.432934][ T6936] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.549276][ T6918] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   97.643894][ T6952] netlink: 'syz.0.464': attribute type 3 has an invalid length.
[   97.646900][ T6952] netlink: 3 bytes leftover after parsing attributes in process `syz.0.464'.
[   98.462087][ T6995] xt_connbytes: Forcing CT accounting to be enabled
[   98.465056][ T6995] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   98.535285][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.483'.
[   98.724968][ T7007] mac80211_hwsim hwsim5 ": renamed from wlan0
[   98.885026][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'.
[   98.934527][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'.
[   99.119178][ T7035] netlink: 'syz.1.501': attribute type 22 has an invalid length.
[   99.966240][ T7102] veth3: entered promiscuous mode
[   99.984944][ T7102] netlink: 120 bytes leftover after parsing attributes in process `syz.0.534'.
[  101.397247][ T7160] netlink: 'syz.2.559': attribute type 30 has an invalid length.
[  101.419610][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.423059][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.427993][ T7160] netlink: 'syz.2.559': attribute type 30 has an invalid length.
[  101.433129][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.459906][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.657117][ T7179] __nla_validate_parse: 2 callbacks suppressed
[  101.657128][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'.
[  101.744630][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'.
[  101.802567][ T7187] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  102.290178][ T5218] Bluetooth: hci0: command tx timeout
[  102.338638][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'.
[  102.459511][ T7234] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.591'.
[  102.463041][ T7234] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  102.467050][ T7234] openvswitch: netlink: Message has 8454 unknown bytes.
[  102.790638][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'.
[  103.173469][ T7275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.373300][ T7285] bridge_slave_0: left allmulticast mode
[  103.375215][ T7285] bridge_slave_0: left promiscuous mode
[  103.378069][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.384773][ T7285] bridge_slave_1: left allmulticast mode
[  103.387014][ T7285] bridge_slave_1: left promiscuous mode
[  103.393694][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.399700][ T7285] bond0: (slave bond_slave_0): Releasing backup interface
[  103.406422][ T7285] bond0: (slave bond_slave_1): Releasing backup interface
[  103.424947][ T7285] team0: Port device team_slave_0 removed
[  103.436825][ T7285] team0: Port device team_slave_1 removed
[  103.440987][ T7285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.443959][ T7285] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.449815][ T7285] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.452715][ T7285] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.466600][ T7285] batman_adv: batadv0: Interface deactivated: macvlan2
[  103.469852][ T7285] batman_adv: batadv0: Removing interface: macvlan2
[  103.474912][ T7285] bond1: (slave ip6gretap1): Removing an active aggregator
[  103.480418][ T7285] bond1: (slave ip6gretap1): Releasing backup interface
[  103.483162][ T7285] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 96:20:a6:41:98:69 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  103.502773][ T7285] bond1: (slave veth3): Releasing backup interface
[  103.535211][ T7286] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  103.575755][ T7285] syz.2.617 (7285) used greatest stack depth: 19896 bytes left
[  103.726512][ T7291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.619'.
[  104.134675][ T7321] syzkaller1: entered promiscuous mode
[  104.136918][ T7321] syzkaller1: entered allmulticast mode
[  104.143377][ T7321] netlink: 'syz.0.632': attribute type 15 has an invalid length.
[  104.183896][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'.
[  104.294490][ T7329] netlink: 'syz.1.636': attribute type 1 has an invalid length.
[  104.384954][ T7329] bond2: (slave gretap1): making interface the new active one
[  104.388896][ T7329] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  104.391660][ T7334] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96
[  104.402664][ T7336] ip6t_srh: unknown srh match flags  4000
[  104.808702][ T7358] can: request_module (can-proto-3) failed.
[  104.876158][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'.
[  105.112544][ T7384] netlink: 'syz.1.662': attribute type 1 has an invalid length.
[  105.128047][ T7384] netlink: 244 bytes leftover after parsing attributes in process `syz.1.662'.
