last executing test programs:

2.541352068s ago: executing program 1 (id=1530):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x20}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

2.482124012s ago: executing program 1 (id=1533):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0)

2.140770838s ago: executing program 1 (id=1539):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f00000000c0)="510003000000", 0x6)

2.048727352s ago: executing program 1 (id=1541):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x37, 0x0, &(0x7f0000000940)="ce011000009a697f65360c5e86dd63c79e71f6df3a0527a9115d0ebdafae9dc51cd2046f1dd42819bd481400b68226cc58e1d4acbd133a", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.950857778s ago: executing program 1 (id=1542):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000000}, 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

1.060896488s ago: executing program 1 (id=1563):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r2, 0x0, &(0x7f0000000a80))
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0)
sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r9, 0x0, r8, 0x0, 0x7ffff000, 0x6)

500.771339ms ago: executing program 2 (id=1568):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}, 0x20}, 0x1, 0x0, 0x0, 0x40005}, 0x0)

372.488804ms ago: executing program 2 (id=1571):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="74000000000201040000000000000000020000052400028014000180080001000000000008000000000000000002028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000180001"], 0x74}}, 0x0)

372.266251ms ago: executing program 0 (id=1572):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r3=>0x0})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004)

372.064888ms ago: executing program 2 (id=1573):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
close(0x3)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r2, 0x80)
accept$netrom(r2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609", 0x2}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[], 0xffdd)

252.000091ms ago: executing program 0 (id=1574):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xac}]}}]}, 0x3c}}, 0x0)

210.14332ms ago: executing program 0 (id=1575):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

100.423168ms ago: executing program 0 (id=1576):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8803, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x68ed0000)

100.185037ms ago: executing program 0 (id=1577):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0)
recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0)

100.035369ms ago: executing program 2 (id=1578):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000007000000000000af73af1073ed00feff"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

51.177125ms ago: executing program 2 (id=1579):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc004)

302.139µs ago: executing program 2 (id=1580):
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
close(0x4)

