last executing test programs:

269.943391ms ago: executing program 1 (id=2151):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

190.115077ms ago: executing program 1 (id=2153):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)

189.843163ms ago: executing program 0 (id=2155):
r0 = socket(0x2a, 0x2, 0x0)
bind$tipc(r0, 0x0, 0x0)

189.774775ms ago: executing program 0 (id=2156):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x20)

189.665738ms ago: executing program 2 (id=2157):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)

129.523162ms ago: executing program 0 (id=2158):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f80080001"], 0x88}}, 0x4008000)

129.345785ms ago: executing program 1 (id=2159):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c0007800800850002000000080006000000000008000500", @ANYRESHEX], 0xe0}}, 0x0)

129.237889ms ago: executing program 2 (id=2160):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1a", 0x2}, {&(0x7f0000002300)='U', 0x1}], 0x2, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080)

129.174223ms ago: executing program 1 (id=2161):
poll(&(0x7f00000022c0), 0x58, 0x8)

66.54698ms ago: executing program 0 (id=2162):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)

66.350703ms ago: executing program 2 (id=2163):
unshare(0x20000400)
shutdown(0xffffffffffffffff, 0x0)

66.187577ms ago: executing program 0 (id=2164):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x12, 0x84, 0x6}], 0xfe61}}], 0x2, 0xc88c4)

66.103264ms ago: executing program 1 (id=2165):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffb0b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

66.031238ms ago: executing program 2 (id=2166):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000180)={{0x3, @default, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)

617.217µs ago: executing program 2 (id=2167):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)

357.993µs ago: executing program 0 (id=2168):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x5, @local, 0x2}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7ca42eea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0xfffffffd, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0)

127.363µs ago: executing program 1 (id=2169):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x170, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0xb2c, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd2c, 0x70bd28, 0x70bd27, 0x4, [0x101]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x880}, 0x2000)