[  105.168291][ T7388] bond0: entered promiscuous mode
[  105.170350][ T7388] bond_slave_0: entered promiscuous mode
[  105.172747][ T7388] bond_slave_1: entered promiscuous mode
[  105.180478][ T7388] bond0: left promiscuous mode
[  105.182417][ T7388] bond_slave_0: left promiscuous mode
[  105.184685][ T7388] bond_slave_1: left promiscuous mode
[  105.216562][ T7389] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  105.554181][ T7414] netlink: 256 bytes leftover after parsing attributes in process `syz.0.675'.
[  105.864091][ T7437] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  106.044542][ T7451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.217213][ T7465] geneve3: entered promiscuous mode
[  106.464247][ T7485] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  106.584871][ T7493] netlink: 'syz.0.714': attribute type 1 has an invalid length.
[  106.630265][ T7493] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  106.633583][ T7493] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  106.649348][ T7493] bond2: (slave vti0): making interface the new active one
[  106.652473][ T7493] bond2: (slave vti0): Enslaving as an active interface with an up link
[  106.670548][ T7502] netlink: 'syz.1.716': attribute type 1 has an invalid length.
[  106.805801][ T7513] netlink: 'syz.1.722': attribute type 33 has an invalid length.
[  106.810378][ T7513] __nla_validate_parse: 10 callbacks suppressed
[  106.810396][ T7513] netlink: 152 bytes leftover after parsing attributes in process `syz.1.722'.
[  106.895468][ T7518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.724'.
[  107.920774][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'.
[  108.040915][ T7554] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  108.223047][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'.
[  108.231107][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'.
[  108.241715][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'.
[  108.245214][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'.
[  108.266545][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'.
[  108.278261][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'.
[  108.283347][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'.
[  109.356163][ T7633] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  109.425834][ T7636] macvlan2: entered allmulticast mode
[  109.435004][ T7636] veth1_vlan: entered allmulticast mode
[  109.596177][ T7652] netlink: 'syz.2.780': attribute type 1 has an invalid length.
[  109.841896][ T7672] vti1: entered promiscuous mode
[  109.843677][ T7672] vti1: entered allmulticast mode
[  110.154926][ T7702] @: renamed from bond_slave_0 (while UP)
[  110.329938][ T7712] xt_CT: You must specify a L4 protocol and not use inversions on it
[  110.510826][ T7732] netlink: 'syz.1.815': attribute type 10 has an invalid length.
[  110.537275][ T7732] team0: Port device netdevsim0 added
[  110.780405][ T7748] ip6tnl1: entered promiscuous mode
[  110.782171][ T7748] ip6tnl1: entered allmulticast mode
[  110.890550][ T7753] tipc: Failed to remove unknown binding: 66,1,1/0:3547387978/3547387980
[  110.894984][ T7753] tipc: Failed to remove unknown binding: 66,1,1/0:3547387978/3547387980
[  110.901066][ T7753] tipc: Failed to remove unknown binding: 66,1,1/0:3547387978/3547387980
[  111.229512][ T7773] netlink: 'syz.1.834': attribute type 1 has an invalid length.
[  111.233334][ T7773] nbd: error processing sock list
[  111.236256][ T7773] block nbd0: shutting down sockets
[  111.350513][ T7781] netlink: 'syz.1.836': attribute type 1 has an invalid length.
[  111.636999][ T7781] 8021q: adding VLAN 0 to HW filter on device bond3
[  111.655556][ T7783] bond3: (slave gretap2): making interface the new active one
[  111.660759][ T7783] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  111.668385][ T5658] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.677622][ T5658] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.680648][ T5658] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  111.695932][ T5658] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.705425][ T5658] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.715310][ T5658] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  111.743216][ T5658] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.753040][ T5658] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.768093][ T5658] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  111.776563][ T5658] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.786844][ T5658] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.800234][ T5658] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  111.876750][ T7794] __nla_validate_parse: 55 callbacks suppressed
[  111.876770][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'.