0s ago: executing program 0 (id=1581):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
unshare(0x400)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1000, 0x0, 0x3}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28024' (ED25519) to the list of known hosts.
syzkaller login: [   56.179099][ T5816] cgroup: Unknown subsys name 'net'
[   56.302079][ T5816] cgroup: Unknown subsys name 'cpuset'
[   56.308253][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.301018][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.697734][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.702395][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.705518][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.712520][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.716963][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.721038][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.724880][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.728463][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.754008][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.761570][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.766428][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.770043][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.783320][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.787374][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.790495][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.069892][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   64.178503][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.199883][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   64.277100][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.280040][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.283602][ T5855] bridge_slave_0: entered allmulticast mode
[   64.287529][ T5855] bridge_slave_0: entered promiscuous mode
[   64.311455][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.314520][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.318980][ T5855] bridge_slave_1: entered allmulticast mode
[   64.323142][ T5855] bridge_slave_1: entered promiscuous mode
[   64.405143][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.409873][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.412889][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.418931][ T5851] bridge_slave_0: entered allmulticast mode
[   64.423248][ T5851] bridge_slave_0: entered promiscuous mode
[   64.428643][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.431844][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.435050][ T5851] bridge_slave_1: entered allmulticast mode
[   64.440628][ T5851] bridge_slave_1: entered promiscuous mode
[   64.444610][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.447897][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.450932][ T5847] bridge_slave_0: entered allmulticast mode
[   64.454908][ T5847] bridge_slave_0: entered promiscuous mode
[   64.460313][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.463015][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.465580][ T5847] bridge_slave_1: entered allmulticast mode
[   64.468911][ T5847] bridge_slave_1: entered promiscuous mode
[   64.473653][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.523994][ T5855] team0: Port device team_slave_0 added
[   64.527893][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.542229][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.546703][ T5855] team0: Port device team_slave_1 added
[   64.550230][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.555030][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.618371][ T5847] team0: Port device team_slave_0 added
[   64.621948][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.624323][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.635623][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.643525][ T5851] team0: Port device team_slave_0 added
[   64.647696][ T5847] team0: Port device team_slave_1 added
[   64.650211][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.653004][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.661564][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.667505][ T5851] team0: Port device team_slave_1 added
[   64.709730][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.712013][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.720635][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.727348][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.729637][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.740134][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.745467][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.747851][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.756705][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.760771][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.762939][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.773211][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.812593][ T5855] hsr_slave_0: entered promiscuous mode
[   64.815585][ T5855] hsr_slave_1: entered promiscuous mode
[   64.848415][ T5851] hsr_slave_0: entered promiscuous mode
[   64.850829][ T5851] hsr_slave_1: entered promiscuous mode
[   64.853334][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   64.856130][ T5851] Cannot create hsr debugfs directory
[   64.885478][ T5847] hsr_slave_0: entered promiscuous mode
[   64.888754][ T5847] hsr_slave_1: entered promiscuous mode
[   64.891687][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   64.894008][ T5847] Cannot create hsr debugfs directory
