last executing test programs:

1m34.971148931s ago: executing program 0 (id=545):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

1m34.970731965s ago: executing program 0 (id=546):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/8, 0x8}}, 0x10)

1m34.891492274s ago: executing program 0 (id=547):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x4820100148f9ccba, 0x0, 0x0, 0x0, 0x2043, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)

1m34.89114235s ago: executing program 0 (id=548):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xfdef}], 0x1}, 0x48800)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

1m34.82752453s ago: executing program 1 (id=549):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38)

1m34.707536515s ago: executing program 1 (id=550):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff, 0x4}, 0x14030, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r0, 0x1}, 0x20)

1m34.550149128s ago: executing program 1 (id=552):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff00000000711043000000000095000000000000000b44c146b9162779ae713b31e59d22c10080dc4afd5584fe146d0167de3cd228921652b7a06f51b8dd7ecc6ac0cad2b575808aafc7ac733b456c4ce275bb8d8d3fc3f06dc161e201a1892f02888e2c2fb5b89cd940d7182358b52c4d08c6ae9dc7ebf5c8998606ff433c9eb70d5b74132eb7a14ede4462af169cd6289dba3f05ebaa775abafb3d06a5250eb3556b2978565a7cee4564de81d27770246698e3bff8"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1m34.469451928s ago: executing program 1 (id=555):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x3000000, 0x12, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000000500000085000000a00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m34.469041135s ago: executing program 0 (id=557):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"})

1m33.777669583s ago: executing program 1 (id=558):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000024000480200001800d00010073796e70726f7879000000000c00028006000140b4b400001400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
close(r0)

1m33.775900942s ago: executing program 0 (id=559):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x2000007, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x12)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x40c4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)

1m33.593540063s ago: executing program 32 (id=559):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x2000007, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x12)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x40c4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)

1m33.545922593s ago: executing program 1 (id=562):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48)

1m33.395753149s ago: executing program 33 (id=562):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48)

1.110376494s ago: executing program 4 (id=1859):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r1}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000300)="9cbcd836d005", &(0x7f00000001c0)=@tcp, 0x2}, 0x20)

1.060456477s ago: executing program 4 (id=1860):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x21}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.060269946s ago: executing program 4 (id=1861):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)

949.538592ms ago: executing program 4 (id=1865):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

840.308128ms ago: executing program 4 (id=1867):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030039000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000", 0x29}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x6, 0x0, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x4008011)

836.256355ms ago: executing program 2 (id=1868):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

733.974581ms ago: executing program 2 (id=1869):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590214000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xd6a3}], 0x4}, 0x0)

658.396943ms ago: executing program 2 (id=1870):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'syz_tun\x00', @random="0200"})

589.203478ms ago: executing program 3 (id=1872):
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x13, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="fbfcca1f7294c1beec000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x200, 0x2, 0xfffffffffffffffe, 0x10000, 0x5, 0x0, 0xfffffefe}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))

588.649917ms ago: executing program 2 (id=1873):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4)
r2 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000003c0), 0x4)
recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e28, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="400f000000", 0x5}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010102}}}], 0x20}, 0x0)

530.067092ms ago: executing program 3 (id=1874):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0x33}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x3, 0x1000}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4075}, 0x4800)

529.731003ms ago: executing program 3 (id=1875):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

480.158343ms ago: executing program 2 (id=1876):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

310.215571ms ago: executing program 3 (id=1877):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xc, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a0000080016"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)

70.38108ms ago: executing program 2 (id=1878):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f08847", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

70.174136ms ago: executing program 3 (id=1879):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000000f02000000000000005f"], 0x0, 0x4a, 0x0, 0x1}, 0x28)

369.484µs ago: executing program 4 (id=1880):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000001000)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)