[  111.899236][ T7794] vlan0: entered promiscuous mode
[  112.220478][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.846'.
[  112.677007][ T7852] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  113.079278][ T7879] nbd0: detected capacity change from 0 to 128
[  113.092356][   T57] block nbd0: Receive control failed (result -104)
[  113.182206][ T7890] netlink: 'syz.2.877': attribute type 12 has an invalid length.
[  113.421871][ T7910] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  113.540507][ T6918] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  113.587317][ T7926] netlink: 5 bytes leftover after parsing attributes in process `syz.1.891'.
[  113.718808][ T7937] xt_hashlimit: size too large, truncated to 1048576
[  113.779618][ T7945] : renamed from bridge_slave_0
[  113.890780][ T7948] tap0: tun_chr_ioctl cmd 1074025677
[  113.895822][ T7948] tap0: linktype set to 776
[  114.128648][ T7963] netlink: 'syz.2.906': attribute type 2 has an invalid length.
[  114.416982][ T7977] netlink: 52 bytes leftover after parsing attributes in process `syz.2.913'.
[  114.629591][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'.
[  114.633624][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'.
[  114.861061][ T7998] openvswitch: netlink: Missing key (keys=40, expected=80)
[  115.046171][ T8010] netlink: 280 bytes leftover after parsing attributes in process `syz.0.929'.
[  116.204895][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'.
[  116.245838][ T8065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.955'.
[  116.635906][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.961'.
[  116.801871][ T8089] netlink: 'syz.0.964': attribute type 29 has an invalid length.
[  118.000084][ T8132] syz_tun: entered allmulticast mode
[  118.004631][ T8132] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  118.444575][ T8157] xt_SECMARK: invalid mode: 0
[  119.675840][ T8196] netlink: 'syz.1.1010': attribute type 9 has an invalid length.
[  119.679334][ T8196] netlink: 'syz.1.1010': attribute type 7 has an invalid length.
[  119.681729][ T8196] netlink: 'syz.1.1010': attribute type 8 has an invalid length.
[  119.924487][ T8201] syz.1.1011 (8201) used greatest stack depth: 19816 bytes left
[  120.033877][ T8207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1014'.
[  120.530488][ T8246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1031'.
[  120.886522][ T8263] xt_TCPMSS: Only works on TCP SYN packets
[  120.989451][ T8271] netlink: 'syz.1.1043': attribute type 10 has an invalid length.
[  121.112428][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'.
[  121.145414][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'.
[  121.230312][ T8281] IPVS: persistence engine module ip_vs_pe_ not found
[  121.250661][ T5905] IPVS: starting estimator thread 0...
[  121.335927][ T8291] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  121.340965][ T8283] IPVS: using max 64 ests per chain, 153600 per kthread
[  121.486370][ T8303] netlink: 'syz.0.1056': attribute type 1 has an invalid length.
[  121.500996][ T8303] netlink: 'syz.0.1056': attribute type 1 has an invalid length.
[  121.604415][ T8302] syz_tun: left allmulticast mode
[  121.614655][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.618209][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.624506][ T8308] netlink: 'syz.2.1057': attribute type 9 has an invalid length.
[  121.628881][ T8309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1058'.
[  121.634536][ T8308] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.1057'.
[  121.716623][ T8302] vlan0: left promiscuous mode
[  121.771585][ T8302] veth1_vlan: left allmulticast mode
[  121.773744][ T8302] macvlan2: left allmulticast mode
[  121.808979][ T5872] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.812412][ T5872] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.841426][ T5872] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.844635][ T5872] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.883822][ T8315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1061'.
[  121.887187][ T8315] netlink: 'syz.1.1061': attribute type 7 has an invalid length.
[  121.891477][ T8315] netlink: 'syz.1.1061': attribute type 8 has an invalid length.
[  121.894348][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'.
[  122.019300][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'.