[   65.206300][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.216785][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.225025][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.232498][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.312629][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.320436][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.330515][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.350440][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.413225][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.423015][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.431342][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.439680][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.532964][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.581143][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   65.586598][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.605233][  T794] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.607913][  T794] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.619285][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.628620][  T794] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.630918][  T794] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.638802][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   65.668865][ T3857] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.671676][ T3857] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.679879][ T3857] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.682578][ T3857] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.703350][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   65.719141][ T3857] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.721986][ T3857] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.747440][ T3857] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.750233][ T3857] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.848860][ T5238] Bluetooth: hci1: command tx timeout
[   65.851304][ T5238] Bluetooth: hci2: command tx timeout
[   65.853441][ T5238] Bluetooth: hci0: command tx timeout
[   65.952814][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.024909][ T5847] veth0_vlan: entered promiscuous mode
[   66.042925][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.052783][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.081213][ T5847] veth1_vlan: entered promiscuous mode
[   66.139337][ T5851] veth0_vlan: entered promiscuous mode
[   66.161652][ T5847] veth0_macvtap: entered promiscuous mode
[   66.179535][ T5847] veth1_macvtap: entered promiscuous mode
[   66.188366][ T5851] veth1_vlan: entered promiscuous mode
[   66.191808][ T5855] veth0_vlan: entered promiscuous mode
[   66.214056][ T5855] veth1_vlan: entered promiscuous mode
[   66.221640][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.252575][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.267305][ T5879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.280725][ T5878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.287854][ T5851] veth0_macvtap: entered promiscuous mode
[   66.304050][ T5878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.309790][ T5878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.332334][ T5851] veth1_macvtap: entered promiscuous mode
[   66.337568][ T5855] veth0_macvtap: entered promiscuous mode
[   66.367385][ T5855] veth1_macvtap: entered promiscuous mode
[   66.379129][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.417192][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.426986][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.429552][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.433327][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.445094][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.452108][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.467233][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.475128][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.481837][ T5878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.494049][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.501039][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.504234][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.519238][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.530071][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.560574][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.590910][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.648529][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.657252][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.687360][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.692579][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.697600][ T5916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'.
[   66.719060][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.723809][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.778740][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.781337][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.142164][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   68.013061][ T5850] Bluetooth: hci0: command tx timeout
[   68.015206][ T5850] Bluetooth: hci2: command tx timeout
[   68.017125][ T5238] Bluetooth: hci1: command tx timeout
[   68.082726][ T5972] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.131519][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'.
[   68.135427][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.160933][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.395585][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   68.471032][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'.
[   68.478120][ T5979] netlink: 'syz.0.29': attribute type 12 has an invalid length.
[   68.495127][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.495216][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'.
[   68.501063][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.502100][ T5979] netlink: 'syz.0.29': attribute type 12 has an invalid length.
[   68.505328][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.505359][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.516001][ T5979] Zero length message leads to an empty skb