0s ago: executing program 3 (id=1881):
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x86b90294e1f5d799}}}, 0x3c}, 0x1, 0x0, 0x0, 0xf36068896469cbff}, 0x8000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2765' (ED25519) to the list of known hosts.
syzkaller login: [   56.840638][ T5829] cgroup: Unknown subsys name 'net'
[   56.946313][ T5829] cgroup: Unknown subsys name 'cpuset'
[   56.950079][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.350634][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.580016][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.584221][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.588045][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.591646][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.595514][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.684337][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.691199][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.698042][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.702569][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.714248][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.754716][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.760750][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.765459][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.769710][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.774123][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.840729][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   63.014525][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.017869][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.021243][ T5843] bridge_slave_0: entered allmulticast mode
[   63.025414][ T5843] bridge_slave_0: entered promiscuous mode
[   63.045758][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.048873][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.052037][ T5843] bridge_slave_1: entered allmulticast mode
[   63.057206][ T5843] bridge_slave_1: entered promiscuous mode
[   63.108616][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.119582][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.159859][ T5843] team0: Port device team_slave_0 added
[   63.167470][ T5843] team0: Port device team_slave_1 added
[   63.197894][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   63.238373][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.241332][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.252110][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.268972][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.271776][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.283028][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.317164][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   63.391217][ T5843] hsr_slave_0: entered promiscuous mode
[   63.395214][ T5843] hsr_slave_1: entered promiscuous mode
[   63.410993][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.413872][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.416706][ T5847] bridge_slave_0: entered allmulticast mode
[   63.419770][ T5847] bridge_slave_0: entered promiscuous mode
[   63.435677][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.438493][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.441224][ T5847] bridge_slave_1: entered allmulticast mode
[   63.444424][ T5847] bridge_slave_1: entered promiscuous mode
[   63.462510][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.465616][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.468197][ T5851] bridge_slave_0: entered allmulticast mode
[   63.470997][ T5851] bridge_slave_0: entered promiscuous mode
[   63.495271][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.497856][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.500160][ T5851] bridge_slave_1: entered allmulticast mode
[   63.502835][ T5851] bridge_slave_1: entered promiscuous mode
[   63.508024][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.532794][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.570132][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.576103][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.584076][ T5847] team0: Port device team_slave_0 added
[   63.607958][ T5851] team0: Port device team_slave_0 added
[   63.611135][ T5847] team0: Port device team_slave_1 added
[   63.620953][ T5851] team0: Port device team_slave_1 added
[   63.672533][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.675521][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.684848][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.689929][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.692378][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.702237][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.711790][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.715008][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.724517][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.729223][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.731820][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.742315][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.802249][ T5851] hsr_slave_0: entered promiscuous mode
[   63.806230][ T5851] hsr_slave_1: entered promiscuous mode
[   63.808767][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   63.810798][ T5851] Cannot create hsr debugfs directory
[   63.844088][ T5847] hsr_slave_0: entered promiscuous mode
[   63.846785][ T5847] hsr_slave_1: entered promiscuous mode
[   63.849161][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   63.851242][ T5847] Cannot create hsr debugfs directory
[   63.963647][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.979801][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.984731][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.007090][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.119629][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.131924][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.138559][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.145960][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.198646][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.216193][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.221326][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.236431][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.249622][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.277375][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   64.291562][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.294119][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.310011][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.327687][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.330853][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.352279][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   64.366394][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.369329][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.386960][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.389881][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.421969][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.456340][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   64.467854][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.470312][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.495166][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.498342][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.623277][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.662950][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.674723][ T5844] Bluetooth: hci0: command tx timeout
[   64.732057][ T5851] veth0_vlan: entered promiscuous mode
[   64.743090][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.754873][ T5844] Bluetooth: hci1: command tx timeout
[   64.769131][ T5851] veth1_vlan: entered promiscuous mode
[   64.785285][ T5843] veth0_vlan: entered promiscuous mode
[   64.804227][ T5843] veth1_vlan: entered promiscuous mode
[   64.835403][ T5844] Bluetooth: hci2: command tx timeout
[   64.846339][ T5847] veth0_vlan: entered promiscuous mode
[   64.861108][ T5851] veth0_macvtap: entered promiscuous mode
[   64.868463][ T5851] veth1_macvtap: entered promiscuous mode
[   64.880016][ T5847] veth1_vlan: entered promiscuous mode
[   64.899953][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.905600][ T5843] veth0_macvtap: entered promiscuous mode
[   64.912533][ T5843] veth1_macvtap: entered promiscuous mode
[   64.920864][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.945129][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.948414][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.955441][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.958028][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.971309][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.977242][ T5847] veth0_macvtap: entered promiscuous mode
[   64.981833][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.010226][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.018316][ T5847] veth1_macvtap: entered promiscuous mode
[   65.039714][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.045303][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.049188][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.085295][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.092354][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.142953][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.158066][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.161533][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.171183][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.176074][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.195928][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.243543][  T703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.246904][  T703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.265623][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.276192][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.332498][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.337247][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.357822][  T703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.364760][  T703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.386273][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.412394][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.425286][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.616305][ T5919] netlink: 'syz.1.6': attribute type 5 has an invalid length.
[   66.549094][ T5948] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19'.
[   66.566828][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'.
[   66.765077][ T5844] Bluetooth: hci0: command tx timeout
[   66.838343][ T5844] Bluetooth: hci1: command tx timeout
[   66.886914][ T5958] Zero length message leads to an empty skb
[   66.896998][ T5958] warning: `syz.0.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.914550][ T5844] Bluetooth: hci2: command tx timeout
[   67.302410][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'.
[   67.619585][    C0] hrtimer: interrupt took 31847 ns
[   67.761384][ T6008] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.227742][ T6017] netlink: 180 bytes leftover after parsing attributes in process `syz.0.47'.
[   68.451206][ T6019] netlink: 'syz.2.48': attribute type 10 has an invalid length.
[   68.455508][ T6019] netlink: 55 bytes leftover after parsing attributes in process `syz.2.48'.
[   68.833692][ T5844] Bluetooth: hci0: command tx timeout
[   68.914104][ T5844] Bluetooth: hci1: command tx timeout
[   68.975616][ T6036] netlink: 'syz.2.56': attribute type 29 has an invalid length.