0s ago: executing program 2 (id=2170):
r0 = socket(0x1e, 0x1, 0x0)
shutdown(r0, 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:54241' (ED25519) to the list of known hosts.
syzkaller login: [   49.768263][ T5771] cgroup: Unknown subsys name 'net'
[   49.897506][ T5771] cgroup: Unknown subsys name 'cpuset'
[   49.903969][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.953490][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.699032][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.703539][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.707284][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.711188][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.715250][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.735194][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.739183][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.744232][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.754819][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.758770][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.829443][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.833261][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.837476][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.841820][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.846453][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.069353][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   57.083418][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   57.252770][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.256686][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.259838][ T5833] bridge_slave_0: entered allmulticast mode
[   57.263645][ T5833] bridge_slave_0: entered promiscuous mode
[   57.269336][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.272401][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.275904][ T5833] bridge_slave_1: entered allmulticast mode
[   57.279762][ T5833] bridge_slave_1: entered promiscuous mode
[   57.283801][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   57.320226][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.323112][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.326587][ T5837] bridge_slave_0: entered allmulticast mode
[   57.330278][ T5837] bridge_slave_0: entered promiscuous mode
[   57.355295][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.358506][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.361810][ T5837] bridge_slave_1: entered allmulticast mode
[   57.365939][ T5837] bridge_slave_1: entered promiscuous mode
[   57.371659][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.378353][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.460831][ T5833] team0: Port device team_slave_0 added
[   57.465224][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.468571][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.471836][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.476917][ T5842] bridge_slave_0: entered allmulticast mode
[   57.480834][ T5842] bridge_slave_0: entered promiscuous mode
[   57.487567][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.492744][ T5833] team0: Port device team_slave_1 added
[   57.496124][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.499110][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.502049][ T5842] bridge_slave_1: entered allmulticast mode
[   57.506439][ T5842] bridge_slave_1: entered promiscuous mode
[   57.575183][ T5837] team0: Port device team_slave_0 added
[   57.579785][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.597699][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.600464][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.611288][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.618202][ T5837] team0: Port device team_slave_1 added
[   57.621059][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.624414][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.635569][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.642416][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.707072][ T5842] team0: Port device team_slave_0 added
[   57.737455][ T5842] team0: Port device team_slave_1 added
[   57.740752][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.743789][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.755271][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.766900][ T5833] hsr_slave_0: entered promiscuous mode
[   57.770355][ T5833] hsr_slave_1: entered promiscuous mode
[   57.786121][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.789138][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.800586][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.828454][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.831599][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.844830][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.852150][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.856020][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.867594][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.978970][ T5837] hsr_slave_0: entered promiscuous mode
[   57.982142][ T5837] hsr_slave_1: entered promiscuous mode
[   57.985412][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.988742][ T5837] Cannot create hsr debugfs directory
[   57.997355][ T5842] hsr_slave_0: entered promiscuous mode
[   58.000511][ T5842] hsr_slave_1: entered promiscuous mode
[   58.003334][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.007010][ T5842] Cannot create hsr debugfs directory
[   58.349992][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.369155][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.380183][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.396593][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.483627][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.491189][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.507508][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.514802][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.610848][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.627592][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.635849][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.652074][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.769694][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.776794][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.816238][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   58.822609][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   58.826687][ T5221] Bluetooth: hci1: command tx timeout
[   58.826961][   T54] Bluetooth: hci0: command tx timeout
[   58.849682][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.852909][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.859550][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.862593][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.885930][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.890390][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.893474][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.894908][   T54] Bluetooth: hci2: command tx timeout
[   58.900904][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.904010][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.949410][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   58.972319][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.975265][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.998982][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.002148][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.193772][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.250490][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.262507][ T5833] veth0_vlan: entered promiscuous mode
[   59.280129][ T5833] veth1_vlan: entered promiscuous mode
[   59.331920][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.341629][ T5833] veth0_macvtap: entered promiscuous mode
[   59.353086][ T5837] veth0_vlan: entered promiscuous mode
[   59.357391][ T5833] veth1_macvtap: entered promiscuous mode
[   59.372205][ T5837] veth1_vlan: entered promiscuous mode
[   59.396552][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.416147][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.446912][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.463172][ T5842] veth0_vlan: entered promiscuous mode
[   59.468902][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.472704][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.480807][ T5837] veth0_macvtap: entered promiscuous mode
[   59.497439][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.510811][ T5837] veth1_macvtap: entered promiscuous mode
[   59.515344][ T5842] veth1_vlan: entered promiscuous mode
[   59.549717][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.572114][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.589802][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.602497][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.612735][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.620024][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.622992][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.633140][ T5842] veth0_macvtap: entered promiscuous mode
[   59.646761][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.662843][ T5842] veth1_macvtap: entered promiscuous mode
[   59.686042][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.698603][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.744716][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.753881][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.772639][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.782258][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.786685][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.793034][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.793663][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.823700][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.829758][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.907411][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.919134][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.994818][ T5904] Bluetooth: MGMT ver 1.23
[   60.024735][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.028104][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.059602][ T5906] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   60.101554][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.115465][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.195519][ T5910] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   60.846790][ T5961] tipc: Started in network mode
[   60.848660][ T5961] tipc: Node identity b6368cbb2002, cluster identity 4711
[   60.854739][ T5961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.857516][ T5961] syzkaller0: entered promiscuous mode
[   60.859424][ T5961] syzkaller0: entered allmulticast mode
[   60.897559][   T54] Bluetooth: hci0: command tx timeout
[   60.897769][ T5221] Bluetooth: hci1: command tx timeout
[   60.927029][ T5961] tipc: Resetting bearer <eth:syzkaller0>
[   60.948119][ T5960] tipc: Resetting bearer <eth:syzkaller0>
[   60.967497][ T5960] tipc: Disabling bearer <eth:syzkaller0>
[   60.975184][ T5221] Bluetooth: hci2: command tx timeout