[   68.831260][ T5985] sch_fq: defrate 0 ignored.
[   68.917666][ T5987] vxcan2: entered promiscuous mode
[   69.148579][ T5998] warning: `syz.2.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.220411][ T6000] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.38'.
[   69.254973][ T6000] netlink: 'syz.0.38': attribute type 10 has an invalid length.
[   69.267952][ T6000] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   69.293401][ T6004] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET)
[   69.882824][ T6030] netlink: 'syz.1.53': attribute type 1 has an invalid length.
[   70.077275][ T5850] Bluetooth: hci2: command tx timeout
[   70.079630][ T5238] Bluetooth: hci1: command tx timeout
[   70.081954][ T5238] Bluetooth: hci0: command tx timeout
[   70.286538][ T6055] netlink: 'syz.1.62': attribute type 3 has an invalid length.
[   70.289472][ T6055] netlink: 'syz.1.62': attribute type 1 has an invalid length.
[   71.060712][ T6098] TCP: TCP_TX_DELAY enabled
[   71.283367][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.288365][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.512367][ T5914] hid-generic 0005:046D:5505.0001: unknown main item tag 0x0
[   71.515685][ T5914] hid-generic 0005:046D:5505.0001: unknown main item tag 0x0
[   71.532525][ T5914] hid-generic 0005:046D:5505.0001: reserved main item tag 0xe
[   71.551330][ T5914] hid-generic 0005:046D:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   71.660939][ T6133] syz.2.99 (6133) used obsolete PPPIOCDETACH ioctl
[   71.817424][ T6143] openvswitch: netlink: Duplicate or invalid key (type 0).
[   71.820615][ T6143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.159580][ T5238] Bluetooth: hci0: command tx timeout
[   72.161902][ T5238] Bluetooth: hci2: command tx timeout
[   72.164089][ T5238] Bluetooth: hci1: command tx timeout
[   72.249617][ T6168] pim6reg1: entered promiscuous mode
[   72.251843][ T6168] pim6reg1: entered allmulticast mode
[   72.910108][ T6196] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[   73.285491][ T6219] batadv_slave_1: entered promiscuous mode
[   73.312952][ T6219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.137'.
[   73.330991][ T6218] batadv_slave_1: left promiscuous mode
[   73.335620][ T6223] syzkaller1: entered promiscuous mode
[   73.340107][ T6223] syzkaller1: entered allmulticast mode
[   73.391120][ T6225] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[   73.700960][ T6243] Bluetooth: MGMT ver 1.23
[   73.948710][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'.
[   74.390570][ T6287] netlink: 'syz.0.166': attribute type 1 has an invalid length.
[   74.830297][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'.
[   74.834506][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'.
[   74.865258][ T6311] macvlan2: entered promiscuous mode
[   75.200821][ T6338] netlink: 48 bytes leftover after parsing attributes in process `syz.0.189'.
[   75.282869][ T6338] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   75.285248][ T5913] IPVS: starting estimator thread 0...
[   75.396419][ T6345] IPVS: using max 64 ests per chain, 153600 per kthread
[   75.756030][ T5850] Bluetooth: hci0: command tx timeout
[   75.940975][ T6377] tipc: Started in network mode
[   75.943398][ T6377] tipc: Node identity ea6d1e3bc7e3, cluster identity 4711
[   75.948872][ T6377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.977826][ T6377] syzkaller0: entered promiscuous mode
[   75.979755][ T6377] syzkaller0: entered allmulticast mode
[   76.013576][ T6377] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   76.027312][ T6377] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[   76.034603][ T6377] tipc: Resetting bearer <eth:syzkaller0>
[   76.044514][ T6374] tipc: Resetting bearer <eth:syzkaller0>
[   76.062860][ T6374] tipc: Disabling bearer <eth:syzkaller0>
[   76.290807][ T6398] netlink: 'syz.2.215': attribute type 1 has an invalid length.
[   76.293941][ T6398] netlink: 172 bytes leftover after parsing attributes in process `syz.2.215'.
[   76.713676][ T6428] bridge1: entered allmulticast mode
[   76.796850][ T6435] netlink: 'syz.2.233': attribute type 1 has an invalid length.
[   76.803730][ T6435] netlink: 'syz.2.233': attribute type 6 has an invalid length.
[   76.812908][ T6435] netlink: 'syz.2.233': attribute type 3 has an invalid length.
[   77.058718][ T6453] veth1_to_bond: entered allmulticast mode
[   77.076304][ T6453] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.091070][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'.
[   77.152263][ T6453] bond0: (slave bond_slave_1): Releasing backup interface
[   77.184909][ T6453] veth1_to_bond (unregistering): left allmulticast mode
[   77.370330][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'.
[   77.548720][ T6485] netlink: 'syz.2.258': attribute type 10 has an invalid length.
[   77.598485][ T6485] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   77.682195][ T6491] netlink: 168 bytes leftover after parsing attributes in process `syz.1.259'.
[   78.167947][ T6531] netlink: 'syz.2.279': attribute type 2 has an invalid length.
[   78.180737][ T6533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.279555][ T6537] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   78.574358][ T6560] netlink: 284 bytes leftover after parsing attributes in process `syz.0.291'.
[   78.837808][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'.
[   78.868596][ T6578] netlink: 'syz.2.299': attribute type 1 has an invalid length.
[   78.939155][ T6583] bridge0: entered allmulticast mode
[   78.947824][ T6583] pim6reg: entered allmulticast mode
[   78.950570][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'.
[   78.954451][ T6583] bridge_slave_1: left allmulticast mode
[   78.961881][ T6583] bridge_slave_1: left promiscuous mode
[   78.965598][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.979047][ T6583] bridge_slave_0: left allmulticast mode