[  122.033119][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'.
[  122.474936][ T8349] netlink: 'syz.2.1076': attribute type 4 has an invalid length.
[  122.491085][ T8349] netlink: 'syz.2.1076': attribute type 4 has an invalid length.
[  122.924626][ T8375] syzkaller1: entered promiscuous mode
[  122.926924][ T8375] syzkaller1: entered allmulticast mode
[  123.722232][ T8405] macsec1: entered promiscuous mode
[  123.724279][ T8405] macsec1: entered allmulticast mode
[  124.402508][ T8443] netlink: 'syz.0.1110': attribute type 1 has an invalid length.
[  125.441353][ T8487] netlink: 'syz.0.1129': attribute type 1 has an invalid length.
[  125.444537][ T8487] __nla_validate_parse: 6 callbacks suppressed
[  125.444546][ T8487] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1129'.
[  126.156696][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'.
[  126.175939][ T8518] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  126.182441][ T8518] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  126.267963][ T8523] trusted_key: syz.1.1143 sent an empty control message without MSG_MORE.
[  126.324811][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'.
[  127.681937][ T8603] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.690799][ T8603] syzkaller0: entered promiscuous mode
[  127.693014][ T8603] syzkaller0: entered allmulticast mode
[  127.729483][ T8603] tipc: Resetting bearer <eth:syzkaller0>
[  127.736880][ T8602] tipc: Resetting bearer <eth:syzkaller0>
[  127.751937][ T8602] tipc: Disabling bearer <eth:syzkaller0>
[  129.398024][ T8659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  129.401226][ T8659] IPv6: NLM_F_CREATE should be set when creating new route
[  129.564249][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'.
[  129.702256][ T8670] netlink: 'syz.2.1210': attribute type 3 has an invalid length.
[  129.704863][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'.
[  129.856886][ T8678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1214'.
[  129.890476][ T8678] nbd: socks must be embedded in a SOCK_ITEM attr
[  129.893045][ T5862] block nbd64: NBD_DISCONNECT
[  129.903815][   T53] 
[  129.904837][   T53] ======================================================
[  129.907594][   T53] WARNING: possible circular locking dependency detected
[  129.910321][   T53] 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 Not tainted
[  129.914210][   T53] ------------------------------------------------------
[  129.916933][   T53] kworker/u9:2/53 is trying to acquire lock:
[  129.919288][   T53] ffff888041fc0358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  129.922883][   T53] 
[  129.922883][   T53] but task is already holding lock:
[  129.925669][   T53] ffff8880270ad988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  129.929007][   T53] 
[  129.929007][   T53] which lock already depends on the new lock.
[  129.929007][   T53] 
[  129.932063][   T53] 
[  129.932063][   T53] the existing dependency chain (in reverse order) is:
[  129.935692][   T53] 
[  129.935692][   T53] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  129.938920][   T53]        lock_acquire+0x120/0x360
[  129.940932][   T53]        down_write+0x96/0x1f0
[  129.942701][   T53]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  129.945004][   T53]        nbd_start_device+0x16c/0xac0
[  129.947001][   T53]        nbd_genl_connect+0x135b/0x18f0
[  129.949094][   T53]        genl_family_rcv_msg_doit+0x215/0x300
[  129.951478][   T53]        genl_rcv_msg+0x60e/0x790
[  129.953472][   T53]        netlink_rcv_skb+0x208/0x470
[  129.955520][   T53]        genl_rcv+0x28/0x40