[   62.002365][ T6037] netlink: 'syz.0.59': attribute type 1 has an invalid length.
[   62.005596][ T6037] netlink: 184 bytes leftover after parsing attributes in process `syz.0.59'.
[   62.008454][ T6037] netlink: 40 bytes leftover after parsing attributes in process `syz.0.59'.
[   62.323125][ T6052] Zero length message leads to an empty skb
[   62.402457][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'.
[   62.701936][  T970] IPVS: starting estimator thread 0...
[   62.715698][ T6075] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   62.796393][ T6079] IPVS: using max 48 ests per chain, 115200 per kthread
[   62.853529][ T6090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.80'.
[   62.864477][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'.
[   62.976713][ T5221] Bluetooth: hci0: command tx timeout
[   62.977028][   T54] Bluetooth: hci1: command tx timeout
[   63.064373][   T54] Bluetooth: hci2: command tx timeout
[   63.366871][ T6138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.101'.
[   63.511378][ T6151] Illegal XDP return value 4294967282 on prog  (id 18) dev N/A, expect packet loss!
[   63.623530][ T6159] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.761240][ T6171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.117'.
[   63.937102][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'.
[   64.061771][ T6199] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.242514][ T6217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.136'.
[   64.370137][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'.
[   64.375923][ T6226] netlink: 'syz.0.141': attribute type 1 has an invalid length.
[   64.570875][ T6246] tipc: Started in network mode
[   64.572532][ T6246] tipc: Node identity beee677180b2, cluster identity 4711
[   64.585832][ T6246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.591619][ T6246] syzkaller0: entered promiscuous mode
[   64.593517][ T6246] syzkaller0: entered allmulticast mode
[   64.660082][ T6246] tipc: Resetting bearer <eth:syzkaller0>
[   64.671238][ T6243] tipc: Resetting bearer <eth:syzkaller0>
[   64.727433][ T6243] tipc: Disabling bearer <eth:syzkaller0>
[   64.881490][ T6263] netlink: 'syz.1.158': attribute type 1 has an invalid length.
[   64.933190][ T6263] bond1: entered promiscuous mode
[   64.954971][ T6263] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.988673][ T6270] bond1: (slave bridge1): making interface the new active one
[   64.993985][ T6270] bridge1: entered promiscuous mode
[   64.999635][ T6270] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   65.055421][   T54] Bluetooth: hci1: command tx timeout
[   65.057679][   T54] Bluetooth: hci0: command tx timeout
[   65.135183][ T5221] Bluetooth: hci2: command tx timeout
[   65.248160][ T6286] netlink: 'syz.1.168': attribute type 1 has an invalid length.
[   65.275374][ T6286] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.291361][ T6286] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.293772][ T6286] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   65.300359][ T6286] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   65.359044][ T6294] veth3: entered promiscuous mode
[   65.366308][ T6294] bond2: (slave veth3): Enslaving as an active interface with a down link
[   65.372917][ T6286] erspan0: entered allmulticast mode
[   65.438508][ T6286] netlink: 'syz.1.168': attribute type 11 has an invalid length.
[   65.727555][ T6314] warning: `syz.0.177' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.312645][ T6348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.970648][ T6369] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   67.060222][ T6376] __nla_validate_parse: 1 callbacks suppressed
[   67.060233][ T6376] netlink: 156 bytes leftover after parsing attributes in process `syz.2.203'.
[   67.077317][ T6376] netlink: 'syz.2.203': attribute type 3 has an invalid length.
[   67.292547][ T6395] syzkaller1: entered promiscuous mode
[   67.296859][ T6395] syzkaller1: entered allmulticast mode
[   67.577532][ T6423] syz.0.223 uses obsolete (PF_INET,SOCK_PACKET)
[   67.882056][ T6450] netlink: 132 bytes leftover after parsing attributes in process `syz.0.238'.
[   67.940359][ T6454] IPv6: Can't replace route, no match found
[   68.036389][ T6462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.243'.
[   68.141928][ T6469] syzkaller1: entered promiscuous mode
[   68.146400][ T6469] syzkaller1: entered allmulticast mode
[   68.235074][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'.
[   68.313669][ T6478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.446592][ T6475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.485956][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.252'.
[   68.532022][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'.
[   68.538792][ T6491] erspan0: entered promiscuous mode
[   68.542795][ T6491] erspan0: left promiscuous mode
[   68.933038][ T6510] syzkaller1: entered promiscuous mode
[   68.935485][ T6510] syzkaller1: entered allmulticast mode
[   70.173213][ T6573] tipc: Failed to remove unknown binding: 66,1,1/0:2371866854/2371866856
[   70.195331][ T6575] netlink: 'syz.1.292': attribute type 9 has an invalid length.
[   70.198419][ T6575] netlink: 'syz.1.292': attribute type 7 has an invalid length.
[   70.224292][ T6575] netlink: 'syz.1.292': attribute type 8 has an invalid length.
[   70.390775][ T6583] netlink: 'syz.1.298': attribute type 29 has an invalid length.
[   70.414383][ T6586] netlink: 'syz.1.298': attribute type 29 has an invalid length.
[   70.423375][ T6583] netlink: 500 bytes leftover after parsing attributes in process `syz.1.298'.
[   70.433637][ T6583] unsupported nla_type 58
[   70.663877][ T6607] netlink: 80 bytes leftover after parsing attributes in process `syz.2.309'.
[   70.901321][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.906581][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.990899][ T5899] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.093800][ T6645] netlink: 44 bytes leftover after parsing attributes in process `syz.2.327'.
[   71.183282][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'.
[   71.665488][ T6683] ip6tnl1: entered promiscuous mode
[   71.667973][ T6683] ip6tnl1: entered allmulticast mode
[   72.618121][ T6715] __nla_validate_parse: 1 callbacks suppressed
[   72.618134][ T6715] netlink: 48 bytes leftover after parsing attributes in process `syz.2.357'.
[   72.676375][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'.
[   72.682633][ T6720] netlink: 'syz.2.359': attribute type 15 has an invalid length.
[   72.701266][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'.
[   72.705322][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.710610][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.726440][ T6720] netlink: 'syz.2.359': attribute type 15 has an invalid length.
[   72.729574][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.732490][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.760155][ T6727] netlink: 268 bytes leftover after parsing attributes in process `syz.0.363'.
[   72.772761][ T6725] netlink: 'syz.1.362': attribute type 10 has an invalid length.
[   72.797892][ T6725] 8021q: adding VLAN 0 to HW filter on device team0
[   72.803026][ T6725] bond0: (slave team0): Enslaving as an active interface with an up link
[   72.819541][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   72.869596][ T6733] tipc: Failed to remove unknown binding: 66,1,1/0:2531922192/2531922194
[   72.873256][ T6736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.368'.
[   72.877725][ T6733] tipc: Failed to remove unknown binding: 66,1,1/0:2531922192/2531922194
[   73.080580][ T6750] IPv6: addrconf: prefix option has invalid lifetime
[   73.260367][ T6769] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.381'.
[   73.300740][ T6773] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   73.395561][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'.
[   73.512322][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'.
[   74.049095][ T6815] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   74.110806][ T6821] batman_adv: batadv0: Adding interface: dummy0
[   74.113056][ T6821] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.133067][ T6821] batman_adv: batadv0: Interface activated: dummy0
[   74.155962][ T6821] batadv0: mtu less than device minimum
[   74.164281][ T6821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.168580][ T6821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.172519][ T6821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.177174][ T6821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.181383][ T6821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.186397][ T6821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.191464][ T6821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.195586][ T6821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.566687][ T6846] netlink: 'syz.1.414': attribute type 13 has an invalid length.
[   74.750972][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.755846][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.830376][ T6846] batman_adv: batadv0: Interface deactivated: dummy0
[   75.005052][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.025444][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.061188][ T6860] IPv6: Can't replace route, no match found
[   75.150324][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'.
[   75.252887][ T5899] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.258847][ T5899] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.262342][ T5899] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.282696][ T5899] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.353421][ T7000] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20003
[   77.567154][ T7012] netlink: 'syz.1.482': attribute type 10 has an invalid length.
[   77.574028][ T7012] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   77.587549][ T7012] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   78.398758][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'.
[   78.506967][ T7030] macvtap0: refused to change device tx_queue_len
[   78.509705][ T7030] net_ratelimit: 12 callbacks suppressed
[   78.509719][ T7030] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[   78.752491][ T7050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.764655][ T7050] batadv_slave_0: entered promiscuous mode
[   78.771085][ T7050] batadv_slave_0: entered allmulticast mode
[   78.853105][ T7043] netlink: 172 bytes leftover after parsing attributes in process `syz.2.494'.
[   78.968610][ T7061] netlink: 'syz.0.502': attribute type 10 has an invalid length.
[   78.985235][ T7061] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   78.999631][ T7061] tipc: Started in network mode
[   79.001550][ T7061] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[   79.005066][ T7061] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   79.290195][ T7072] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[   79.415903][ T5298] IPVS: starting estimator thread 0...
[   79.509566][ T7085] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   79.518949][ T7080] IPVS: using max 42 ests per chain, 100800 per kthread