[   68.999321][ T5844] Bluetooth: hci2: command tx timeout
[   69.327444][ T6036] netlink: 'syz.2.56': attribute type 29 has an invalid length.
[   69.342314][ T6036] netlink: 'syz.2.56': attribute type 29 has an invalid length.
[   69.354640][ T6036] netlink: 'syz.2.56': attribute type 29 has an invalid length.
[   69.460142][ T5844] Bluetooth: hci0: unexpected event 0x0f length: 151 > 4
[   69.575358][ T6058] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.66'.
[   69.738946][ T6069] netlink: 'syz.2.70': attribute type 39 has an invalid length.
[   70.026773][ T6076] netlink: 88 bytes leftover after parsing attributes in process `syz.2.73'.
[   70.321757][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.328154][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.347166][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.365952][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.874999][ T6102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.86'.
[   71.001853][ T5844] Bluetooth: hci1: command tx timeout
[   71.084165][ T5844] Bluetooth: hci2: command tx timeout
[   71.364861][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.367232][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   73.441459][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1177209627 wd_nsec: 1177209652
[   73.854314][ T5844] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   73.857960][ T5844] Bluetooth: hci0: Injecting HCI hardware error event
[   73.860752][ T5844] Bluetooth: hci0: hardware error 0x00
[   74.486933][ T6152] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.104'.
[   74.694920][ T6170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.809472][ T6174] syzkaller0: entered promiscuous mode
[   74.814561][ T6174] syzkaller0: entered allmulticast mode
[   75.050295][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.059343][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.077740][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.081239][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.221615][ T6196] netlink: 'syz.2.125': attribute type 29 has an invalid length.
[   75.229028][ T6196] netlink: 'syz.2.125': attribute type 29 has an invalid length.
[   75.233173][ T6196] netlink: 'syz.2.125': attribute type 29 has an invalid length.
[   75.566035][ T6208] delete_channel: no stack
[   75.758212][ T6217] netlink: 'syz.2.135': attribute type 2 has an invalid length.
[   75.762302][ T6217] netlink: 'syz.2.135': attribute type 3 has an invalid length.
[   75.765540][ T6217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.135'.
[   76.336284][ T6252] netlink: 196 bytes leftover after parsing attributes in process `syz.2.152'.
[   76.426451][ T6259] netlink: 'syz.0.156': attribute type 1 has an invalid length.
[   76.435666][ T5844] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   76.438942][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'.
[   76.488075][ T6266] netlink: 201660 bytes leftover after parsing attributes in process `syz.2.158'.
[   76.500424][ T6265] openvswitch: netlink: EtherType 50a is less than min 600
[   77.458601][ T6281] netlink: 'syz.2.164': attribute type 23 has an invalid length.
[   77.562561][ T6287] delete_channel: no stack
[   77.566403][ T6287] delete_channel: no stack
[   77.970859][ T6299] lo speed is unknown, defaulting to 1000
[   77.973653][ T6299] lo speed is unknown, defaulting to 1000
[   77.978194][ T6299] lo speed is unknown, defaulting to 1000
[   77.991291][ T6299] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   78.001050][ T6299] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   78.053068][ T6299] lo speed is unknown, defaulting to 1000
[   78.058142][ T6299] lo speed is unknown, defaulting to 1000
[   78.062391][ T6299] lo speed is unknown, defaulting to 1000
[   78.078955][ T6304] netlink: 830 bytes leftover after parsing attributes in process `syz.2.172'.
[   78.083246][ T6304] bond_slave_0: entered promiscuous mode
[   78.085606][ T6304] bond_slave_1: entered promiscuous mode
[   78.111286][ T6304] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.172'.
[   78.439942][ T6311] netlink: 92 bytes leftover after parsing attributes in process `syz.0.174'.
[   78.895828][ T6333] sctp: [Deprecated]: syz.1.182 (pid 6333) Use of int in max_burst socket option deprecated.
[   78.895828][ T6333] Use struct sctp_assoc_value instead
[   79.031345][ T6343] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.189'.
[   79.064617][ T5844] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[   79.078161][ T6347] netlink: 'syz.2.191': attribute type 21 has an invalid length.
[   79.112147][ T6349] netlink: 'syz.2.192': attribute type 1 has an invalid length.
[   79.118149][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'.
[   79.819459][ T6370] netlink: 44 bytes leftover after parsing attributes in process `syz.1.200'.
[   79.843570][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'.
[   79.848694][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'.
[   79.926755][ T6375] netlink: 'syz.1.202': attribute type 1 has an invalid length.
[   79.931517][ T6375] netlink: 17 bytes leftover after parsing attributes in process `syz.1.202'.
[   83.144748][ T6390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.209'.
[   83.149554][ T6390] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   83.465509][ T6401] netlink: 132 bytes leftover after parsing attributes in process `syz.1.213'.
[   83.835527][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'.
[   85.110469][ T6447] netlink: 104 bytes leftover after parsing attributes in process `syz.1.232'.
[   85.155152][ T5234] Bluetooth: hci2: command 0x0406 tx timeout
[   85.371784][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'.
[   85.394044][ T5844] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10
[   85.666000][ T6463] netlink: 10 bytes leftover after parsing attributes in process `syz.2.240'.
[   85.789534][ T6468] netlink: 60 bytes leftover after parsing attributes in process `syz.1.241'.
[   85.871580][ T6473] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.243'.
[   86.312144][ T6506] netlink: 'syz.2.255': attribute type 11 has an invalid length.
[   86.319937][ T6506] netlink: 168 bytes leftover after parsing attributes in process `syz.2.255'.
[   86.587704][ T6530] netlink: 'syz.0.265': attribute type 64 has an invalid length.
[   86.679033][   T10] cfg80211: failed to load regulatory.db
[   87.450679][ T6540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.269'.
[   87.473748][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'.
[   87.524015][ T6544] netlink: 'syz.2.271': attribute type 16 has an invalid length.
[   87.527383][ T6544] netlink: 156 bytes leftover after parsing attributes in process `syz.2.271'.
[   87.865220][ T6568] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.282'.
[   87.909472][ T6571] netlink: 'syz.1.283': attribute type 21 has an invalid length.
[   90.346778][ T6633] __nla_validate_parse: 3 callbacks suppressed
[   90.346795][ T6633] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.309'.
[   90.555429][ T6643] netlink: 176 bytes leftover after parsing attributes in process `syz.0.314'.
[   90.666143][ T6651] netlink: 'syz.0.316': attribute type 10 has an invalid length.
[   90.669559][ T6651] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.316'.
[   90.741060][ T5844] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28
[   90.744245][ T5844] Bluetooth: hci1: Unable to find connection with handle 0x0000
[   91.017435][ T6674] netlink: 26 bytes leftover after parsing attributes in process `syz.1.328'.
[   91.235656][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'.
[   91.241149][ T6683] netlink: 125 bytes leftover after parsing attributes in process `syz.1.328'.
[   91.245772][ T6683] netlink: 142 bytes leftover after parsing attributes in process `syz.1.328'.
[   91.249660][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'.
[   91.264409][ T6683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.328'.
[   92.486390][ T6712] netlink: 'syz.1.343': attribute type 3 has an invalid length.
[   92.489587][ T6712] netlink: 'syz.1.343': attribute type 1 has an invalid length.
[   92.497173][ T6712] netlink: 191264 bytes leftover after parsing attributes in process `syz.1.343'.
[   92.839070][ T6726] netlink: 'syz.1.349': attribute type 3 has an invalid length.
[   92.842433][ T6726] netlink: 'syz.1.349': attribute type 1 has an invalid length.
[   93.270852][ T6749] netlink: 'syz.0.361': attribute type 10 has an invalid length.
[   94.526991][ T6774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.568167][ T6777] netlink: 'syz.0.372': attribute type 12 has an invalid length.
[   94.643034][ T6781] netlink: 'syz.2.374': attribute type 1 has an invalid length.
[   94.720800][ T6787] netlink: 'syz.2.377': attribute type 21 has an invalid length.
[   94.744638][ T6790] netlink: 'syz.1.376': attribute type 11 has an invalid length.
[   94.816911][ T6785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.944741][ T6785] syz.1.376 (6785) used greatest stack depth: 19512 bytes left
[   95.678207][ T6816] netlink: 'syz.2.390': attribute type 39 has an invalid length.
[   95.907626][ T6829] __nla_validate_parse: 7 callbacks suppressed
[   95.907644][ T6829] netlink: 128 bytes leftover after parsing attributes in process `syz.0.396'.
[   95.915397][ T6829] netlink: 3 bytes leftover after parsing attributes in process `syz.0.396'.
[   95.979262][ T6820] infiniband syz!: set active
[   95.981244][ T6820] infiniband syz!: added team_slave_0
[   96.002986][ T6820] RDS/IB: syz!: added
[   96.005658][ T6820] smc: adding ib device syz! with port count 1
[   96.009586][ T6820] smc:    ib device syz! port 1 has pnetid 
[   96.698796][ T6845] netlink: 48 bytes leftover after parsing attributes in process `syz.0.402'.
[   97.352808][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'.
[   97.394897][ T6857] netlink: 208192 bytes leftover after parsing attributes in process `syz.2.407'.
[   97.396988][ T6860] netlink: 204 bytes leftover after parsing attributes in process `syz.1.408'.
[   97.530744][ T6872] validate_nla: 4 callbacks suppressed
[   97.530772][ T6872] netlink: 'syz.1.414': attribute type 29 has an invalid length.
[   97.555258][ T6872] netlink: 'syz.1.414': attribute type 29 has an invalid length.
[   97.644394][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.418'.
[   97.851903][ T6898] netlink: 272 bytes leftover after parsing attributes in process `syz.2.423'.
[   98.363804][ T6931] netlink: 'syz.2.435': attribute type 3 has an invalid length.
[   98.367151][ T6931] netlink: 4264 bytes leftover after parsing attributes in process `syz.2.435'.
[   98.371011][ T6931] netlink: 'syz.2.435': attribute type 3 has an invalid length.
[   98.374665][ T6931] netlink: 4264 bytes leftover after parsing attributes in process `syz.2.435'.
[  100.294728][ T7040] delete_channel: no stack
[  101.515957][ T7068] __nla_validate_parse: 3 callbacks suppressed
[  101.516057][ T7068] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.493'.
[  101.792808][ T7079] netlink: 48 bytes leftover after parsing attributes in process `syz.0.498'.
[  101.839594][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'.
[  101.852604][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'.
[  102.168234][ T7092] netlink: 104 bytes leftover after parsing attributes in process `syz.2.504'.
[  102.552090][ T7102] netlink: 'syz.0.509': attribute type 10 has an invalid length.
[  102.555697][ T7102] netlink: 44 bytes leftover after parsing attributes in process `syz.0.509'.
[  102.649089][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'.