[  129.957294][   T53]        netlink_unicast+0x82f/0x9e0
[  129.959356][   T53]        netlink_sendmsg+0x805/0xb30
[  129.961455][   T53]        __sock_sendmsg+0x21c/0x270
[  129.963520][   T53]        ____sys_sendmsg+0x505/0x830
[  129.965622][   T53]        ___sys_sendmsg+0x21f/0x2a0
[  129.967706][   T53]        __x64_sys_sendmsg+0x19b/0x260
[  129.969859][   T53]        do_syscall_64+0xfa/0x3b0
[  129.971906][   T53]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.974452][   T53] 
[  129.974452][   T53] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  129.977526][   T53]        lock_acquire+0x120/0x360
[  129.979532][   T53]        __mutex_lock+0x182/0xe80
[  129.981524][   T53]        refcount_dec_and_mutex_lock+0x30/0xa0
[  129.983973][   T53]        nbd_config_put+0x2c/0x790
[  129.986055][   T53]        nbd_release+0xfe/0x140
[  129.987968][   T53]        bdev_release+0x536/0x650
[  129.989985][   T53]        blkdev_release+0x15/0x20
[  129.992010][   T53]        __fput+0x44c/0xa70
[  129.993828][   T53]        fput_close_sync+0x119/0x200
[  129.995939][   T53]        __x64_sys_close+0x7f/0x110
[  129.997948][   T53]        do_syscall_64+0xfa/0x3b0
[  129.999978][   T53]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.002602][   T53] 
[  130.002602][   T53] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  130.005671][   T53]        validate_chain+0xb9b/0x2140
[  130.007794][   T53]        __lock_acquire+0xab9/0xd20
[  130.009851][   T53]        lock_acquire+0x120/0x360
[  130.011861][   T53]        __mutex_lock+0x182/0xe80
[  130.013881][   T53]        __del_gendisk+0x129/0x9e0
[  130.015914][   T53]        del_gendisk+0xe8/0x160
[  130.017811][   T53]        nbd_dev_remove_work+0x47/0xe0
[  130.019988][   T53]        process_scheduled_works+0xae1/0x17b0
[  130.022440][   T53]        worker_thread+0x8a0/0xda0
[  130.024488][   T53]        kthread+0x711/0x8a0
[  130.026332][   T53]        ret_from_fork+0x3fc/0x770
[  130.028361][   T53]        ret_from_fork_asm+0x1a/0x30
[  130.030450][   T53] 
[  130.030450][   T53] other info that might help us debug this:
[  130.030450][   T53] 
[  130.034399][   T53] Chain exists of:
[  130.034399][   T53]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  130.034399][   T53] 
[  130.039876][   T53]  Possible unsafe locking scenario:
[  130.039876][   T53] 
[  130.042777][   T53]        CPU0                    CPU1
[  130.044811][   T53]        ----                    ----
[  130.046952][   T53]   rlock(&set->update_nr_hwq_lock);
[  130.049079][   T53]                                lock(&nbd->config_lock);
[  130.051929][   T53]                                lock(&set->update_nr_hwq_lock);
[  130.054945][   T53]   lock(&disk->open_mutex);
[  130.056788][   T53] 
[  130.056788][   T53]  *** DEADLOCK ***
[  130.056788][   T53] 
[  130.059881][   T53] 3 locks held by kworker/u9:2/53:
[  130.061895][   T53]  #0: ffff8880216bd948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  130.066156][   T53]  #1: ffffc900007bfbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  130.070953][   T53]  #2: ffff8880270ad988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  130.075012][   T53] 
[  130.075012][   T53] stack backtrace:
[  130.077374][   T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u9:2 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  130.077399][   T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.077437][   T53] Workqueue: nbd-del nbd_dev_remove_work
[  130.077462][   T53] Call Trace:
[  130.077470][   T53]  <TASK>
[  130.077479][   T53]  dump_stack_lvl+0x189/0x250
[  130.077499][   T53]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.077513][   T53]  ? __pfx__printk+0x10/0x10