[   80.312776][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'.
[   80.486917][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'.
[   80.702991][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'.
[   81.003060][ T7166] sctp: [Deprecated]: syz.0.546 (pid 7166) Use of int in max_burst socket option deprecated.
[   81.003060][ T7166] Use struct sctp_assoc_value instead
[   81.046286][ T7168] netlink: 168 bytes leftover after parsing attributes in process `syz.0.547'.
[   81.138016][  T789] cfg80211: failed to load regulatory.db
[   82.180072][ T7239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.574'.
[   82.223852][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'.
[   82.997440][ T7282] netlink: 300 bytes leftover after parsing attributes in process `syz.1.596'.
[   83.178643][ T7299] lo speed is unknown, defaulting to 1000
[   83.187961][ T7299] lo speed is unknown, defaulting to 1000
[   83.191493][ T7299] lo speed is unknown, defaulting to 1000
[   83.219452][ T7299] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   83.239247][ T7299] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   83.249284][ T7307] netlink: 788 bytes leftover after parsing attributes in process `syz.2.608'.
[   83.283143][ T7299] lo speed is unknown, defaulting to 1000
[   83.303065][ T7299] lo speed is unknown, defaulting to 1000
[   83.307108][ T7299] lo speed is unknown, defaulting to 1000
[   83.500651][ T7322] tap0: tun_chr_ioctl cmd 1074025677
[   83.510327][ T7322] tap0: linktype set to 270
[   83.758065][ T7351] netlink: 244 bytes leftover after parsing attributes in process `syz.1.625'.
[   83.857838][ T7363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.630'.
[   83.865713][ T7363] netlink: 'syz.1.630': attribute type 1 has an invalid length.
[   83.868923][ T7363] netlink: 32 bytes leftover after parsing attributes in process `syz.1.630'.
[   83.996630][ T7381] netlink: 56 bytes leftover after parsing attributes in process `syz.2.635'.
[   83.999841][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'.
[   84.006748][ T7381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.635'.
[   84.217647][ T7399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.221441][ T7399] syzkaller0: entered promiscuous mode
[   84.226663][ T7399] syzkaller0: entered allmulticast mode
[   84.245472][ T7399] tipc: Resetting bearer <eth:syzkaller0>
[   84.250148][ T7398] tipc: Resetting bearer <eth:syzkaller0>
[   84.265554][ T7398] tipc: Disabling bearer <eth:syzkaller0>
[   85.242425][ T7445] netlink: 'syz.0.663': attribute type 1 has an invalid length.
[   85.248408][ T7445] netlink: 72 bytes leftover after parsing attributes in process `syz.0.663'.
[   85.253354][ T7445] netlink: 97 bytes leftover after parsing attributes in process `syz.0.663'.
[   85.301557][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'.
[   85.453828][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'.
[   85.703018][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.706116][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.757844][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.771674][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.862612][ T5899] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.884520][ T5899] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.895946][ T5899] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.901146][ T5899] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.916693][ T5899] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.929194][ T5899] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.950521][ T5899] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.954852][ T5899] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.996637][ T7477] lo speed is unknown, defaulting to 1000
[   86.800964][ T7543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.804269][ T7543] IPv6: NLM_F_CREATE should be set when creating new route
[   86.870948][ T7543] lo: entered allmulticast mode
[   86.880740][ T7543] tunl0: entered allmulticast mode
[   86.890428][ T7543] gre0: entered allmulticast mode
[   86.904569][ T7543] gretap0: entered allmulticast mode
[   86.912357][ T7543] erspan0: entered allmulticast mode
[   86.916976][ T7543] ip_vti0: entered allmulticast mode
[   86.925555][ T7543] ip6_vti0: entered allmulticast mode
[   86.932363][ T7543] sit0: entered allmulticast mode
[   86.940447][ T7543] ip6tnl0: entered allmulticast mode
[   86.947943][ T7543] ip6gre0: entered allmulticast mode
[   86.953525][ T7543] syz_tun: entered allmulticast mode
[   86.960355][ T7543] ip6gretap0: entered allmulticast mode
[   86.969236][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.972059][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.976839][ T7543] bridge0: entered allmulticast mode
[   86.983645][ T7543] vcan0: entered allmulticast mode
[   86.989777][ T7543] bond0: entered allmulticast mode
[   86.991646][ T7543] bond_slave_0: entered allmulticast mode
[   86.993708][ T7543] bond_slave_1: entered allmulticast mode
[   86.996190][ T7543] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   87.005429][ T7543] team0: entered allmulticast mode
[   87.007620][ T7543] team_slave_0: entered allmulticast mode
[   87.009951][ T7543] team_slave_1: entered allmulticast mode
[   87.017990][ T7543] dummy0: entered allmulticast mode
[   87.027545][ T7543] nlmon0: entered allmulticast mode
[   87.032085][ T7543] caif0: entered allmulticast mode
[   87.038705][ T7543] batadv0: entered allmulticast mode
[   87.048007][ T7543] vxcan0: entered allmulticast mode
[   87.053241][ T7543] vxcan1: entered allmulticast mode
[   87.059475][ T7543] veth0: entered allmulticast mode
[   87.068166][ T7543] veth1: entered allmulticast mode
[   87.075776][ T7543] wg0: entered allmulticast mode
[   87.085321][ T7543] wg1: entered allmulticast mode
[   87.093134][ T7543] wg2: entered allmulticast mode
[   87.100645][ T7543] veth0_to_bridge: entered allmulticast mode
[   87.116397][ T7543] veth1_to_bridge: entered allmulticast mode
[   87.128634][ T7543] veth0_to_bond: entered allmulticast mode
[   87.143774][ T7543] veth1_to_bond: entered allmulticast mode
[   87.156392][ T7543] veth0_to_team: entered allmulticast mode
[   87.170700][ T7543] veth1_to_team: entered allmulticast mode
[   87.184871][ T7543] veth0_to_batadv: entered allmulticast mode
[   87.192388][ T7543] batadv_slave_0: left promiscuous mode
[   87.197119][ T7543] veth1_to_batadv: entered allmulticast mode
[   87.204746][ T7543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.209694][ T7543] batadv_slave_1: entered allmulticast mode
[   87.218824][ T7543] xfrm0: entered allmulticast mode
[   87.229621][ T7543] veth0_to_hsr: entered allmulticast mode
[   87.239475][ T7543] hsr_slave_0: entered allmulticast mode
[   87.247309][ T7543] veth1_to_hsr: entered allmulticast mode
[   87.255166][ T7543] hsr_slave_1: entered allmulticast mode
[   87.272834][ T7543] hsr0: entered allmulticast mode
[   87.279582][ T7543] veth1_virt_wifi: entered allmulticast mode
[   87.291764][ T7543] veth0_virt_wifi: entered allmulticast mode
[   87.299329][ T7543] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   87.303310][ T7543] veth1_vlan: entered allmulticast mode
[   87.313175][ T7543] veth0_vlan: entered allmulticast mode
[   87.333989][ T7543] vlan0: entered allmulticast mode
[   87.336704][ T7543] vlan1: entered allmulticast mode
[   87.339632][ T7543] macvlan0: entered allmulticast mode
[   87.348912][ T7543] macvlan1: entered allmulticast mode
[   87.356005][ T7543] ipvlan0: entered allmulticast mode
[   87.359319][ T7543] ipvlan1: entered allmulticast mode
[   87.369402][ T7543] veth1_macvtap: entered allmulticast mode
[   87.380088][ T7543] veth0_macvtap: entered allmulticast mode
[   87.390288][ T7543] macvtap0: entered allmulticast mode
[   87.398226][ T7543] macsec0: entered allmulticast mode
[   87.409058][ T7543] geneve0: entered allmulticast mode
[   87.418119][ T7543] geneve1: entered allmulticast mode
[   87.428406][ T7543] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   87.438392][ T7543] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[   87.447053][ T7543] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[   87.458910][ T7543] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[   87.472820][ T7543] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   87.487284][ T7543] vlan2: entered allmulticast mode
[   87.489697][ T7543] syzkaller0: entered allmulticast mode
[   87.494386][  T970] lo speed is unknown, defaulting to 1000
[   87.497019][  T970] syz2: Port: 1 Link DOWN
[   87.497103][ T5899] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.526524][ T5899] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.530437][ T5899] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.068299][ T7594] netlink: 'syz.0.726': attribute type 4 has an invalid length.
[   89.374970][ T7690] netlink: 'syz.0.768': attribute type 1 has an invalid length.
[   89.390377][ T7690] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.407356][ T7690] bond1: (slave geneve2): making interface the new active one
[   89.411909][ T7690] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   89.416007][ T5899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.419768][ T5899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.430765][ T7690] bond1: entered promiscuous mode
[   89.433058][ T7690] geneve2: entered promiscuous mode
[   89.439440][ T5899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.441982][ T7690] syz.0.768 (7690) used greatest stack depth: 18744 bytes left
[   89.648101][ T7714] __nla_validate_parse: 4 callbacks suppressed
[   89.648114][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'.
[   89.915639][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.786'.
[   89.918874][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'.
[   89.924812][ T7737] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   90.296611][ T7770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.800'.
[   90.536844][ T7793] trusted_key: syz.1.811 sent an empty control message without MSG_MORE.
[   91.340274][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'.
[   91.344323][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'.
[   91.818644][ T7831] lo speed is unknown, defaulting to 1000
[   91.831363][ T7831] lo speed is unknown, defaulting to 1000
[   91.840131][ T7831] lo speed is unknown, defaulting to 1000
[   91.877589][ T7834] erspan0: left allmulticast mode
[   91.911185][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.923090][ T7834] 8021q: adding VLAN 0 to HW filter on device team0
[   91.929330][ T7834] batman_adv: batadv0: Interface activated: dummy0
[   91.932324][ T7834] batadv0: mtu less than device minimum
[   91.937243][ T7834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.942643][ T7834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.948033][ T7834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.953126][ T7834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.958446][ T7834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.963704][ T7834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.969109][ T7834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.973544][ T7831] infiniband syz0: set active