[  102.769445][ T7111] netlink: 7 bytes leftover after parsing attributes in process `syz.2.513'.
[  102.776254][ T7111] netlink: 40 bytes leftover after parsing attributes in process `syz.2.513'.
[  102.872872][ T7116] netlink: 'syz.0.516': attribute type 16 has an invalid length.
[  102.877245][ T7116] netlink: 'syz.0.516': attribute type 3 has an invalid length.
[  102.880719][ T7116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.516'.
[  103.535775][ T7111] syz.2.513 (7111) used greatest stack depth: 18600 bytes left
[  103.571700][ T7139] bpf: Bad value for 'gid'
[  104.019760][ T7172] netlink: 'syz.0.540': attribute type 15 has an invalid length.
[  104.022565][ T7172] netlink: 'syz.0.540': attribute type 7 has an invalid length.
[  104.608223][ T7191] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  105.726139][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.781485][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.882856][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.992473][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.999146][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  106.003155][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  106.010129][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  106.017786][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.027075][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  106.061953][ T7217] lo speed is unknown, defaulting to 1000
[  106.201708][   T12] bridge_slave_1: left allmulticast mode
[  106.208263][   T12] bridge_slave_1: left promiscuous mode
[  106.211355][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.247635][   T12] bridge_slave_0: left allmulticast mode
[  106.249560][   T12] bridge_slave_0: left promiscuous mode
[  106.251520][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.442704][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  106.450716][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  106.455957][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  106.461131][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  106.468532][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  106.569330][ T7240] netlink: 'syz.2.569': attribute type 21 has an invalid length.
[  106.702630][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.711465][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.717211][   T12] bond0 (unregistering): Released all slaves
[  106.760299][ T7233] lo speed is unknown, defaulting to 1000
[  107.009628][ T7217] chnl_net:caif_netlink_parms(): no params data found
[  107.358425][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.362393][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.366065][ T7217] bridge_slave_0: entered allmulticast mode
[  107.369911][ T7217] bridge_slave_0: entered promiscuous mode
[  107.384998][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.387450][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.389913][ T7217] bridge_slave_1: entered allmulticast mode
[  107.393115][ T7217] bridge_slave_1: entered promiscuous mode
[  107.489572][ T7217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.529336][ T7217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.706159][ T7217] team0: Port device team_slave_0 added
[  107.710946][ T7217] team0: Port device team_slave_1 added
[  107.885232][   T12] hsr_slave_0: left promiscuous mode
[  107.887732][   T12] hsr_slave_1: left promiscuous mode
[  107.891290][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.894489][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.897642][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.900109][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.911759][   T12] veth1_macvtap: left promiscuous mode
[  107.914078][   T12] veth0_macvtap: left promiscuous mode
[  108.071343][ T7281] netlink: 'syz.2.579': attribute type 2 has an invalid length.
[  108.114423][ T5234] Bluetooth: hci0: command tx timeout
[  108.174979][   T12] team0 (unregistering): Port device team_slave_1 removed
[  108.202368][   T12] team0 (unregistering): Port device team_slave_0 removed
[  108.516696][ T5234] Bluetooth: hci2: command tx timeout
[  108.621606][ T7217] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.624567][ T7217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.637754][ T7217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.647570][   T96] lo speed is unknown, defaulting to 1000
[  108.654113][   T96] infiniband syz2: ib_query_port failed (-19)
[  108.656477][ T7217] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.659374][ T7217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.684970][ T7217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.882151][ T7217] hsr_slave_0: entered promiscuous mode
[  108.906075][ T7217] hsr_slave_1: entered promiscuous mode
[  108.962805][ T7233] chnl_net:caif_netlink_parms(): no params data found
[  109.203709][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.207105][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.210018][ T7233] bridge_slave_0: entered allmulticast mode
[  109.217605][ T7233] bridge_slave_0: entered promiscuous mode
[  109.239402][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.242614][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.250221][ T7233] bridge_slave_1: entered allmulticast mode
[  109.253191][ T7233] bridge_slave_1: entered promiscuous mode
[  109.320300][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.339917][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.356609][   T33] audit: type=1107 audit(1755594375.048:2): pid=7324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  109.412922][ T7233] team0: Port device team_slave_0 added
[  109.437515][ T7233] team0: Port device team_slave_1 added
[  109.477425][ T7217] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  109.495680][ T7217] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  109.500136][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.502375][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.513852][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.518991][ T7217] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  109.524969][ T7217] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  109.529780][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.536562][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.547781][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.595370][ T7233] hsr_slave_0: entered promiscuous mode
[  109.598386][ T7233] hsr_slave_1: entered promiscuous mode
[  109.601146][ T7233] debugfs: 'hsr0' already exists in 'hsr'
[  109.604106][ T7233] Cannot create hsr debugfs directory
[  109.761478][ T7217] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.792198][ T7344] Illegal XDP return value 4294967294 on prog  (id 231) dev N/A, expect packet loss!
[  109.811313][ T7217] 8021q: adding VLAN 0 to HW filter on device team0
[  109.819626][ T7233] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  109.829668][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.832115][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.837048][ T7233] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  109.846517][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.849059][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.852656][ T7233] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  109.870257][ T7233] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  109.972958][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.982835][ T7365] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[  109.989389][ T7233] 8021q: adding VLAN 0 to HW filter on device team0
[  110.006242][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.008693][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.029803][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.032217][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.060309][ T7217] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.121582][ T7217] veth0_vlan: entered promiscuous mode
[  110.132085][ T7217] veth1_vlan: entered promiscuous mode
[  110.145934][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.169842][ T7217] veth0_macvtap: entered promiscuous mode
[  110.176631][ T7217] veth1_macvtap: entered promiscuous mode
[  110.197099][ T7217] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.200419][ T5234] Bluetooth: hci0: command tx timeout
[  110.202761][ T7217] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.218067][ T5862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.221283][ T5862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.233077][ T5862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.242924][ T5862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.305200][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.308582][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.338194][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.341456][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.418260][ T7389] netlink: 'syz.3.560': attribute type 1 has an invalid length.
[  110.432208][ T7233] veth0_vlan: entered promiscuous mode
[  110.450442][ T7233] veth1_vlan: entered promiscuous mode
[  110.485675][ T7233] veth0_macvtap: entered promiscuous mode
[  110.492118][ T7233] veth1_macvtap: entered promiscuous mode
[  110.514299][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.522605][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.532118][ T5862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.541573][ T5862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.548255][ T5862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.604238][ T5234] Bluetooth: hci2: command tx timeout
[  110.656539][ T5862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.730996][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.737208][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.763275][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.768586][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.815716][ T7398] __nla_validate_parse: 1 callbacks suppressed
[  110.815729][ T7398] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.563'.
[  110.871735][ T7402] netlink: 'syz.4.612': attribute type 21 has an invalid length.
[  110.876255][ T7402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.612'.
[  110.879719][ T7402] netlink: 'syz.4.612': attribute type 1 has an invalid length.
[  111.063126][ T7414] cgroup: fork rejected by pids controller in /syz3
[  111.646219][ T7450] netlink: 'syz.2.635': attribute type 3 has an invalid length.
[  111.649659][ T7450] netlink: 199752 bytes leftover after parsing attributes in process `syz.2.635'.
[  111.795983][ T7460] netlink: 96 bytes leftover after parsing attributes in process `syz.4.640'.
[  112.007565][ T7474] : renamed from team_slave_1 (while UP)
[  112.673796][ T5234] Bluetooth: hci2: command tx timeout
[  112.931015][ T7481] netlink: 'syz.2.649': attribute type 33 has an invalid length.
[  112.935863][ T7481] netlink: 152 bytes leftover after parsing attributes in process `syz.2.649'.
[  112.939575][ T7481] `: renamed from team0 (while UP)
[  112.996020][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'.
[  113.057658][ T7487] syz.4.652 uses obsolete (PF_INET,SOCK_PACKET)
[  113.189032][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.637530][ T7503] netlink: 'syz.4.659': attribute type 21 has an invalid length.
[  113.725892][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.729954][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.732986][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.737003][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.740608][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.076153][ T7509] netlink: 332 bytes leftover after parsing attributes in process `syz.4.662'.