[  130.077530][   T53]  ? print_lock_name+0xde/0x100
[  130.077546][   T53]  print_circular_bug+0x2ee/0x310
[  130.077563][   T53]  check_noncircular+0x134/0x160
[  130.077581][   T53]  validate_chain+0xb9b/0x2140
[  130.077599][   T53]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  130.077616][   T53]  ? arch_stack_walk+0x11c/0x150
[  130.077634][   T53]  __lock_acquire+0xab9/0xd20
[  130.077649][   T53]  ? __del_gendisk+0x129/0x9e0
[  130.077666][   T53]  lock_acquire+0x120/0x360
[  130.077677][   T53]  ? __del_gendisk+0x129/0x9e0
[  130.077694][   T53]  ? check_path+0x21/0x40
[  130.077708][   T53]  __mutex_lock+0x182/0xe80
[  130.077723][   T53]  ? __del_gendisk+0x129/0x9e0
[  130.077740][   T53]  ? __del_gendisk+0x129/0x9e0
[  130.077754][   T53]  ? __pfx___mutex_lock+0x10/0x10
[  130.077766][   T53]  ? __pfx___might_resched+0x10/0x10
[  130.077783][   T53]  ? __lock_acquire+0xab9/0xd20
[  130.077795][   T53]  ? disk_del_events+0xb5/0x210
[  130.077824][   T53]  ? __del_gendisk+0xc1/0x9e0
[  130.077839][   T53]  __del_gendisk+0x129/0x9e0
[  130.077855][   T53]  ? del_gendisk+0xe0/0x160
[  130.077871][   T53]  ? __pfx___del_gendisk+0x10/0x10
[  130.077887][   T53]  ? down_read+0x1ad/0x2e0
[  130.077901][   T53]  del_gendisk+0xe8/0x160
[  130.077917][   T53]  nbd_dev_remove_work+0x47/0xe0
[  130.077933][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  130.077947][   T53]  process_scheduled_works+0xae1/0x17b0
[  130.077970][   T53]  ? __pfx_process_scheduled_works+0x10/0x10
[  130.077989][   T53]  worker_thread+0x8a0/0xda0
[  130.078004][   T53]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.078025][   T53]  ? __kthread_parkme+0x7b/0x200
[  130.078044][   T53]  kthread+0x711/0x8a0
[  130.078061][   T53]  ? __pfx_worker_thread+0x10/0x10
[  130.078074][   T53]  ? __pfx_kthread+0x10/0x10
[  130.078107][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.078124][   T53]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.078134][   T53]  ? __pfx_kthread+0x10/0x10
[  130.078152][   T53]  ret_from_fork+0x3fc/0x770
[  130.078166][   T53]  ? __pfx_ret_from_fork+0x10/0x10
[  130.078180][   T53]  ? __switch_to_asm+0x39/0x70
[  130.078195][   T53]  ? __switch_to_asm+0x33/0x70
[  130.078209][   T53]  ? __pfx_kthread+0x10/0x10
[  130.078225][   T53]  ret_from_fork_asm+0x1a/0x30
[  130.078247][   T53]  </TASK>
[  132.609622][ T1361] ieee802154 phy0 wpan0: encryption failed: -22

VM DIAGNOSIS:
13:47:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900007bee10
R8 =ffff888106cc8237 R9 =1ffff11020d99046 R10=dffffc0000000000 R11=ffffffff85463620
R12=dffffc0000000000 R13=ffffffff99aff8b6 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff8546369c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f33a3b74a00 CR3=000000003818c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81746ea2 ffffffff81746e0b
XMM02=ffffffff894b5d24 ffffffff81746e0b XMM03=ffffffff823b6114 ffffffff823b5fad
XMM04=ffffffff894b8537 ffffffff894b8526 XMM05=ffffffff894b8381 ffffffff823b6109
XMM06=ffffffff823b5fad ffffffff823b55c4 XMM07=ffffffff823b559d ffffffff823b5302
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2bb2e11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=017d329960e3f000 RBX=ffffffff81976a48 RCX=017d329960e3f000 RDX=0000000000000001
RSI=ffffffff8be28c20 RDI=ffffffff81976a48 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa22cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110201d7000
RIP=ffffffff8b7024f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564c3fff37e8 CR3=000000010fe88000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