[   91.974421][ T7834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   91.980052][ T7831] infiniband syz0: added lo
[   91.980867][ T7834] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   92.002052][   T24] lo speed is unknown, defaulting to 1000
[   92.005175][   T24] syz0: Port: 1 Link ACTIVE
[   92.031851][ T7842] netlink: 'syz.2.832': attribute type 1 has an invalid length.
[   92.062756][ T7831] RDS/IB: syz0: added
[   92.065481][ T7831] smc: adding ib device syz0 with port count 1
[   92.068493][ T7831] smc:    ib device syz0 port 1 has pnetid 
[   92.072082][   T10] lo speed is unknown, defaulting to 1000
[   92.077917][ T7831] lo speed is unknown, defaulting to 1000
[   92.287167][ T7831] lo speed is unknown, defaulting to 1000
[   92.381247][ T7852] lo speed is unknown, defaulting to 1000
[   92.461479][ T7852] lo speed is unknown, defaulting to 1000
[   92.696361][ T7831] lo speed is unknown, defaulting to 1000
[   93.236252][ T7874] IPv6: NLM_F_REPLACE set, but no existing node found!
[   93.391855][ T7876] lo speed is unknown, defaulting to 1000
[   93.403276][ T7876] lo speed is unknown, defaulting to 1000
[   93.943115][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'.
[   94.019814][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'.
[   94.126086][ T7930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.871'.
[   94.439124][ T7958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.882'.
[   94.571750][ T7970] netlink: 'syz.1.889': attribute type 25 has an invalid length.
[   95.031034][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.914'.
[   95.083717][   T24] lo speed is unknown, defaulting to 1000
[   95.567599][ T8045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.921'.
[   95.570641][ T8045] netem: change failed
[   96.230655][ T8096] netlink: 'syz.0.941': attribute type 1 has an invalid length.
[   96.290103][ T8101] veth0_to_team: entered promiscuous mode
[   96.292011][ T8101] veth0_to_team: entered allmulticast mode
[   96.326404][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'.
[   96.329379][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'.
[   96.332685][ T8104] netlink: 124 bytes leftover after parsing attributes in process `syz.1.944'.
[   96.580124][   T24] IPVS: starting estimator thread 0...
[   96.582998][ T8140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.959'.
[   96.664267][ T8141] IPVS: using max 78 ests per chain, 187200 per kthread
[   98.427903][ T8289] netlink: 'syz.0.1015': attribute type 3 has an invalid length.
[   98.438315][ T8292] net_ratelimit: 13 callbacks suppressed
[   98.438329][ T8292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.447349][ T8289] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1015'.
[   98.629946][ T8309] netlink: 'syz.1.1022': attribute type 3 has an invalid length.
[   98.632478][ T8309] netlink: 'syz.1.1022': attribute type 1 has an invalid length.
[   98.768714][ T8318] Bluetooth: hci0: Opcode 0x080f failed: -22
[   99.003479][ T8342] netlink: 'syz.1.1033': attribute type 1 has an invalid length.
[   99.019330][ T8342] bond3: entered promiscuous mode
[   99.021469][ T8342] 8021q: adding VLAN 0 to HW filter on device bond3
[   99.037733][ T8342] bond3: (slave bridge3): making interface the new active one
[   99.041340][ T8342] bridge3: entered promiscuous mode
[   99.046757][ T8342] bond3: (slave bridge3): Enslaving as an active interface with an up link
[   99.085205][ T8347] pimreg: entered allmulticast mode
[   99.283749][ T8361] lo speed is unknown, defaulting to 1000
[   99.300932][ T8361] lo speed is unknown, defaulting to 1000
[   99.595348][ T8379] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  100.533513][ T8458] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1082'.
[  100.534909][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1081'.
[  100.556380][ T8460] openvswitch: netlink: IP tunnel dst address not specified
[  100.600252][ T8465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1085'.
[  100.824561][ T5221] Bluetooth: hci0: command tx timeout
[  100.936691][ T8486] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1095'.
[  101.808180][ T8524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.811889][ T8524] syzkaller0: entered promiscuous mode
[  101.816610][ T8524] syzkaller0: entered allmulticast mode
[  101.835553][ T8524] tipc: Resetting bearer <eth:syzkaller0>
[  101.839907][ T8523] tipc: Resetting bearer <eth:syzkaller0>
[  101.848535][ T8523] tipc: Disabling bearer <eth:syzkaller0>
[  101.950444][ T8528] team0: No ports can be present during mode change
[  101.999732][ T8532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1117'.
[  102.485945][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'.
[  102.516596][ T8551] vlan2: entered promiscuous mode
[  102.518335][ T8551] bridge0: entered promiscuous mode
[  102.563536][ T8553] lo speed is unknown, defaulting to 1000
[  102.567539][ T8553] lo speed is unknown, defaulting to 1000
[  103.333168][ T8579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1138'.
[  103.353063][ T8579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1138'.
[  103.483460][ T8587] netlink: 'syz.0.1142': attribute type 1 has an invalid length.
[  103.522599][ T8590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1143'.
[  103.541286][ T8587] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  103.547587][ T8587] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  103.598098][ T8592] gretap1: entered promiscuous mode
[  103.618602][ T8592] bond2: (slave gretap1): making interface the new active one
[  103.622476][ T8592] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  103.648088][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'.
[  103.657013][ T8587] macvlan2: entered promiscuous mode
[  103.659379][ T8587] macvlan2: entered allmulticast mode
[  103.662187][ T8587] bond2: entered promiscuous mode
[  103.676489][ T8587] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  103.687367][ T8587] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  103.698332][ T8587] bond2: left promiscuous mode
[  103.948945][ T8606] sctp: [Deprecated]: syz.2.1150 (pid 8606) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.948945][ T8606] Use struct sctp_sack_info instead
[  104.066215][ T8618] bridge_slave_1: left promiscuous mode
[  104.068801][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.083320][ T8618] bridge_slave_0: left promiscuous mode
[  104.090152][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.822237][ T8651] netlink: 'syz.1.1169': attribute type 18 has an invalid length.
[  104.833457][ T8651] netlink: 'syz.1.1169': attribute type 18 has an invalid length.
[  104.835403][ T5899] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.840660][ T5899] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.845944][ T5899] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.850070][ T5899] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.073413][ T8657] netlink: 'syz.0.1171': attribute type 4 has an invalid length.
[  105.731051][ T8701] gtp0: entered promiscuous mode
[  105.738237][ T8701] __nla_validate_parse: 8 callbacks suppressed
[  105.738249][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1192'.
[  105.979778][ T8722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1201'.
[  105.999205][ T8722] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[  106.039957][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1202'.
[  106.052592][ T8724] macvtap1: entered promiscuous mode
[  106.055155][ T8724] macvtap1: entered allmulticast mode
[  106.057342][ T8724] bridge0: entered allmulticast mode
[  106.067718][ T8724] bridge0: left allmulticast mode
[  107.432082][ T8800] lo speed is unknown, defaulting to 1000
[  107.435022][ T8800] lo speed is unknown, defaulting to 1000
[  107.528223][ T8806] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1237'.
[  107.531776][ T8806] tc_dump_action: action bad kind
[  107.673243][ T8817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1243'.
[  107.804769][ T8827] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1247'.
[  107.854706][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  108.158050][ T8856] siw: device registration error -23
[  108.165989][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1257'.
[  108.168333][ T8853] netlink: 'syz.2.1260': attribute type 13 has an invalid length.
[  108.173025][ T8855] netlink: 'syz.0.1259': attribute type 9 has an invalid length.
[  108.180376][ T8855] netlink: 'syz.0.1259': attribute type 7 has an invalid length.
[  108.183055][ T8855] netlink: 'syz.0.1259': attribute type 8 has an invalid length.
[  108.564026][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1274'.
[  108.645418][ T8892] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  109.075270][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1287'.
[  109.078449][ T8912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.934799][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1303'.
[  109.957127][ T8953] lo speed is unknown, defaulting to 1000
[  109.960900][ T8953] lo speed is unknown, defaulting to 1000
[  110.036505][ T8957] bond0: (slave gretap0): Opening slave failed
[  111.180097][ T9037] __nla_validate_parse: 2 callbacks suppressed
[  111.180107][ T9037] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1340'.
[  111.187406][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'.
[  111.261097][ T8898] Set syz1 is full, maxelem 65536 reached
[  111.277010][ T9041] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  111.280417][ T9041] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  112.791759][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1364'.
[  112.876947][ T9091] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1364'.
[  113.198812][ T9127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.208717][ T9127] syzkaller0: entered promiscuous mode
[  113.211874][ T9127] syzkaller0: entered allmulticast mode
[  113.241707][ T9127] tipc: Resetting bearer <eth:syzkaller0>
[  113.248456][ T9126] tipc: Resetting bearer <eth:syzkaller0>
[  113.263932][ T9126] tipc: Disabling bearer <eth:syzkaller0>
[  113.278052][ T9133] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  113.282826][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1382'.
[  113.442773][ T9143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.448701][ T9143] syzkaller0: entered promiscuous mode
[  113.451245][ T9143] syzkaller0: entered allmulticast mode
[  113.471777][ T9143] tipc: Resetting bearer <eth:syzkaller0>
[  113.480557][ T9141] tipc: Resetting bearer <eth:syzkaller0>
[  113.492368][ T9141] tipc: Disabling bearer <eth:syzkaller0>
[  114.092329][ T9187] syzkaller0: entered promiscuous mode
[  114.095228][ T9187] syzkaller0: entered allmulticast mode
[  114.672447][ T9223] netlink: zone id is out of range
[  114.675404][ T9223] netlink: zone id is out of range
[  114.677779][ T9223] netlink: zone id is out of range
[  114.679975][ T9223] netlink: zone id is out of range
[  114.682134][ T9223] netlink: zone id is out of range