[  114.168821][ T7500] chnl_net:caif_netlink_parms(): no params data found
[  114.753966][ T5844] Bluetooth: hci2: command tx timeout
[  115.793929][ T5844] Bluetooth: hci0: command tx timeout
[  117.078332][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.101505][ T7500] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.104840][ T7500] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.107438][ T7500] bridge_slave_0: entered allmulticast mode
[  117.110633][ T7500] bridge_slave_0: entered promiscuous mode
[  117.115313][ T7500] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.117713][ T7500] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.120474][ T7500] bridge_slave_1: entered allmulticast mode
[  117.124876][ T7500] bridge_slave_1: entered promiscuous mode
[  117.171337][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.188965][ T7500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.201302][ T7500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.207885][ T7536] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.667'.
[  117.240043][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.261851][ T7500] team0: Port device team_slave_0 added
[  117.265679][ T7500] team0: Port device team_slave_1 added
[  117.295830][ T7500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.299023][ T7500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.313927][ T7500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.328888][ T7500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.331161][ T7500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.343260][ T7500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.487291][ T7500] hsr_slave_0: entered promiscuous mode
[  117.496492][ T7500] hsr_slave_1: entered promiscuous mode
[  117.504163][ T7500] debugfs: 'hsr0' already exists in 'hsr'
[  117.506731][ T7500] Cannot create hsr debugfs directory
[  117.559513][ T7551] netlink: 'syz.2.674': attribute type 39 has an invalid length.
[  117.605689][ T7551] veth0_macvtap: left promiscuous mode
[  117.622437][   T12] bridge_slave_1: left allmulticast mode
[  117.628659][   T12] bridge_slave_1: left promiscuous mode
[  117.635939][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.647001][   T12] bridge_slave_0: left allmulticast mode
[  117.649518][   T12] bridge_slave_0: left promiscuous mode
[  117.662407][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.873758][ T5844] Bluetooth: hci0: command tx timeout
[  118.192441][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.204762][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.217848][   T12] bond0 (unregistering): Released all slaves
[  119.897500][   T12] hsr_slave_0: left promiscuous mode
[  119.915715][   T12] hsr_slave_1: left promiscuous mode
[  119.918265][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.940111][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.951442][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.955144][ T5844] Bluetooth: hci0: command tx timeout
[  119.983064][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.032688][   T12] veth1_macvtap: left promiscuous mode
[  120.039757][   T12] veth0_macvtap: left promiscuous mode
[  120.048076][   T12] veth1_vlan: left promiscuous mode
[  120.052015][   T12] veth0_vlan: left promiscuous mode
[  120.558253][   T12] team0 (unregistering): Port device team_slave_1 removed
[  120.586541][   T12] team0 (unregistering): Port device team_slave_0 removed
[  121.297548][ T7500] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  121.327326][ T7500] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  121.351714][ T7500] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  121.408601][ T7500] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  121.449239][ T7612] netlink: 14 bytes leftover after parsing attributes in process `syz.4.691'.
[  121.459667][ T7612] hsr0: entered promiscuous mode
[  121.461965][ T7612] hsr0: entered allmulticast mode
[  121.467307][ T7612] hsr_slave_0: entered allmulticast mode
[  121.469785][ T7612] hsr_slave_1: entered allmulticast mode
[  121.492629][ T7596] infiniband syz1: set active
[  121.501395][ T7596] infiniband syz1: added bond0
[  121.506517][ T7596] syz1: rxe_create_cq: returned err = -12
[  121.510453][ T7596] infiniband syz1: Couldn't create ib_mad CQ
[  121.513246][ T7596] infiniband syz1: Couldn't open port 1
[  121.541214][ T7596] RDS/IB: syz1: added
[  121.543061][ T7596] smc: adding ib device syz1 with port count 1
[  121.547319][ T7596] smc:    ib device syz1 port 1 has pnetid 
[  121.563336][ T7500] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.583394][ T7500] 8021q: adding VLAN 0 to HW filter on device team0
[  121.596331][  T703] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.599324][  T703] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.617981][  T703] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.620993][  T703] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.764595][ T7500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.817488][ T7500] veth0_vlan: entered promiscuous mode
[  121.828793][ T7500] veth1_vlan: entered promiscuous mode
[  121.865559][ T7500] veth0_macvtap: entered promiscuous mode
[  121.876659][ T7500] veth1_macvtap: entered promiscuous mode
[  121.898437][ T7500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.908642][ T7500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.916874][ T5879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.920537][ T5879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.928028][ T5879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.949990][ T5879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.034238][ T5844] Bluetooth: hci0: command tx timeout
[  122.062157][  T703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.073969][  T703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.114931][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.119071][ T7639] netlink: 'syz.4.695': attribute type 10 has an invalid length.
[  122.121856][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.147658][ T7639] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.161049][ T7639] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.181964][ T7639] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  122.334516][ T7648] @: renamed from veth0_vlan (while UP)
[  123.337511][ T7662] netlink: 'syz.3.700': attribute type 6 has an invalid length.
[  123.340138][ T7662] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.700'.
[  123.780401][ T7682] netlink: 14 bytes leftover after parsing attributes in process `syz.4.707'.
[  123.794387][ T7682] hsr_slave_0: left promiscuous mode
[  123.815342][ T7682] hsr_slave_1: left promiscuous mode
[  124.512929][ T7708] syzkaller0: tun_chr_ioctl cmd 1074025677
[  124.519260][ T7708] syzkaller0: Linktype set failed because interface is up
[  124.522507][ T7704] netlink: 'syz.3.719': attribute type 29 has an invalid length.
[  124.529375][ T7704] netlink: 'syz.3.719': attribute type 29 has an invalid length.
[  124.544692][ T5879] syzkaller0: tun_net_xmit 76
[  124.546933][ T5879] syzkaller0: tun_net_xmit 48
[  124.555306][ T7704] netlink: 'syz.3.719': attribute type 29 has an invalid length.
[  124.568270][ T7712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.584774][   T47] syzkaller0: tun_net_xmit 76
[  127.232740][ T7790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.749'.
[  127.238465][ T7790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.749'.
[  127.242683][ T7790] netlink: 2 bytes leftover after parsing attributes in process `syz.4.749'.
[  127.622250][ T7806] =======================================================
[  127.622250][ T7806] WARNING: The mand mount option has been deprecated and
[  127.622250][ T7806]          and is ignored by this kernel. Remove the mand
[  127.622250][ T7806]          option from the mount to silence this warning.
[  127.622250][ T7806] =======================================================
[  128.191361][ T7816] netlink: 'syz.3.756': attribute type 2 has an invalid length.
[  128.196365][ T7816] netlink: 'syz.3.756': attribute type 1 has an invalid length.
[  128.199777][ T7816] netlink: 'syz.3.756': attribute type 1 has an invalid length.
[  128.747029][ T7834] netlink: 'syz.4.764': attribute type 21 has an invalid length.
[  128.749881][ T7834] netlink: 156 bytes leftover after parsing attributes in process `syz.4.764'.
[  128.959596][ T7849] netlink: 182 bytes leftover after parsing attributes in process `syz.2.771'.
[  130.543143][ T7903] netlink: 26 bytes leftover after parsing attributes in process `syz.4.793'.
[  130.812303][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'.
[  132.040782][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'.
[  132.243188][ T5844] Bluetooth: hci2: Malformed LE Event: 0x0d
[  132.318590][ T7973] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.824'.
[  132.329572][ T7973] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  132.607856][ T7986] netlink: 160 bytes leftover after parsing attributes in process `syz.3.831'.
[  132.718073][ T7996] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[  132.722244][ T7996] netlink: 'syz.2.835': attribute type 3 has an invalid length.
[  132.727592][ T7996] netlink: 132 bytes leftover after parsing attributes in process `syz.2.835'.
[  132.757087][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.759356][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.218295][ T8022] netlink: 13 bytes leftover after parsing attributes in process `syz.4.847'.
[  134.829441][ T8035] netlink: 60 bytes leftover after parsing attributes in process `syz.2.852'.
[  135.118794][ T8044] netlink: 35840 bytes leftover after parsing attributes in process `syz.4.855'.
[  135.153216][ T5844] Bluetooth: hci1: Dropping invalid advertising data
[  135.157388][ T5844] Bluetooth: hci1: unknown advertising packet type: 0xff
[  135.846686][ T8078] : entered promiscuous mode
[  135.862965][ T8082] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.874'.
[  136.122910][ T8108] netlink: 'syz.2.886': attribute type 2 has an invalid length.
[  136.136559][ T8108] netlink: 132 bytes leftover after parsing attributes in process `syz.2.886'.
[  136.165895][ T8113] netlink: 'syz.2.888': attribute type 39 has an invalid length.
[  136.350972][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'.
[  136.356087][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'.
[  137.351123][ T8147] netlink: 'syz.3.903': attribute type 40 has an invalid length.
[  137.391430][ T8143] netlink: 'syz.2.902': attribute type 10 has an invalid length.
[  137.400519][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.406895][ T8143] netlink: 55 bytes leftover after parsing attributes in process `syz.2.902'.
[  137.578302][ T8164] netlink: 6 bytes leftover after parsing attributes in process `syz.2.910'.
[  137.649214][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'.
[  137.681582][ T8171] netlink: 56 bytes leftover after parsing attributes in process `syz.2.913'.
[  140.060736][ T8262] pim6reg0: tun_chr_ioctl cmd 1074025681
[  140.171054][ T8268] __nla_validate_parse: 3 callbacks suppressed
[  140.171074][ T8268] netlink: 104 bytes leftover after parsing attributes in process `syz.2.954'.
[  140.199946][ T8271] netlink: 'syz.4.953': attribute type 10 has an invalid length.
[  140.348012][ T8271] team0 (unregistering): Port device team_slave_0 removed
[  140.356749][ T8271] team0 (unregistering): Port device 76 removed