[   78.987584][ T6583] bridge_slave_0: left promiscuous mode
[   78.990420][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.014282][ T6583] bridge0 (unregistering): left allmulticast mode
[   79.583681][ T6593] netlink: 72 bytes leftover after parsing attributes in process `syz.2.306'.
[   79.589208][ T6593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.306'.
[   79.592296][ T6593] netlink: 152 bytes leftover after parsing attributes in process `syz.2.306'.
[   79.614747][ T6593] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[   79.622033][ T6593] netlink: 72 bytes leftover after parsing attributes in process `syz.2.306'.
[   79.629265][ T6593] netlink: 72 bytes leftover after parsing attributes in process `syz.2.306'.
[   79.997541][ T6609] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   80.001226][ T6609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.028801][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'.
[   80.105272][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'.
[   80.167514][ T6616] netlink: 'syz.2.311': attribute type 4 has an invalid length.
[   80.808435][ T6656] netlink: 'syz.2.334': attribute type 1 has an invalid length.
[   80.888403][ T6661] tc_dump_action: action bad kind
[   81.379759][ T6681] syzkaller0: entered promiscuous mode
[   81.382306][ T6681] syzkaller0: entered allmulticast mode
[   82.767380][ T6696] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   83.332609][ T6732] netlink: 'syz.2.359': attribute type 1 has an invalid length.
[   83.921220][ T6762] __nla_validate_parse: 5 callbacks suppressed
[   83.921237][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'.
[   84.282002][ T6789] netlink: 830 bytes leftover after parsing attributes in process `syz.0.388'.
[   84.615376][ T6809] geneve2: entered promiscuous mode
[   85.460422][ T6856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.413'.
[   85.724062][ T6877] sit1: entered promiscuous mode
[   86.140373][ T6905] netlink: 56 bytes leftover after parsing attributes in process `syz.0.436'.
[   86.148425][ T6905] Set syz0 is full, maxelem 0 reached
[   86.643375][    T9] cfg80211: failed to load regulatory.db
[   86.978485][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.444'.
[   87.532763][ T6956] syzkaller1: entered promiscuous mode
[   87.535015][ T6956] syzkaller1: entered allmulticast mode
[   88.189769][ T6987] netlink: 256 bytes leftover after parsing attributes in process `syz.0.472'.
[   88.771005][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'.
[   88.777757][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'.
[   88.991444][ T7044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.474060][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.511'.
[   89.480975][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.511'.
[   89.725287][ T7084] syz_tun: entered allmulticast mode
[   89.747697][ T7084] netlink: 60 bytes leftover after parsing attributes in process `syz.0.515'.
[   89.752522][ T7084] unsupported nlmsg_type 40
[   90.138386][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'.
[   90.148073][ T7099] netlink: 84 bytes leftover after parsing attributes in process `syz.0.521'.
[   90.682616][ T7120] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   90.705389][ T7122] bond0: option mode: unable to set because the bond device has slaves
[   90.951788][ T7132] netlink: 'syz.1.536': attribute type 11 has an invalid length.
[   90.959793][ T7132] netlink: 'syz.1.536': attribute type 4 has an invalid length.
[   90.964424][ T7132] netlink: 224 bytes leftover after parsing attributes in process `syz.1.536'.
[   91.293868][ T7151] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   91.409121][ T7156] nbd2: detected capacity change from 0 to 63
[   91.418320][ T7148] block nbd2: NBD_DISCONNECT
[   91.422263][ T7148] block nbd2: Disconnected due to user request.
[   91.439949][ T5938] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.445260][ T7148] block nbd2: shutting down sockets
[   91.447031][ T5938] Buffer I/O error on dev nbd2, logical block 0, async page read
[   91.447253][ T5938] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.454379][ T5938] Buffer I/O error on dev nbd2, logical block 1, async page read
[   91.458327][ T1118] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[   91.461287][ T1118] Buffer I/O error on dev nbd2, logical block 2, async page read
[   91.463882][ T1118] Buffer I/O error on dev nbd2, logical block 3, async page read
[   91.468492][ T5938] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.474693][ T5938] Buffer I/O error on dev nbd2, logical block 0, async page read
[   91.484982][ T5938] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.485164][ T7156] bond1: entered promiscuous mode
[   91.491186][ T7156] bond1: entered allmulticast mode
[   91.493665][ T5938] Buffer I/O error on dev nbd2, logical block 1, async page read
[   91.493814][ T7156] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.499703][ T5938] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.515965][ T5938] Buffer I/O error on dev nbd2, logical block 2, async page read
[   91.518736][ T5938] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.521760][ T5938] Buffer I/O error on dev nbd2, logical block 3, async page read
[   91.536540][ T5938] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.540103][ T5938] Buffer I/O error on dev nbd2, logical block 0, async page read
[   91.543216][ T5938] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.550466][ T5938] Buffer I/O error on dev nbd2, logical block 1, async page read
[   91.554670][ T5938] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   91.560736][ T5938] ldm_validate_partition_table(): Disk read failed.
[   91.570649][ T5938] Dev nbd2: unable to read RDB block 0
[   91.574546][ T5938]  nbd2: unable to read partition table
[   91.604518][ T5938] ldm_validate_partition_table(): Disk read failed.