[  114.696764][ T9223] netlink: zone id is out of range
[  114.699112][ T9223] netlink: zone id is out of range
[  114.701757][ T9223] netlink: zone id is out of range
[  114.706533][ T9223] netlink: zone id is out of range
[  114.708709][ T9223] netlink: zone id is out of range
[  114.884529][ T9234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.889461][ T9234] syzkaller0: entered promiscuous mode
[  114.892873][ T9234] syzkaller0: entered allmulticast mode
[  114.902625][ T9234] tipc: Resetting bearer <eth:syzkaller0>
[  114.910012][ T9232] tipc: Resetting bearer <eth:syzkaller0>
[  114.916894][ T9237] netlink: 'syz.2.1429': attribute type 39 has an invalid length.
[  114.924208][ T9232] tipc: Disabling bearer <eth:syzkaller0>
[  115.232456][ T9259] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1440'.
[  115.296584][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1440'.
[  115.679270][ T9289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1454'.
[  115.682294][ T9289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1454'.
[  115.789452][ T9301] gre1: entered allmulticast mode
[  115.802564][ T9303] netlink: 'syz.1.1460': attribute type 3 has an invalid length.
[  115.915901][ T9314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.919465][ T9314] syzkaller0: entered promiscuous mode
[  115.921912][ T9314] syzkaller0: entered allmulticast mode
[  115.963286][ T9314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1465'.
[  115.969894][ T9314] netlink: 'syz.0.1465': attribute type 4 has an invalid length.
[  115.995189][ T9314] tipc: Resetting bearer <eth:syzkaller0>
[  116.010358][ T9312] tipc: Resetting bearer <eth:syzkaller0>
[  116.046684][ T9312] tipc: Disabling bearer <eth:syzkaller0>
[  116.122531][ T9327] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  116.168042][ T9332] bond0: left allmulticast mode
[  116.173647][ T9332] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.437771][ T9351] netlink: 'syz.1.1481': attribute type 3 has an invalid length.
[  116.813336][ T9373] __nla_validate_parse: 1 callbacks suppressed
[  116.813355][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'.
[  116.834485][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1491'.
[  116.842528][ T9373] netlink: 'syz.1.1491': attribute type 13 has an invalid length.
[  116.846396][ T9373] netlink: 'syz.1.1491': attribute type 11 has an invalid length.
[  116.929022][ T9379] syz.0.1494 uses old SIOCAX25GETINFO
[  117.069036][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1498'.
[  117.176894][ T9395] bond1: left promiscuous mode
[  117.179120][ T9395] geneve2: left promiscuous mode
[  117.182158][ T9395] gretap1: left promiscuous mode
[  117.450441][ T9429] netlink: 'syz.0.1515': attribute type 10 has an invalid length.
[  117.478318][ T9429] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.482286][ T9429] bond0: entered allmulticast mode
[  117.486063][ T9429] team0: Port device bond0 added
[  117.576894][ T9442] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.579744][ T9442] syzkaller0: entered promiscuous mode
[  117.581589][ T9442] syzkaller0: entered allmulticast mode
[  117.598826][ T9442] tipc: Resetting bearer <eth:syzkaller0>
[  117.603107][ T9441] tipc: Resetting bearer <eth:syzkaller0>
[  117.630999][ T9441] tipc: Disabling bearer <eth:syzkaller0>
[  117.826968][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1527'.
[  117.897876][ T9462] netlink: 'syz.2.1527': attribute type 2 has an invalid length.
[  117.911779][ T9462] : entered promiscuous mode
[  119.748757][ T9577] net_ratelimit: 7 callbacks suppressed
[  119.748771][ T9577] openvswitch: netlink: Actions may not be safe on all matching packets
[  119.799930][ T9580] netlink: 'syz.0.1584': attribute type 10 has an invalid length.
[  119.803568][ T9580] macvlan0: entered promiscuous mode
[  119.813390][ T9580] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  119.980903][ T9586] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  119.983975][ T9586] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  119.988110][ T9586] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  120.227173][ T9600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1594'.
[  120.338263][ T9609] netlink: 'syz.1.1598': attribute type 11 has an invalid length.
[  120.341896][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'.
[  120.351651][ T9609] netlink: 'syz.1.1598': attribute type 11 has an invalid length.
[  120.355654][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'.
[  120.633829][ T9625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1606'.
[  121.157126][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'.
[  121.160847][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1621'.
[  121.166775][ T9659] netlink: 'syz.2.1621': attribute type 3 has an invalid length.
[  121.179502][ T9661] ip6gre1: entered allmulticast mode
[  121.323374][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.330542][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.340866][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.348621][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.481691][ T9689] bond0: entered promiscuous mode
[  121.483621][ T9689] bond_slave_0: entered promiscuous mode
[  121.486879][ T9689] bond_slave_1: entered promiscuous mode
[  121.489746][ T9689] bond0: left promiscuous mode
[  121.491476][ T9689] bond_slave_0: left promiscuous mode
[  121.493593][ T9689] bond_slave_1: left promiscuous mode
[  121.663196][ T9702] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  121.701179][ T9702] bond0: (slave team0): Releasing backup interface
[  121.719661][ T9702] batman_adv: batadv0: Interface deactivated: dummy0
[  121.722758][ T9702] batman_adv: batadv0: Removing interface: dummy0
[  121.746588][ T9702] bridge_slave_0: left allmulticast mode
[  121.749146][ T9702] bridge_slave_0: left promiscuous mode
[  121.751662][ T9702] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.763542][ T9711] netlink: 'syz.2.1646': attribute type 4 has an invalid length.
[  121.792898][ T9702] bridge_slave_1: left allmulticast mode
[  121.797595][ T9702] bridge_slave_1: left promiscuous mode
[  121.799862][ T9702] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.808615][ T9702] bond0: (slave bond_slave_0): Releasing backup interface
[  121.813221][ T9702] bond0: (slave bond_slave_1): Releasing backup interface
[  121.819869][ T9702] team0: Port device team_slave_0 removed
[  121.823991][ T9702] team0: Port device team_slave_1 removed
[  121.828570][ T9702] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.832543][ T9702] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.840226][ T9702] bond0: (slave wlan1): Releasing backup interface
[  121.846529][ T9702] bond1: (slave bridge1): Releasing backup interface
[  121.850179][ T9702] bridge1: left promiscuous mode
[  121.853147][ T9702] bond2: (slave veth3): Releasing active interface
[  121.858630][ T9702] bond3: (slave bridge3): Releasing backup interface
[  121.861141][ T9702] bridge3: left promiscuous mode
[  121.880897][ T9716] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  121.886879][ T9716] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  122.236210][ T9744] netlink: 'syz.2.1658': attribute type 64 has an invalid length.
[  122.266268][ T9747] netlink: 'syz.0.1661': attribute type 1 has an invalid length.
[  122.299441][ T9749] netlink: 'syz.0.1662': attribute type 1 has an invalid length.
[  122.351879][ T9753] __nla_validate_parse: 3 callbacks suppressed
[  122.351892][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1664'.
[  122.362499][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1664'.
[  122.598223][ T9766] netlink: 'syz.2.1670': attribute type 1 has an invalid length.
[  122.601036][ T9766] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1670'.
[  122.604634][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'.
[  122.723043][ T9779] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1677'.
[  122.791735][ T9783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1679'.
[  123.042468][ T9805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.051298][ T9805] syzkaller0: entered promiscuous mode
[  123.053682][ T9805] syzkaller0: entered allmulticast mode
[  123.191670][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'.
[  123.196531][ T9814] veth1_macvtap: default FDB implementation only supports local addresses
[  123.342437][ T9826] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  123.944693][ T9854] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  123.957643][ T9853] netlink: 'syz.0.1714': attribute type 17 has an invalid length.
[  124.035973][   T51] tipc: Node number set to 2520026299
[  124.050055][ T9861] netem: incorrect gi model size
[  124.052496][ T9861] netem: change failed
[  124.073065][ T9863] netlink: 'syz.1.1718': attribute type 5 has an invalid length.
[  124.303147][ T9876] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1721'.
[  124.474840][  T970] tipc: Node number set to 1046243185
[  124.551142][ T9884] lo speed is unknown, defaulting to 1000
[  124.566165][ T9884] lo speed is unknown, defaulting to 1000
[  124.976361][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1730'.
[  125.298597][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'.
[  125.616526][ T9961] validate_nla: 3 callbacks suppressed
[  125.616537][ T9961] netlink: 'syz.1.1759': attribute type 13 has an invalid length.
[  125.621236][ T9961] netlink: 'syz.1.1759': attribute type 17 has an invalid length.
[  125.679175][ T9961] 8021q: adding VLAN 0 to HW filter on device team0
[  125.685257][ T9961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.396876][T10009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.406571][T10009] syzkaller0: entered promiscuous mode
[  126.408660][T10009] syzkaller0: entered allmulticast mode
[  126.448684][T10009] tipc: Resetting bearer <eth:syzkaller0>
[  126.453884][T10008] tipc: Resetting bearer <eth:syzkaller0>
[  126.480347][T10008] tipc: Disabling bearer <eth:syzkaller0>
[  126.611839][T10033] ipvlan2: entered promiscuous mode
[  126.613605][T10033] ipvlan2: entered allmulticast mode
[  126.625630][T10033] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  126.959222][T10077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.963418][T10077] syzkaller0: entered promiscuous mode
[  126.969780][T10077] syzkaller0: entered allmulticast mode
[  126.986977][T10077] tipc: Resetting bearer <eth:syzkaller0>
[  126.990365][T10075] tipc: Resetting bearer <eth:syzkaller0>
[  127.006048][T10075] tipc: Disabling bearer <eth:syzkaller0>
[  127.057650][T10088] netlink: 'syz.2.1798': attribute type 5 has an invalid length.
[  127.371761][T10123] __nla_validate_parse: 4 callbacks suppressed
[  127.371790][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'.
[  127.382797][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1816'.
[  127.386677][T10123] netlink: 'syz.2.1816': attribute type 18 has an invalid length.
[  127.390381][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'.
[  127.399535][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1816'.
[  127.403578][T10123] netlink: 'syz.2.1816': attribute type 18 has an invalid length.