[  140.404832][ T8273] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  140.409321][ T8273] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  142.635801][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.640982][ T8311] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.662520][ T8311] bridge0: entered allmulticast mode
[  142.689117][ T8315] sit0: entered promiscuous mode
[  142.842147][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.845650][ T8316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.849880][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.853049][ T8316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.857881][ T8316] bridge0: entered promiscuous mode
[  143.166677][ T8327] netlink: 'syz.4.974': attribute type 3 has an invalid length.
[  143.170224][ T8327] netlink: 132 bytes leftover after parsing attributes in process `syz.4.974'.
[  144.360719][ T8347] netlink: 80 bytes leftover after parsing attributes in process `syz.4.981'.
[  144.376801][ T8347] netlink: 80 bytes leftover after parsing attributes in process `syz.4.981'.
[  144.458363][ T8353] netlink: 204 bytes leftover after parsing attributes in process `syz.4.984'.
[  144.688095][ T8368] netlink: 'syz.4.991': attribute type 2 has an invalid length.
[  144.695428][ T8368] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.991'.
[  147.162824][ T8458] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1033'.
[  147.167761][ T8458] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  147.337768][ T8458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.459253][ T8471] netlink: 'syz.3.1038': attribute type 21 has an invalid length.
[  148.481179][ T8514] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1055'.
[  149.493043][ T8539] lo: entered allmulticast mode
[  149.623310][ T8541] lo: entered promiscuous mode
[  149.631458][ T8541] lo: left allmulticast mode
[  149.847965][ T8543] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.896371][ T8547] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1066'.
[  150.200476][ T8569] netlink: 'syz.3.1077': attribute type 1 has an invalid length.
[  150.411606][ T8579] netlink: 65019 bytes leftover after parsing attributes in process `syz.2.1082'.
[  150.958807][ T8603] : renamed from gre0 (while UP)
[  151.368308][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1095'.
[  151.900307][ T8627] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1101'.
[  152.054359][ T8633] openvswitch: netlink: IP tunnel dst address not specified
[  152.406924][ T8643] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1109'.
[  153.537755][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1120'.
[  153.542510][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1120'.
[  153.649607][ T8678] openvswitch: netlink: Missing valid actions attribute.
[  153.654248][ T8678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.552480][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'.
[  154.560291][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'.
[  154.958810][ T8699] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  155.089603][ T8706] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1135'.
[  155.578731][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1142'.
[  155.792865][ T8737] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1149'.
[  155.829007][ T8739] netlink: 'syz.3.1150': attribute type 6 has an invalid length.
[  155.974044][ T5844] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  156.009463][ T8749] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  156.107826][ T8753] netlink: 'syz.2.1156': attribute type 3 has an invalid length.
[  156.110667][ T8753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1156'.
[  156.397758][ T8762] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1160'.
[  156.659745][ T8786] sock: sock_timestamping_bind_phc: sock not bind to device
[  156.934747][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  157.209383][ T8811] netlink: 'syz.3.1184': attribute type 29 has an invalid length.
[  157.212675][ T8811] netlink: 'syz.3.1184': attribute type 29 has an invalid length.
[  157.216405][ T8811] netlink: 'syz.3.1184': attribute type 29 has an invalid length.
[  157.219447][ T8811] netlink: 'syz.3.1184': attribute type 29 has an invalid length.
[  158.034093][ T5234] Bluetooth: hci0: command tx timeout
[  158.106195][ T8844] __nla_validate_parse: 2 callbacks suppressed
[  158.106214][ T8844] netlink: 15478 bytes leftover after parsing attributes in process `syz.3.1198'.
[  158.299096][ T8856] netlink: 'syz.3.1204': attribute type 39 has an invalid length.
[  158.575256][ T8870] netlink: 'syz.3.1211': attribute type 1 has an invalid length.
[  158.657609][ T8876] netlink: 'syz.3.1214': attribute type 4 has an invalid length.
[  158.967652][ T8883] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1216'.
[  159.585408][ T8895] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1222'.
[  159.969927][ T8913] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1229'.
[  160.198201][ T8913] hsr_slave_0: left promiscuous mode
[  160.206009][ T8913] hsr_slave_1: left promiscuous mode
[  161.272105][ T8938] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1238'.
[  161.668014][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'.
[  161.672285][ T8960] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1248'.
[  161.729215][ T8964] netlink: 'syz.3.1251': attribute type 6 has an invalid length.
[  161.735575][ T8964] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1251'.
[  162.169184][ T8978] netlink: 'syz.3.1258': attribute type 11 has an invalid length.
[  162.172481][ T8978] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1258'.
[  162.178223][ T8978] netlink: 'syz.3.1258': attribute type 11 has an invalid length.
[  162.180964][ T8978] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1258'.
[  162.269905][ T8977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.009732][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1281'.
[  164.096479][ T9040] tap0: tun_chr_ioctl cmd 2147767520
[  165.080116][ T9069] C: renamed from team_slave_0 (while UP)
[  165.235571][ T9069] netlink: 'syz.3.1297': attribute type 4 has an invalid length.
[  165.238341][ T9069] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  165.442200][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'.
[  166.522525][ T9108] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  166.525899][ T9108] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  166.819265][ T9122] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1320'.
[  167.838138][ T9151] nftables ruleset with unbound chain
[  168.171493][ T9156] veth0_vlan: entered allmulticast mode
[  168.547868][ T9176] netlink: 'syz.2.1344': attribute type 8 has an invalid length.
[  168.551478][ T9176] netlink: 'syz.2.1344': attribute type 3 has an invalid length.
[  168.554561][ T9176] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.1344'.
[  169.105196][ T9192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1351'.
[  170.048549][ T9211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1359'.
[  170.052531][ T9211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1359'.
[  170.057071][ T9211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1359'.
[  170.060771][ T9211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1359'.
[  171.025468][ T9237] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.1369'.
[  171.029232][ T9237] netlink: 62227 bytes leftover after parsing attributes in process `syz.4.1369'.
[  171.523052][ T9256] netlink: 'syz.4.1378': attribute type 10 has an invalid length.
[  171.578306][ T9265] netlink: 'syz.2.1380': attribute type 9 has an invalid length.
[  171.593600][ T9265] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.1380'.
[  172.391219][ T9283] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1390'.
[  172.709245][ T9291] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1394'.
[  172.888904][ T9303] netlink: 'syz.2.1400': attribute type 1 has an invalid length.
[  174.296706][ T9328] __nla_validate_parse: 1 callbacks suppressed
[  174.296727][ T9328] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1410'.
[  174.358088][ T9332] netlink: 'syz.2.1412': attribute type 3 has an invalid length.
[  174.361640][ T9332] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1412'.
[  174.405361][ T9334] netlink: 'syz.2.1413': attribute type 2 has an invalid length.
[  174.420417][ T9334] netlink: 110008 bytes leftover after parsing attributes in process `syz.2.1413'.
[  174.592835][ T9346] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1419'.
[  174.706075][ T9355] netlink: 'syz.3.1417': attribute type 10 has an invalid length.
[  174.884285][ T9368] netlink: 'syz.2.1427': attribute type 19 has an invalid length.
[  175.318688][ T9389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1436'.
[  175.321755][ T9389] : left promiscuous mode
[  175.387020][ T5234] Bluetooth: hci1: unexpected event 0x14 length: 151 > 6
[  176.456558][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1455'.
[  176.463294][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1455'.
[  176.468277][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'.
[  177.148518][ T9458] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1468'.
[  177.255991][ T9466] netlink: 'syz.3.1472': attribute type 1 has an invalid length.
[  178.226998][ T9480] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1478'.
[  178.374387][ T9477] netlink: 'syz.4.1476': attribute type 4 has an invalid length.
[  178.550992][ T9498] netlink: 'syz.3.1486': attribute type 41 has an invalid length.
[  179.471514][ T9517] netlink: 'syz.2.1493': attribute type 21 has an invalid length.
[  179.475136][ T9517] __nla_validate_parse: 1 callbacks suppressed
[  179.475150][ T9517] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1493'.
[  179.482376][ T9517] netlink: 'syz.2.1493': attribute type 4 has an invalid length.
[  179.486498][ T9517] netlink: 'syz.2.1493': attribute type 3 has an invalid length.
[  179.492693][ T9517] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1493'.
[  179.606642][ T9522] netlink: 2451 bytes leftover after parsing attributes in process `syz.2.1495'.
[  179.652965][ T9532] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.802912][ T9591] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1524'.
[  180.808019][ T9590] netlink: 'syz.4.1523': attribute type 1 has an invalid length.
[  180.841661][ T9593] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1525'.
[  180.848391][ T9593] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1525'.
[  181.506435][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'.
[  181.661621][ T9625] netlink: 'syz.4.1540': attribute type 10 has an invalid length.
[  181.666406][ T9625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1540'.
[  181.676692][ T9625] batadv0: entered promiscuous mode
[  181.683226][ T9625] batadv0: entered allmulticast mode
[  181.687760][ T9619] delete_channel: no stack
[  181.695035][ T9619] delete_channel: no stack
[  181.746214][ T9625] bridge0: port 3(batadv0) entered blocking state
[  181.752042][ T9625] bridge0: port 3(batadv0) entered disabled state
[  181.806003][ T9625] bridge0: port 3(batadv0) entered blocking state
[  181.813502][ T9625] bridge0: port 3(batadv0) entered forwarding state
[  181.911546][ T9636] unsupported nla_type 256
[  182.087181][ T9644] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1548'.
[  182.146705][ T9646] netlink: 'syz.3.1550': attribute type 4 has an invalid length.
[  182.150144][ T9646] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1550'.