[   91.627483][ T5938] Dev nbd2: unable to read RDB block 0
[   91.631103][ T5938]  nbd2: unable to read partition table
[   91.774317][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.556'.
[   92.023969][ T7204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.566'.
[   92.970183][ T7281] syzkaller1: entered promiscuous mode
[   92.972036][ T7281] syzkaller1: entered allmulticast mode
[   93.073280][ T7287] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   93.133571][ T7295] netlink: 'syz.2.610': attribute type 3 has an invalid length.
[   93.138914][ T7295] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.610'.
[   93.218523][ T7303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.614'.
[   93.221512][ T7303] netlink: 'syz.0.614': attribute type 3 has an invalid length.
[   93.226941][ T7303] netlink: 'syz.0.614': attribute type 2 has an invalid length.
[   93.233244][ T7303] netlink: 'syz.0.614': attribute type 2 has an invalid length.
[   93.439571][ T7326] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[   93.511841][ T7331] bond0: (slave gretap0): Opening slave failed
[   93.894318][ T7349] tipc: Started in network mode
[   93.896952][ T7349] tipc: Node identity 12726c25acc, cluster identity 4711
[   93.900365][ T7349] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.905389][ T7349] syzkaller0: entered promiscuous mode
[   93.914229][ T7349] syzkaller0: entered allmulticast mode
[   93.938668][ T7349] tipc: Resetting bearer <eth:syzkaller0>
[   93.943235][ T7348] tipc: Resetting bearer <eth:syzkaller0>
[   93.959758][ T7348] tipc: Disabling bearer <eth:syzkaller0>
[   94.391269][ T7361] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.403479][ T7361] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.534922][ T7361] bond1: left promiscuous mode
[   94.539724][ T7361] bond1: left allmulticast mode
[   94.544262][ T5878] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.560443][ T5878] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.569560][ T5878] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.575268][ T5878] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.628915][ T7384] Bluetooth: MGMT ver 1.23
[   94.712582][ T7393] __nla_validate_parse: 4 callbacks suppressed
[   94.712595][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'.
[   94.722376][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.657'.
[   94.812496][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'.
[   94.823520][ T7401] veth1: entered promiscuous mode
[   94.829732][ T7401] netlink: 'syz.2.661': attribute type 8 has an invalid length.
[   94.833365][ T7401] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[   94.910025][ T7411] netlink: 100 bytes leftover after parsing attributes in process `syz.2.665'.
[   94.912933][ T7411] netlink: 100 bytes leftover after parsing attributes in process `syz.2.665'.
[   95.070546][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'.
[   95.420329][ T7448] pim6reg1: entered promiscuous mode
[   95.423103][ T7448] pim6reg1: entered allmulticast mode
[   95.538375][ T7460] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.689'.
[   95.984760][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'.
[   96.031194][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'.
[   96.513954][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.721'.
[   96.533650][ T7535] netlink: 'syz.2.720': attribute type 13 has an invalid length.
[   96.554695][ T7535] netlink: 'syz.2.720': attribute type 17 has an invalid length.
[   96.678158][ T7535] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.682498][ T7535] 8021q: adding VLAN 0 to HW filter on device team0
[   96.693387][ T7535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.738889][ T7535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.156924][ T5878] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   97.168469][ T7576] macvlan2: entered allmulticast mode
[   97.170439][ T7576] veth1_vlan: entered allmulticast mode
[   97.174412][ T7576] veth1_vlan: left allmulticast mode
[   97.412878][ T7535] syz.2.720 (7535) used greatest stack depth: 19008 bytes left
[   97.898901][ T7612] netlink: 'syz.1.751': attribute type 1 has an invalid length.
[   98.069463][ T7627] netlink: 'syz.0.757': attribute type 2 has an invalid length.
[   98.120745][ T7631] bond0: option ad_select: unable to set because the bond device is up
[   99.533170][ T7715] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  100.962230][ T7777] __nla_validate_parse: 6 callbacks suppressed
[  100.962257][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.828'.
[  101.433979][ T7802] netlink: 'syz.2.834': attribute type 16 has an invalid length.
[  101.437390][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  101.444169][ T7802] netlink: 'syz.2.834': attribute type 17 has an invalid length.
[  101.477844][ T7802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.999719][ T7822] tc_dump_action: action bad kind
[  102.230576][ T7828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.851'.
[  102.259376][ T7830] netlink: 'syz.0.852': attribute type 7 has an invalid length.
[  102.269131][ T7830] netlink: 'syz.0.852': attribute type 8 has an invalid length.
[  103.512797][ T7916] netlink: 36 bytes leftover after parsing attributes in process `syz.1.891'.
[  103.518780][ T7916] netlink: 'syz.1.891': attribute type 29 has an invalid length.
[  104.240579][ T7957] netlink: 'syz.0.907': attribute type 21 has an invalid length.
[  104.243981][ T7957] netlink: 132 bytes leftover after parsing attributes in process `syz.0.907'.
[  104.281884][ T7959] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.909'.
[  104.344264][ T7965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.352383][ T7965] syzkaller0: entered promiscuous mode
[  104.354496][ T7965] syzkaller0: entered allmulticast mode
[  104.378479][ T7965] tipc: Resetting bearer <eth:syzkaller0>