[  127.929834][T10173] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.138676][T10192] macvlan0: entered allmulticast mode
[  128.140735][T10192] veth1_vlan: entered allmulticast mode
[  128.465599][T10203] lo speed is unknown, defaulting to 1000
[  128.470628][T10203] lo speed is unknown, defaulting to 1000
[  128.639350][T10203] netlink: 'syz.0.1852': attribute type 13 has an invalid length.
[  128.650357][T10203] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  129.083163][T10227] netlink: 844 bytes leftover after parsing attributes in process `syz.1.1856'.
[  129.101525][T10227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1856'.
[  129.286817][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'.
[  129.828874][T10297] netlink: 'syz.0.1883': attribute type 1 has an invalid length.
[  129.846601][T10297] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1883'.
[  129.901279][T10301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1883'.
[  131.829078][T10397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1926'.
[  132.065224][   T33] audit: type=1800 audit(1753745013.817:2): pid=10395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1926" name="cgroup.controllers" dev="tmpfs" ino=3300 res=0 errno=0
[  132.336880][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  133.803185][T10528] __nla_validate_parse: 3 callbacks suppressed
[  133.803204][T10528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1982'.
[  135.075516][T10602] lo speed is unknown, defaulting to 1000
[  135.079470][T10602] lo speed is unknown, defaulting to 1000
[  136.120765][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'.
[  136.272041][T10683] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  137.500531][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'.
[  137.655241][T10725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2066'.
[  137.904959][T10747] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2075'.
[  137.908075][T10747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2075'.
[  137.911049][T10747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2075'.
[  138.003536][T10755] netlink: 'syz.2.2079': attribute type 13 has an invalid length.
[  138.014709][T10755] netlink: 'syz.2.2079': attribute type 17 has an invalid length.
[  138.041436][T10755] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.049356][T10755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.092228][T10755] lo speed is unknown, defaulting to 1000
[  138.096202][T10755] lo speed is unknown, defaulting to 1000
[  138.137022][T10759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2079'.
[  138.149564][T10759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.209573][T10764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.266848][T10763] lo speed is unknown, defaulting to 1000
[  138.275257][T10764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.288761][T10763] lo speed is unknown, defaulting to 1000
[  138.448285][T10765] netlink: 'syz.0.2082': attribute type 13 has an invalid length.
[  138.451566][T10765] netlink: 'syz.0.2082': attribute type 17 has an invalid length.
[  138.455168][T10765] lo: left allmulticast mode
[  138.460197][T10765] tunl0: left allmulticast mode
[  138.463625][T10765] gre0: left allmulticast mode
[  138.470569][T10765] gretap0: left allmulticast mode
[  138.491281][T10765] erspan0: left allmulticast mode
[  138.502474][T10765] ip_vti0: left allmulticast mode
[  138.508360][T10765] ip6_vti0: left allmulticast mode
[  138.513224][T10765] sit0: left allmulticast mode
[  138.523280][T10765] ip6tnl0: left allmulticast mode
[  138.530172][T10765] ip6gre0: left allmulticast mode
[  138.543588][T10765] ip6gretap0: left allmulticast mode
[  138.561226][T10765] team0: left allmulticast mode
[  138.563365][T10765] bond0: left allmulticast mode
[  138.566497][T10765] syz_tun: left allmulticast mode
[  138.573193][T10765] 8021q: adding VLAN 0 to HW filter on device team0
[  138.578209][T10765] dummy0: left allmulticast mode
[  138.587098][T10765] nlmon0: left allmulticast mode
[  138.590968][T10765] caif0: left allmulticast mode
[  138.593200][T10765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.601374][   T51] lo speed is unknown, defaulting to 1000
[  138.602485][ T5899] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  138.603859][   T51] syz2: Port: 1 Link ACTIVE
[  138.834822][T10782] bond0: (slave syz_tun): Releasing backup interface
[  138.871401][T10782] team0: Port device bond0 removed
[  138.877623][T10782] bond0: (slave bond_slave_0): Releasing backup interface
[  138.882253][T10782] bond0: (slave bond_slave_1): Releasing backup interface
[  138.889760][T10782] team0: Port device team_slave_0 removed
[  138.895978][T10782] team0: Port device team_slave_1 removed
[  138.898968][T10782] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.902521][T10782] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.908001][T10782] bond0: (slave macvlan0): Releasing backup interface
[  138.913298][T10782] bond0: (slave wlan1): Releasing backup interface
[  138.921961][T10782] bond1: (slave geneve2): Releasing active interface
[  138.930352][T10782] bond2: (slave gretap1): Releasing active interface
[  138.940783][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.956971][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.957856][T10782] netlink: 'syz.0.2090': attribute type 10 has an invalid length.
[  138.960866][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.013473][T10782] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  139.020382][T10784] lo speed is unknown, defaulting to 1000
[  139.033808][T10782] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.039969][T10782] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.041070][T10784] lo speed is unknown, defaulting to 1000
[  139.657933][T10818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2103'.
[  139.684409][ T5280] udevd[5280]: worker [10559] terminated by signal 33 (Unknown signal 33)
[  139.687217][ T5280] udevd[5280]: worker [10559] failed while handling '/devices/faux/regulatory/firmware/regulatory.db'
[  140.431953][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2126'.
[  140.463304][T10869] sctp: [Deprecated]: syz.2.2127 (pid 10869) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.463304][T10869] Use struct sctp_sack_info instead
[  140.609222][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'.
[  140.642332][T10882] netlink: 'syz.0.2133': attribute type 2 has an invalid length.
[  140.973385][T10920] openvswitch: netlink: Missing key (keys=40, expected=80)
[  141.083271][T10935] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2159'.
[  141.088601][T10936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2158'.
[  141.251445][T10958] ==================================================================
[  141.255008][T10958] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  141.258557][T10958] Read of size 2 at addr ffff888030620142 by task syz.1.2169/10958
[  141.262964][T10958] 
[  141.264062][T10958] CPU: 0 UID: 0 PID: 10958 Comm: syz.1.2169 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  141.264079][T10958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.264088][T10958] Call Trace:
[  141.264095][T10958]  <TASK>
[  141.264102][T10958]  dump_stack_lvl+0x189/0x250
[  141.264124][T10958]  ? __kasan_check_byte+0x12/0x40
[  141.264144][T10958]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.264158][T10958]  ? lock_release+0x4b/0x3e0
[  141.264174][T10958]  ? __virt_addr_valid+0x4a5/0x5c0
[  141.264193][T10958]  print_report+0xca/0x230
[  141.264213][T10958]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  141.264227][T10958]  kasan_report+0x118/0x150
[  141.264245][T10958]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  141.264261][T10958]  __xfrm_state_lookup+0x6ad/0x8d0
[  141.264278][T10958]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  141.264295][T10958]  xfrm_state_add+0x27d/0xc40
[  141.264313][T10958]  xfrm_add_sa+0x35a1/0x4070
[  141.264332][T10958]  ? __pfx_xfrm_add_sa+0x10/0x10
[  141.264349][T10958]  ? apparmor_capable+0x137/0x1b0
[  141.264367][T10958]  ? __nla_parse+0x40/0x60
[  141.264382][T10958]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.264400][T10958]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.264426][T10958]  ? __mutex_trylock_common+0x153/0x260
[  141.264442][T10958]  ? __pfx___mutex_trylock_common+0x10/0x10
[  141.264458][T10958]  ? rcu_is_watching+0x15/0xb0
[  141.264472][T10958]  ? trace_contention_end+0x39/0x120
[  141.264488][T10958]  netlink_rcv_skb+0x208/0x470
[  141.264502][T10958]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.264519][T10958]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  141.264535][T10958]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.264546][T10958]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.264559][T10958]  xfrm_netlink_rcv+0x79/0x90
[  141.264574][T10958]  netlink_unicast+0x82f/0x9e0
[  141.264596][T10958]  ? __pfx_netlink_unicast+0x10/0x10
[  141.264614][T10958]  ? netlink_sendmsg+0x642/0xb30
[  141.264625][T10958]  ? skb_put+0x11b/0x210
[  141.264640][T10958]  netlink_sendmsg+0x805/0xb30
[  141.264655][T10958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.264698][T10958]  ? aa_sock_msg_perm+0x94/0x160
[  141.264713][T10958]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  141.264726][T10958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.264739][T10958]  __sock_sendmsg+0x21c/0x270
[  141.264758][T10958]  ____sys_sendmsg+0x505/0x830
[  141.264775][T10958]  ? __pfx_____sys_sendmsg+0x10/0x10
[  141.264792][T10958]  ? import_iovec+0x74/0xa0
[  141.264809][T10958]  ___sys_sendmsg+0x21f/0x2a0
[  141.264823][T10958]  ? __pfx____sys_sendmsg+0x10/0x10
[  141.264848][T10958]  ? __fget_files+0x2a/0x420
[  141.264865][T10958]  ? __fget_files+0x3a0/0x420
[  141.264885][T10958]  __x64_sys_sendmsg+0x19b/0x260
[  141.264900][T10958]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  141.264917][T10958]  ? rcu_is_watching+0x15/0xb0
[  141.264932][T10958]  ? do_syscall_64+0xbe/0x3b0
[  141.264947][T10958]  do_syscall_64+0xfa/0x3b0
[  141.264958][T10958]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.264975][T10958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.264988][T10958]  ? exc_page_fault+0x9f/0xf0
[  141.265006][T10958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.265019][T10958] RIP: 0033:0x7f99d7b8e9a9
[  141.265032][T10958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.265044][T10958] RSP: 002b:00007f99d8ab4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  141.265060][T10958] RAX: ffffffffffffffda RBX: 00007f99d7db5fa0 RCX: 00007f99d7b8e9a9
[  141.265070][T10958] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003
[  141.265079][T10958] RBP: 00007f99d7c10d69 R08: 0000000000000000 R09: 0000000000000000
[  141.265087][T10958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.265095][T10958] R13: 0000000000000000 R14: 00007f99d7db5fa0 R15: 00007ffe5fcbd928
[  141.265111][T10958]  </TASK>
[  141.265116][T10958] 
[  141.424014][T10958] Allocated by task 6026:
[  141.425841][T10958]  kasan_save_track+0x3e/0x80
[  141.427825][T10958]  __kasan_slab_alloc+0x6c/0x80