[  182.197665][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  182.201017][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  183.333024][ T9703] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  183.376067][ T9706] netlink: 'syz.3.1576': attribute type 29 has an invalid length.
[  183.379654][ T9706] netlink: 'syz.3.1576': attribute type 29 has an invalid length.
[  183.383223][ T9706] netlink: 'syz.3.1576': attribute type 29 has an invalid length.
[  183.385359][ T9707] netlink: 'syz.4.1577': attribute type 2 has an invalid length.
[  183.953248][ T9725] veth1_to_bond: entered allmulticast mode
[  184.251710][ T9734] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  184.550179][ T9747] syzkaller0: entered promiscuous mode
[  184.552256][ T9747] syzkaller0: entered allmulticast mode
[  185.927542][ T9755] __nla_validate_parse: 9 callbacks suppressed
[  185.927560][ T9755] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1597'.
[  186.036693][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  186.040321][ T9761] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.1600'.
[  186.176090][ T9763] siw: device registration error -23
[  186.261767][ T9777] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1606'.
[  186.459340][ T9795] validate_nla: 2 callbacks suppressed
[  186.459360][ T9795] netlink: 'syz.2.1616': attribute type 10 has an invalid length.
[  186.472680][ T9795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1616'.
[  186.478436][ T9795] dummy0: entered promiscuous mode
[  186.483196][ T9795] bridge0: port 3(dummy0) entered blocking state
[  186.486249][ T9795] bridge0: port 3(dummy0) entered disabled state
[  186.488565][ T9795] dummy0: entered allmulticast mode
[  186.495175][ T9795] bridge0: port 3(dummy0) entered blocking state
[  186.497617][ T9795] bridge0: port 3(dummy0) entered forwarding state
[  186.785175][ T9807] syzkaller1: tun_chr_ioctl cmd 1074025677
[  186.787313][ T9807] syzkaller1: linktype set to 780
[  186.937165][ T9805] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1620'.
[  186.952341][ T9807] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1620'.
[  187.139745][ T9831] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1632'.
[  187.156540][ T9831] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1632'.
[  187.481736][ T9857] netlink: 'syz.4.1645': attribute type 1 has an invalid length.
[  187.484876][ T9857] netlink: 'syz.4.1645': attribute type 4 has an invalid length.
[  187.494065][ T9857] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1645'.
[  188.389916][ T9893] netlink: 'syz.3.1660': attribute type 3 has an invalid length.
[  188.393138][ T9893] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1660'.
[  189.240570][ T9940] netlink: 'syz.4.1680': attribute type 49 has an invalid length.
[  189.289172][ T9941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  189.292742][ T9941] IPv6: NLM_F_CREATE should be set when creating new route
[  189.296166][ T9941] IPv6: NLM_F_CREATE should be set when creating new route
[  189.875294][ T9966] netlink: 'syz.4.1693': attribute type 1 has an invalid length.
[  189.916961][ T9968] netlink: 'syz.2.1694': attribute type 21 has an invalid length.
[  189.944910][ T9971] netlink: 'syz.4.1695': attribute type 13 has an invalid length.
[  190.123284][ T9971] bridge0: port 3(batadv0) entered disabled state
[  190.126566][ T9971] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.129569][ T9971] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.405855][ T9971] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.836452][ T9977] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  190.839242][ T5852] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.843048][ T5852] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.851766][ T5852] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.856560][ T5852] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.980515][ T5234] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6
[  191.309729][T10015] __nla_validate_parse: 4 callbacks suppressed
[  191.309740][T10015] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1714'.
[  192.114280][T10068] bpf: Bad value for 'gid'
[  192.131224][T10066] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1738'.
[  192.175270][T10070] netlink: 'syz.4.1740': attribute type 29 has an invalid length.
[  192.179127][T10070] netlink: 'syz.4.1740': attribute type 29 has an invalid length.
[  192.216047][T10074] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1742'.
[  192.656240][T10105] netlink: 'syz.3.1756': attribute type 29 has an invalid length.
[  192.658907][T10105] netlink: 'syz.3.1756': attribute type 3 has an invalid length.
[  192.661459][T10105] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1756'.
[  192.801092][T10118] syzkaller1: tun_chr_ioctl cmd 1074025676
[  192.803145][T10118] syzkaller1: owner set to 778
[  192.915749][T10128] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1766'.
[  192.933668][T10128] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1766'.
[  192.939817][T10128] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1766'.
[  192.982497][T10130] netlink: 'syz.2.1767': attribute type 3 has an invalid length.
[  192.985979][T10130] netlink: 'syz.2.1767': attribute type 1 has an invalid length.
[  192.989181][T10130] netlink: 191264 bytes leftover after parsing attributes in process `syz.2.1767'.
[  193.529525][T10151] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1776'.
[  194.078817][T10196] netlink: 'syz.2.1797': attribute type 21 has an invalid length.
[  194.081969][T10196] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1797'.
[  194.214821][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.217008][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.345387][T10208] bpf: Bad value for 'gid'
[  194.380992][T10210] netlink: 'syz.4.1804': attribute type 10 has an invalid length.
[  194.389227][T10210] batman_adv: batadv0: Adding interface: hsr_slave_1
[  194.391541][T10210] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.415969][T10210] batman_adv: batadv0: Interface activated: hsr_slave_1
[  194.792104][T10236] netlink: 'syz.4.1816': attribute type 10 has an invalid length.
[  194.857631][T10239] syzkaller0: entered promiscuous mode
[  194.859988][T10239] syzkaller0: entered allmulticast mode
[  195.459247][T10264] netlink: 'syz.3.1827': attribute type 10 has an invalid length.
[  196.326159][T10256] syz.4.1823 (10256) used obsolete PPPIOCDETACH ioctl
[  196.329977][T10264] vlan0: entered allmulticast mode
[  196.332566][T10264] veth0_vlan: entered allmulticast mode
[  196.344240][T10264] team0: Port device vlan0 added
[  196.561664][T10274] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  197.741792][T10303] __nla_validate_parse: 3 callbacks suppressed
[  197.741807][T10303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1845'.
[  197.751376][T10303] unsupported nlmsg_type 40
[  197.925763][T10315] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1851'.
[  197.993946][T10322] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1854'.
[  197.997541][T10322] netlink: get zone limit has 8 unknown bytes
[  198.236846][T10329] netlink: 'syz.2.1856': attribute type 10 has an invalid length.
[  198.265102][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1858'.
[  198.345010][T10329] bridge0: port 3(dummy0) entered disabled state
[  198.351622][T10329] dummy0: left allmulticast mode
[  198.356656][T10329] dummy0: left promiscuous mode
[  198.359201][T10329] bridge0: port 3(dummy0) entered disabled state
[  198.382395][T10329] dummy0: entered promiscuous mode
[  198.386445][T10329] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  198.398147][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1861'.
[  202.370803][T10385] ==================================================================
[  202.373604][T10385] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  202.376215][T10385] Read of size 4 at addr ffff88810f5c0e44 by task syz.4.1882/10385
[  202.379896][T10385] 
[  202.380730][T10385] CPU: 0 UID: 0 PID: 10385 Comm: syz.4.1882 Not tainted syzkaller #0 PREEMPT(full) 
[  202.380740][T10385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.380744][T10385] Call Trace:
[  202.380749][T10385]  <TASK>
[  202.380753][T10385]  dump_stack_lvl+0x189/0x250
[  202.380767][T10385]  ? __virt_addr_valid+0x1c8/0x5c0
[  202.380778][T10385]  ? __pfx_dump_stack_lvl+0x10/0x10
[  202.380787][T10385]  ? __virt_addr_valid+0x1c8/0x5c0
[  202.380797][T10385]  ? lock_release+0x4b/0x3e0
[  202.380813][T10385]  ? __virt_addr_valid+0x4a5/0x5c0
[  202.380823][T10385]  print_report+0xca/0x240
[  202.380832][T10385]  ? xfrm_alloc_spi+0x570/0xf30
[  202.380841][T10385]  kasan_report+0x118/0x150
[  202.380852][T10385]  ? xfrm_alloc_spi+0x570/0xf30
[  202.380861][T10385]  xfrm_alloc_spi+0x570/0xf30
[  202.380869][T10385]  ? xfrm_alloc_spi+0x2a0/0xf30
[  202.380880][T10385]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  202.380887][T10385]  ? xfrm_find_acq+0x87/0xa0
[  202.380896][T10385]  xfrm_alloc_userspi+0x70b/0xc90
[  202.380908][T10385]  ? apparmor_capable+0x137/0x1b0
[  202.380917][T10385]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  202.380925][T10385]  ? __nla_parse+0x40/0x60
[  202.380937][T10385]  xfrm_user_rcv_msg+0x7a3/0xab0
[  202.380947][T10385]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  202.380963][T10385]  ? __pfx___mutex_trylock_common+0x10/0x10
[  202.380971][T10385]  ? rcu_is_watching+0x15/0xb0
[  202.380979][T10385]  ? trace_contention_end+0x39/0x120
[  202.380986][T10385]  ? __mutex_lock+0x335/0x1360
[  202.381000][T10385]  netlink_rcv_skb+0x208/0x470
[  202.381011][T10385]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  202.381019][T10385]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  202.381032][T10385]  ? netlink_deliver_tap+0x2e/0x1b0
[  202.381042][T10385]  ? netlink_deliver_tap+0x2e/0x1b0
[  202.381052][T10385]  xfrm_netlink_rcv+0x79/0x90
[  202.381060][T10385]  netlink_unicast+0x82f/0x9e0
[  202.381071][T10385]  ? __pfx_netlink_unicast+0x10/0x10
[  202.381080][T10385]  ? netlink_sendmsg+0x642/0xb30
[  202.381089][T10385]  ? skb_put+0x11b/0x210
[  202.381097][T10385]  netlink_sendmsg+0x805/0xb30
[  202.381109][T10385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  202.381120][T10385]  ? aa_sock_msg_perm+0xf1/0x1d0
[  202.381130][T10385]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  202.381138][T10385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  202.381148][T10385]  __sock_sendmsg+0x21c/0x270
[  202.381159][T10385]  ____sys_sendmsg+0x505/0x830
[  202.381167][T10385]  ? __pfx_____sys_sendmsg+0x10/0x10
[  202.381176][T10385]  ? import_iovec+0x74/0xa0
[  202.381185][T10385]  ___sys_sendmsg+0x21f/0x2a0
[  202.381192][T10385]  ? __pfx____sys_sendmsg+0x10/0x10
[  202.381204][T10385]  ? __fget_files+0x2a/0x420
[  202.381217][T10385]  ? __fget_files+0x2a/0x420
[  202.381227][T10385]  ? __fget_files+0x3a0/0x420
[  202.381239][T10385]  __x64_sys_sendmsg+0x19b/0x260
[  202.381246][T10385]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  202.381256][T10385]  ? rcu_is_watching+0x15/0xb0
[  202.381290][T10385]  ? do_syscall_64+0xbe/0x3b0
[  202.381303][T10385]  do_syscall_64+0xfa/0x3b0
[  202.381315][T10385]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.381326][T10385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.381333][T10385]  ? exc_page_fault+0x9f/0xf0
[  202.381345][T10385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.381353][T10385] RIP: 0033:0x7f2bf098ebe9
[  202.381362][T10385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.381369][T10385] RSP: 002b:00007f2bf17df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  202.381378][T10385] RAX: ffffffffffffffda RBX: 00007f2bf0bb5fa0 RCX: 00007f2bf098ebe9