[  104.384688][ T7964] tipc: Resetting bearer <eth:syzkaller0>
[  104.391005][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'.
[  104.404027][ T7964] tipc: Disabling bearer <eth:syzkaller0>
[  104.532118][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'.
[  104.870189][ T7995] netlink: 45 bytes leftover after parsing attributes in process `syz.1.927'.
[  105.392429][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.939'.
[  106.011783][ T8046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.191380][ T8054] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  106.434411][ T8064] netlink: 'syz.0.958': attribute type 4 has an invalid length.
[  107.291729][ T8088] netlink: 64 bytes leftover after parsing attributes in process `syz.2.969'.
[  107.352026][ T8091] syz_tun: entered allmulticast mode
[  107.480309][ T8092] netlink: 'syz.1.970': attribute type 10 has an invalid length.
[  107.490947][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'.
[  107.508924][ T8092] team0: Port device dummy0 added
[  107.531675][ T8092] netlink: 'syz.1.970': attribute type 10 has an invalid length.
[  107.573338][ T8092] team0: Port device dummy0 removed
[  107.589950][ T8092] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  107.783585][ T8105] netlink: 'syz.0.977': attribute type 2 has an invalid length.
[  107.806015][ T8105] netlink: 119 bytes leftover after parsing attributes in process `syz.0.977'.
[  108.052666][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'.
[  108.318875][ T8132] netlink: 76 bytes leftover after parsing attributes in process `syz.1.990'.
[  108.322021][ T8132] netlink: 76 bytes leftover after parsing attributes in process `syz.1.990'.
[  108.815927][ T8164] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1005'.
[  110.316381][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  111.828894][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  111.993996][ T8213] netlink: 'syz.2.1026': attribute type 4 has an invalid length.
[  112.135126][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'.
[  112.164289][ T8221] netlink: 'syz.0.1030': attribute type 1 has an invalid length.
[  112.169355][ T8221] netlink: 'syz.0.1030': attribute type 2 has an invalid length.
[  112.172433][ T8221] netlink: 'syz.0.1030': attribute type 1 has an invalid length.
[  112.175515][ T8221] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.1030'.
[  112.641794][ T8261] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1044'.
[  113.181921][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'.
[  113.570810][ T8337] netlink: 'syz.0.1075': attribute type 3 has an invalid length.
[  113.574406][ T8337] netlink: 'syz.0.1075': attribute type 3 has an invalid length.
[  113.778965][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1081'.
[  113.979838][ T8372] netlink: 'syz.1.1088': attribute type 5 has an invalid length.
[  113.990682][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'.
[  115.525124][ T8432] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1110'.
[  115.532981][ T8432] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1110'.
[  115.643042][ T8439] netdevsim netdevsim2: loading /lib/firmware// failed with error -22
[  115.646836][ T8439] netdevsim netdevsim2: Direct firmware load for / failed with error -22
[  115.649731][ T8439] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[  117.102278][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'.
[  117.423463][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'.
[  117.599864][ T8537] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1141'.
[  118.026857][ T8567] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  118.755292][ T8628] netlink: 'syz.1.1182': attribute type 1 has an invalid length.
[  118.862417][ T8638] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  118.947892][ T8646] IPv6: addrconf: prefix option has invalid lifetime
[  119.134264][ T8659] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  119.654009][ T8684] netlink: 'syz.1.1207': attribute type 10 has an invalid length.
[  119.678253][ T8684] 8021q: adding VLAN 0 to HW filter on device team0
[  119.682131][ T8684] bond0: (slave team0): Enslaving as an active interface with an up link
[  120.459192][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1227'.
[  120.461903][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.467927][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.585623][ T8730] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.599123][ T8730] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.720639][ T5878] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.724158][ T5878] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.782643][ T5878] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.792695][ T5878] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.796952][ T5878] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.802977][ T5878] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.812139][ T5878] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.815952][ T5878] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.036941][ T8758] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.039896][ T8758] syzkaller0: entered promiscuous mode
[  121.041801][ T8758] syzkaller0: entered allmulticast mode
[  121.045671][ T8758] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  121.063586][ T8758] tipc: Resetting bearer <eth:syzkaller0>
[  121.065318][ T8761] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1241'.
[  121.073577][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'.
[  121.076899][ T8756] tipc: Resetting bearer <eth:syzkaller0>
[  121.096893][ T8756] tipc: Disabling bearer <eth:syzkaller0>
[  121.393779][ T8778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1249'.
[  123.319971][ T8865] netlink: 'syz.2.1287': attribute type 3 has an invalid length.
[  124.152637][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'.