[  141.429834][T10958]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  141.432115][T10958]  xfrm_state_alloc+0x24/0x2f0
[  141.434123][T10958]  __find_acq_core+0x8a7/0x1c00
[  141.436147][T10958]  xfrm_find_acq+0x78/0xa0
[  141.438027][T10958]  xfrm_alloc_userspi+0x6b3/0xc90
[  141.440122][T10958]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.442256][T10958]  netlink_rcv_skb+0x208/0x470
[  141.444332][T10958]  xfrm_netlink_rcv+0x79/0x90
[  141.446423][T10958]  netlink_unicast+0x82f/0x9e0
[  141.448583][T10958]  netlink_sendmsg+0x805/0xb30
[  141.450630][T10958]  __sock_sendmsg+0x21c/0x270
[  141.452725][T10958]  ____sys_sendmsg+0x505/0x830
[  141.454927][T10958]  ___sys_sendmsg+0x21f/0x2a0
[  141.457422][T10958]  __x64_sys_sendmsg+0x19b/0x260
[  141.459647][T10958]  do_syscall_64+0xfa/0x3b0
[  141.461816][T10958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.464361][T10958] 
[  141.465386][T10958] Freed by task 970:
[  141.467024][T10958]  kasan_save_track+0x3e/0x80
[  141.468968][T10958]  kasan_save_free_info+0x46/0x50
[  141.471216][T10958]  __kasan_slab_free+0x62/0x70
[  141.473373][T10958]  kmem_cache_free+0x18f/0x400
[  141.475424][T10958]  xfrm_state_gc_task+0x518/0x6a0
[  141.477537][T10958]  process_scheduled_works+0xae1/0x17b0
[  141.479753][T10958]  worker_thread+0x8a0/0xda0
[  141.481722][T10958]  kthread+0x711/0x8a0
[  141.483581][T10958]  ret_from_fork+0x3fc/0x770
[  141.485724][T10958]  ret_from_fork_asm+0x1a/0x30
[  141.487824][T10958] 
[  141.488914][T10958] The buggy address belongs to the object at ffff888030620000
[  141.488914][T10958]  which belongs to the cache xfrm_state of size 928
[  141.494743][T10958] The buggy address is located 322 bytes inside of
[  141.494743][T10958]  freed 928-byte region [ffff888030620000, ffff8880306203a0)
[  141.500326][T10958] 
[  141.501371][T10958] The buggy address belongs to the physical page:
[  141.504003][T10958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030621200 pfn:0x30620
[  141.508141][T10958] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  141.511767][T10958] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  141.514858][T10958] page_type: f5(slab)
[  141.516519][T10958] raw: 00fff00000000040 ffff88801c709a00 dead000000000122 0000000000000000
[  141.520168][T10958] raw: ffff888030621200 00000000800e0009 00000000f5000000 0000000000000000
[  141.523737][T10958] head: 00fff00000000040 ffff88801c709a00 dead000000000122 0000000000000000
[  141.527299][T10958] head: ffff888030621200 00000000800e0009 00000000f5000000 0000000000000000
[  141.530872][T10958] head: 00fff00000000002 ffffea0000c18801 00000000ffffffff 00000000ffffffff
[  141.534517][T10958] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  141.538127][T10958] page dumped because: kasan: bad access detected
[  141.540755][T10958] page_owner tracks the page as allocated
[  141.543252][T10958] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6026, tgid 6024 (syz.1.55), ts 61847635358, free_ts 61736639604
[  141.550861][T10958]  post_alloc_hook+0x240/0x2a0
[  141.552987][T10958]  get_page_from_freelist+0x21e4/0x22c0
[  141.555382][T10958]  __alloc_frozen_pages_noprof+0x181/0x370
[  141.557993][T10958]  alloc_pages_mpol+0x232/0x4a0
[  141.560054][T10958]  allocate_slab+0x8a/0x3b0
[  141.561961][T10958]  ___slab_alloc+0xbfc/0x1480
[  141.563956][T10958]  kmem_cache_alloc_noprof+0x283/0x3c0
[  141.566284][T10958]  xfrm_state_alloc+0x24/0x2f0
[  141.568353][T10958]  __find_acq_core+0x8a7/0x1c00
[  141.570398][T10958]  xfrm_find_acq+0x78/0xa0
[  141.572367][T10958]  xfrm_alloc_userspi+0x6b3/0xc90
[  141.574540][T10958]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.576623][T10958]  netlink_rcv_skb+0x208/0x470
[  141.578597][T10958]  xfrm_netlink_rcv+0x79/0x90
[  141.580580][T10958]  netlink_unicast+0x82f/0x9e0
[  141.582698][T10958]  netlink_sendmsg+0x805/0xb30
[  141.584721][T10958] page last free pid 12 tgid 12 stack trace:
[  141.587249][T10958]  __free_frozen_pages+0xc71/0xe70
[  141.589517][T10958]  stack_depot_save_flags+0x445/0x900
[  141.591917][T10958]  ref_tracker_free+0xfe/0x7d0
[  141.594017][T10958]  ip6gre_tunnel_uninit+0x156/0x1e0
[  141.596331][T10958]  unregister_netdevice_many_notify+0x1953/0x1ff0
[  141.599086][T10958]  ops_undo_list+0x3dc/0x990
[  141.601047][T10958]  cleanup_net+0x4c5/0x800
[  141.602978][T10958]  process_scheduled_works+0xae1/0x17b0
[  141.605430][T10958]  worker_thread+0x8a0/0xda0
[  141.607511][T10958]  kthread+0x711/0x8a0
[  141.609432][T10958]  ret_from_fork+0x3fc/0x770
[  141.611653][T10958]  ret_from_fork_asm+0x1a/0x30
[  141.613871][T10958] 
[  141.615127][T10958] Memory state around the buggy address:
[  141.617568][T10958]  ffff888030620000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.621141][T10958]  ffff888030620080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.624547][T10958] >ffff888030620100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.627841][T10958]                                            ^
[  141.630371][T10958]  ffff888030620180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.633861][T10958]  ffff888030620200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.637316][T10958] ==================================================================
[  141.641088][T10958] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  141.644373][T10958] CPU: 0 UID: 0 PID: 10958 Comm: syz.1.2169 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  141.649902][T10958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.654208][T10958] Call Trace:
[  141.655700][T10958]  <TASK>
[  141.657052][T10958]  dump_stack_lvl+0x99/0x250
[  141.659072][T10958]  ? __asan_memcpy+0x40/0x70
[  141.661062][T10958]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.663367][T10958]  ? __pfx__printk+0x10/0x10
[  141.665548][T10958]  panic+0x2db/0x790
[  141.667305][T10958]  ? __pfx_panic+0x10/0x10
[  141.669244][T10958]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  141.671784][T10958]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  141.674261][T10958]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  141.677026][T10958]  ? print_memory_metadata+0x314/0x400
[  141.679641][T10958]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  141.682171][T10958]  check_panic_on_warn+0x89/0xb0
[  141.684356][T10958]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  141.686613][T10958]  end_report+0x78/0x160
[  141.688454][T10958]  kasan_report+0x129/0x150
[  141.690394][T10958]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  141.692855][T10958]  __xfrm_state_lookup+0x6ad/0x8d0
[  141.695098][T10958]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  141.697579][T10958]  xfrm_state_add+0x27d/0xc40
[  141.699650][T10958]  xfrm_add_sa+0x35a1/0x4070
[  141.701869][T10958]  ? __pfx_xfrm_add_sa+0x10/0x10
[  141.704140][T10958]  ? apparmor_capable+0x137/0x1b0
[  141.706414][T10958]  ? __nla_parse+0x40/0x60
[  141.708461][T10958]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.710727][T10958]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.713066][T10958]  ? __mutex_trylock_common+0x153/0x260
[  141.715475][T10958]  ? __pfx___mutex_trylock_common+0x10/0x10
[  141.718276][T10958]  ? rcu_is_watching+0x15/0xb0
[  141.720391][T10958]  ? trace_contention_end+0x39/0x120
[  141.722763][T10958]  netlink_rcv_skb+0x208/0x470
[  141.724867][T10958]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.727241][T10958]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  141.729555][T10958]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.732104][T10958]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.734615][T10958]  xfrm_netlink_rcv+0x79/0x90
[  141.736812][T10958]  netlink_unicast+0x82f/0x9e0
[  141.739279][T10958]  ? __pfx_netlink_unicast+0x10/0x10
[  141.742193][T10958]  ? netlink_sendmsg+0x642/0xb30
[  141.744374][T10958]  ? skb_put+0x11b/0x210
[  141.746219][T10958]  netlink_sendmsg+0x805/0xb30
[  141.748318][T10958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.750614][T10958]  ? aa_sock_msg_perm+0x94/0x160
[  141.752905][T10958]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  141.755849][T10958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.758942][T10958]  __sock_sendmsg+0x21c/0x270
[  141.761446][T10958]  ____sys_sendmsg+0x505/0x830
[  141.763534][T10958]  ? __pfx_____sys_sendmsg+0x10/0x10
[  141.765845][T10958]  ? import_iovec+0x74/0xa0
[  141.767727][T10958]  ___sys_sendmsg+0x21f/0x2a0
[  141.769896][T10958]  ? __pfx____sys_sendmsg+0x10/0x10
[  141.772143][T10958]  ? __fget_files+0x2a/0x420
[  141.774124][T10958]  ? __fget_files+0x3a0/0x420
[  141.776116][T10958]  __x64_sys_sendmsg+0x19b/0x260
[  141.778269][T10958]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  141.780691][T10958]  ? rcu_is_watching+0x15/0xb0
[  141.782790][T10958]  ? do_syscall_64+0xbe/0x3b0
[  141.784822][T10958]  do_syscall_64+0xfa/0x3b0
[  141.786792][T10958]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.789018][T10958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.791729][T10958]  ? exc_page_fault+0x9f/0xf0
[  141.793823][T10958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.796377][T10958] RIP: 0033:0x7f99d7b8e9a9
[  141.798316][T10958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.806509][T10958] RSP: 002b:00007f99d8ab4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  141.810126][T10958] RAX: ffffffffffffffda RBX: 00007f99d7db5fa0 RCX: 00007f99d7b8e9a9
[  141.813552][T10958] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003
[  141.817199][T10958] RBP: 00007f99d7c10d69 R08: 0000000000000000 R09: 0000000000000000
[  141.820687][T10958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.823932][T10958] R13: 0000000000000000 R14: 00007f99d7db5fa0 R15: 00007ffe5fcbd928
[  141.827513][T10958]  </TASK>
[  141.830017][T10958] Kernel Offset: disabled
[  141.832156][T10958] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:23:43  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000194b RDI=000000000000194c RBP=00000000000003f8 RSP=ffffc90002bbe9d0
R8 =ffff8880217e8237 R9 =1ffff110042fd046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99af18a8 R14=ffffffff99df64c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f99d8ab46c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=00000000252a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f99d7d86478 00007f99d7d86450 XMM03=00007f99d7d86488 00007f99d7d86480
XMM04=00007f99d88ed100 00007f99d7d86440 XMM05=00007f99d7d86458 00007f99d7d864a0
XMM06=00007f99d7d86498 00007f99d7d86490 XMM07=00007f99d7d86488 00007f99d7d86480
XMM08=0000000000000000 00007f99d7c11de3 XMM09=0000000000000000 00007f99d7c11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff822d45d2 RBX=ffff8880fc480000 RCX=0000000000000000 RDX=ffff888021a91cc0
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc90002b2f550
R8 =0000000000000000 R9 =ffffffff822d5647 R10=dffffc0000000000 R11=fffff940008df541
R12=000000000011bea8 R13=dffffc0000000000 R14=ffff88805fffa870 R15=0000000000001000
RIP=ffffffff81c02ca1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555590960500 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056214406e000 CR3=000000010d870000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