[  202.381389][T10385] RDX: 0000000000000000 RSI: 0000200000001f40 RDI: 0000000000000003
[  202.381394][T10385] RBP: 00007f2bf0a11e19 R08: 0000000000000000 R09: 0000000000000000
[  202.381398][T10385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.381402][T10385] R13: 00007f2bf0bb6038 R14: 00007f2bf0bb5fa0 R15: 00007ffd6db85768
[  202.381411][T10385]  </TASK>
[  202.381414][T10385] 
[  202.527778][T10385] Allocated by task 9346:
[  202.529613][T10385]  kasan_save_track+0x3e/0x80
[  202.531545][T10385]  __kasan_slab_alloc+0x6c/0x80
[  202.533618][T10385]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  202.535691][T10385]  xfrm_state_alloc+0x24/0x2f0
[  202.537400][T10385]  __find_acq_core+0x8a7/0x1c00
[  202.539063][T10385]  xfrm_find_acq+0x78/0xa0
[  202.540581][T10385]  xfrm_alloc_userspi+0x6b3/0xc90
[  202.542234][T10385]  xfrm_user_rcv_msg+0x7a3/0xab0
[  202.543976][T10385]  netlink_rcv_skb+0x208/0x470
[  202.545768][T10385]  xfrm_netlink_rcv+0x79/0x90
[  202.547344][T10385]  netlink_unicast+0x82f/0x9e0
[  202.548898][T10385]  netlink_sendmsg+0x805/0xb30
[  202.550444][T10385]  __sock_sendmsg+0x21c/0x270
[  202.551994][T10385]  ____sys_sendmsg+0x505/0x830
[  202.553778][T10385]  ___sys_sendmsg+0x21f/0x2a0
[  202.555369][T10385]  __x64_sys_sendmsg+0x19b/0x260
[  202.557024][T10385]  do_syscall_64+0xfa/0x3b0
[  202.558580][T10385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.560558][T10385] 
[  202.561384][T10385] Freed by task 5906:
[  202.562732][T10385]  kasan_save_track+0x3e/0x80
[  202.564328][T10385]  kasan_save_free_info+0x46/0x50
[  202.566016][T10385]  __kasan_slab_free+0x5b/0x80
[  202.567635][T10385]  kmem_cache_free+0x18f/0x400
[  202.569232][T10385]  xfrm_state_gc_task+0x52d/0x6b0
[  202.570910][T10385]  process_scheduled_works+0xae1/0x17b0
[  202.572781][T10385]  worker_thread+0x8a0/0xda0
[  202.574279][T10385]  kthread+0x711/0x8a0
[  202.575724][T10385]  ret_from_fork+0x3fc/0x770
[  202.577461][T10385]  ret_from_fork_asm+0x1a/0x30
[  202.579107][T10385] 
[  202.579944][T10385] The buggy address belongs to the object at ffff88810f5c0d80
[  202.579944][T10385]  which belongs to the cache xfrm_state of size 928
[  202.584639][T10385] The buggy address is located 196 bytes inside of
[  202.584639][T10385]  freed 928-byte region [ffff88810f5c0d80, ffff88810f5c1120)
[  202.589302][T10385] 
[  202.590127][T10385] The buggy address belongs to the physical page:
[  202.592281][T10385] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810f5c0d80 pfn:0x10f5c0
[  202.595896][T10385] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  202.599436][T10385] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  202.602614][T10385] page_type: f5(slab)
[  202.604306][T10385] raw: 057ff00000000040 ffff88801af83640 dead000000000122 0000000000000000
[  202.607815][T10385] raw: ffff88810f5c0d80 00000000800e000b 00000000f5000000 0000000000000000
[  202.610705][T10385] head: 057ff00000000040 ffff88801af83640 dead000000000122 0000000000000000
[  202.613627][T10385] head: ffff88810f5c0d80 00000000800e000b 00000000f5000000 0000000000000000
[  202.616570][T10385] head: 057ff00000000002 ffffea00043d7001 00000000ffffffff 00000000ffffffff
[  202.619451][T10385] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  202.622322][T10385] page dumped because: kasan: bad access detected
[  202.624466][T10385] page_owner tracks the page as allocated
[  202.626517][T10385] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8105, tgid 8104 (syz.3.885), ts 136118499732, free_ts 125966183116
[  202.632770][T10385]  post_alloc_hook+0x240/0x2a0
[  202.634425][T10385]  get_page_from_freelist+0x21e4/0x22c0
[  202.636284][T10385]  __alloc_frozen_pages_noprof+0x181/0x370
[  202.638281][T10385]  alloc_pages_mpol+0x232/0x4a0
[  202.640281][T10385]  allocate_slab+0x8a/0x370
[  202.641977][T10385]  ___slab_alloc+0xbeb/0x1410
[  202.643711][T10385]  kmem_cache_alloc_noprof+0x283/0x3c0
[  202.646012][T10385]  xfrm_state_alloc+0x24/0x2f0
[  202.648052][T10385]  xfrm_add_sa+0x17d1/0x4070
[  202.650015][T10385]  xfrm_user_rcv_msg+0x7a3/0xab0
[  202.652075][T10385]  netlink_rcv_skb+0x208/0x470
[  202.653979][T10385]  xfrm_netlink_rcv+0x79/0x90
[  202.655929][T10385]  netlink_unicast+0x82f/0x9e0
[  202.657947][T10385]  netlink_sendmsg+0x805/0xb30
[  202.659968][T10385]  __sock_sendmsg+0x21c/0x270
[  202.661886][T10385]  ____sys_sendmsg+0x505/0x830
[  202.663877][T10385] page last free pid 7743 tgid 7743 stack trace:
[  202.666529][T10385]  __free_frozen_pages+0xbc4/0xd30
[  202.668661][T10385]  __slab_free+0x303/0x3c0
[  202.670530][T10385]  qlist_free_all+0x97/0x140
[  202.672468][T10385]  kasan_quarantine_reduce+0x148/0x160
[  202.674754][T10385]  __kasan_slab_alloc+0x22/0x80
[  202.676776][T10385]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  202.678722][T10385]  getname_flags+0xb8/0x540
[  202.680546][T10385]  __x64_sys_symlinkat+0x7a/0xb0
[  202.682618][T10385]  do_syscall_64+0xfa/0x3b0
[  202.684332][T10385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.686328][T10385] 
[  202.687158][T10385] Memory state around the buggy address:
[  202.689298][T10385]  ffff88810f5c0d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  202.692595][T10385]  ffff88810f5c0d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.695931][T10385] >ffff88810f5c0e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.699283][T10385]                                            ^
[  202.701823][T10385]  ffff88810f5c0e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.705102][T10385]  ffff88810f5c0f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.707906][T10385] ==================================================================
[  202.711248][T10385] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  202.714173][T10385] CPU: 0 UID: 0 PID: 10385 Comm: syz.4.1882 Not tainted syzkaller #0 PREEMPT(full) 
[  202.718042][T10385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.721947][T10385] Call Trace:
[  202.723374][T10385]  <TASK>
[  202.724590][T10385]  dump_stack_lvl+0x99/0x250
[  202.726552][T10385]  ? __asan_memcpy+0x40/0x70
[  202.728310][T10385]  ? __pfx_dump_stack_lvl+0x10/0x10
[  202.730062][T10385]  ? __pfx__printk+0x10/0x10
[  202.731679][T10385]  vpanic+0x281/0x750
[  202.733062][T10385]  ? __pfx_vpanic+0x10/0x10
[  202.734922][T10385]  ? irqentry_exit+0x74/0x90
[  202.736477][T10385]  panic+0xb9/0xc0
[  202.737823][T10385]  ? __pfx_panic+0x10/0x10
[  202.739745][T10385]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  202.742227][T10385]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  202.744287][T10385]  ? xfrm_alloc_spi+0x570/0xf30
[  202.745939][T10385]  check_panic_on_warn+0x89/0xb0
[  202.747683][T10385]  ? xfrm_alloc_spi+0x570/0xf30
[  202.749428][T10385]  end_report+0x78/0x160
[  202.750741][T10385]  kasan_report+0x129/0x150
[  202.752138][T10385]  ? xfrm_alloc_spi+0x570/0xf30
[  202.753873][T10385]  xfrm_alloc_spi+0x570/0xf30
[  202.755359][T10385]  ? xfrm_alloc_spi+0x2a0/0xf30
[  202.756865][T10385]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  202.758578][T10385]  ? xfrm_find_acq+0x87/0xa0
[  202.760528][T10385]  xfrm_alloc_userspi+0x70b/0xc90
[  202.762555][T10385]  ? apparmor_capable+0x137/0x1b0
[  202.764331][T10385]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  202.766184][T10385]  ? __nla_parse+0x40/0x60
[  202.767731][T10385]  xfrm_user_rcv_msg+0x7a3/0xab0
[  202.769447][T10385]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  202.771300][T10385]  ? __pfx___mutex_trylock_common+0x10/0x10
[  202.773334][T10385]  ? rcu_is_watching+0x15/0xb0
[  202.775020][T10385]  ? trace_contention_end+0x39/0x120
[  202.776902][T10385]  ? __mutex_lock+0x335/0x1360
[  202.778849][T10385]  netlink_rcv_skb+0x208/0x470
[  202.780949][T10385]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  202.783380][T10385]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  202.785402][T10385]  ? netlink_deliver_tap+0x2e/0x1b0
[  202.787631][T10385]  ? netlink_deliver_tap+0x2e/0x1b0
[  202.789902][T10385]  xfrm_netlink_rcv+0x79/0x90
[  202.791907][T10385]  netlink_unicast+0x82f/0x9e0
[  202.794021][T10385]  ? __pfx_netlink_unicast+0x10/0x10
[  202.796296][T10385]  ? netlink_sendmsg+0x642/0xb30
[  202.798370][T10385]  ? skb_put+0x11b/0x210
[  202.800228][T10385]  netlink_sendmsg+0x805/0xb30
[  202.802334][T10385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  202.804639][T10385]  ? aa_sock_msg_perm+0xf1/0x1d0
[  202.806805][T10385]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  202.809140][T10385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  202.811449][T10385]  __sock_sendmsg+0x21c/0x270
[  202.813540][T10385]  ____sys_sendmsg+0x505/0x830
[  202.815595][T10385]  ? __pfx_____sys_sendmsg+0x10/0x10
[  202.817905][T10385]  ? import_iovec+0x74/0xa0
[  202.819910][T10385]  ___sys_sendmsg+0x21f/0x2a0
[  202.821982][T10385]  ? __pfx____sys_sendmsg+0x10/0x10
[  202.824230][T10385]  ? __fget_files+0x2a/0x420
[  202.826295][T10385]  ? __fget_files+0x2a/0x420
[  202.828317][T10385]  ? __fget_files+0x3a0/0x420
[  202.830390][T10385]  __x64_sys_sendmsg+0x19b/0x260
[  202.832556][T10385]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  202.834942][T10385]  ? rcu_is_watching+0x15/0xb0
[  202.837069][T10385]  ? do_syscall_64+0xbe/0x3b0
[  202.839118][T10385]  do_syscall_64+0xfa/0x3b0
[  202.841125][T10385]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.843320][T10385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.845905][T10385]  ? exc_page_fault+0x9f/0xf0
[  202.847936][T10385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.850416][T10385] RIP: 0033:0x7f2bf098ebe9
[  202.852389][T10385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.860617][T10385] RSP: 002b:00007f2bf17df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  202.864185][T10385] RAX: ffffffffffffffda RBX: 00007f2bf0bb5fa0 RCX: 00007f2bf098ebe9
[  202.867604][T10385] RDX: 0000000000000000 RSI: 0000200000001f40 RDI: 0000000000000003
[  202.871011][T10385] RBP: 00007f2bf0a11e19 R08: 0000000000000000 R09: 0000000000000000
[  202.874391][T10385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.877713][T10385] R13: 00007f2bf0bb6038 R14: 00007f2bf0bb5fa0 R15: 00007ffd6db85768
[  202.881055][T10385]  </TASK>
[  202.883187][T10385] Kernel Offset: disabled
[  202.884921][T10385] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:07:48  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001058 RDI=0000000000001059 RBP=00000000000003f8 RSP=ffffc9000361e9f0
R8 =ffff88801f6c0237 R9 =1ffff11003ed8046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af98f2 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2bf17df6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000006c0 CR3=0000000022508000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2bf0b87498 00007f2bf0b87470 XMM03=00007f2bf0b874a8 00007f2bf0b874a0
XMM04=00007f2bf16ed100 00007f2bf0b87460 XMM05=00007f2bf0b87478 00007f2bf0b874c0
XMM06=00007f2bf0b874b8 00007f2bf0b874b0 XMM07=00007f2bf0b874a8 00007f2bf0b874a0
XMM08=0000000000000000 00007f2bf0a12ee7 XMM09=0000000000000000 00007f2bf0a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000045ed9 RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000045ed9 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0e50
R8 =0000000000000000 R9 =ffffffff81ae031e R10=0000000000000003 R11=ffffffff81703490
R12=00000000100010c6 R13=dffffc0000000000 R14=0000000000045ed9 R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555570f86500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555570f867e0 CR3=00000000254d8000 CR4=000006f0
DR0=0000200000000300 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