[  124.163478][ T8919] netlink: 'syz.0.1311': attribute type 2 has an invalid length.
[  125.465136][ T8986] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  125.469121][ T8986] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  125.550280][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'.
[  125.562180][ T8993] macsec1: entered promiscuous mode
[  125.564287][ T8993] dummy0: entered promiscuous mode
[  125.568054][ T8993] macsec1: entered allmulticast mode
[  125.570696][ T8993] dummy0: entered allmulticast mode
[  125.576585][ T8993] dummy0: left allmulticast mode
[  125.578636][ T8993] dummy0: left promiscuous mode
[  125.912574][ T9026] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1361'.
[  125.993009][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'.
[  126.006231][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'.
[  126.152315][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'.
[  126.273504][ T9056] tipc: Started in network mode
[  126.275282][ T9056] tipc: Node identity 02779a555052, cluster identity 4711
[  126.285975][ T9056] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.289383][ T9056] syzkaller0: entered promiscuous mode
[  126.291610][ T9056] syzkaller0: entered allmulticast mode
[  126.320695][ T9056] tipc: Resetting bearer <eth:syzkaller0>
[  126.324800][ T9055] tipc: Resetting bearer <eth:syzkaller0>
[  126.359968][ T9055] tipc: Disabling bearer <eth:syzkaller0>
[  126.442600][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'.
[  126.469278][ T9064] syz_tun (unregistering): left allmulticast mode
[  126.516393][ T9066] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  126.519049][  T973] IPVS: starting estimator thread 0...
[  126.597513][ T9071] trusted_key: syz.2.1381 sent an empty control message without MSG_MORE.
[  126.606151][ T9068] IPVS: using max 64 ests per chain, 153600 per kthread
[  126.969483][ T9090] netem: incorrect gi model size
[  126.971881][ T9090] netem: change failed
[  127.296256][ T9112] netlink: 'syz.0.1399': attribute type 2 has an invalid length.
[  127.299205][ T9112] netlink: 'syz.0.1399': attribute type 8 has an invalid length.
[  127.304880][ T9112] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1399'.
[  127.318807][ T9114] lo: entered allmulticast mode
[  127.321485][ T9114] pim6reg: left allmulticast mode
[  127.326818][ T9114] lo: left allmulticast mode
[  127.357118][ T9118] vlan2: entered promiscuous mode
[  127.359439][ T9118] team0: entered promiscuous mode
[  127.361512][ T9118] team_slave_0: entered promiscuous mode
[  127.363999][ T9118] team_slave_1: entered promiscuous mode
[  127.533158][ T9128] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1407'.
[  127.694483][ T9147] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1413'.
[  127.701060][ T9147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.732169][ T9179] syz_tun: entered allmulticast mode
[  128.740591][ T9177] syz_tun: left allmulticast mode
[  129.090754][ T9199] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  129.558242][ T9217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.568892][ T9217] syzkaller0: entered promiscuous mode
[  129.571109][ T9217] syzkaller0: entered allmulticast mode
[  129.604853][ T9217] tipc: Resetting bearer <eth:syzkaller0>
[  129.618699][ T9216] tipc: Resetting bearer <eth:syzkaller0>
[  129.638266][ T9216] tipc: Disabling bearer <eth:syzkaller0>
[  129.800534][ T9235] syzkaller1: entered promiscuous mode
[  129.802648][ T9235] syzkaller1: entered allmulticast mode
[  130.010665][ T9247] netlink: 'syz.1.1457': attribute type 6 has an invalid length.
[  130.085433][ T9250] netlink: 'syz.2.1459': attribute type 1 has an invalid length.
[  130.181817][ T9260] macvlan1: entered allmulticast mode
[  130.184193][ T9260] veth1_vlan: entered allmulticast mode
[  131.050013][ T9303] netlink: 'syz.0.1479': attribute type 1 has an invalid length.
[  131.085629][ T9305] macsec1: entered promiscuous mode
[  131.087623][ T9305] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  131.089979][ T9305] macsec1: entered allmulticast mode
[  131.091773][ T9305] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  131.245298][ T9274] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  132.353768][ T9348] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1499'.
[  132.434277][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1502'.
[  132.620341][ T9377] tipc: Enabled bearer <udp:syz2>, priority 10
[  132.623086][ T9378] veth1_to_bond: entered allmulticast mode
[  132.628623][ T9378] veth1_to_bond: entered promiscuous mode
[  132.631342][ T9376] veth1_to_bond: left promiscuous mode
[  132.633661][ T9376] veth1_to_bond: left allmulticast mode
[  132.734003][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.765083][ T9394] veth3: entered promiscuous mode
[  132.796738][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1524'.
[  132.801177][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1524'.
[  132.804237][ T9398] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1524'.
[  132.832880][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'.
[  132.839805][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  132.843531][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'.
[  132.848044][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  132.851144][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  132.865004][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  132.920091][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'.
[  132.923291][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'.
[  132.951271][ T9416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1532'.
[  133.617992][  T973] tipc: Node number set to 3199364133
[  134.544563][ T9488] bridge_slave_1: left allmulticast mode
[  134.547193][ T9488] bridge_slave_1: left promiscuous mode
[  134.549718][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.557332][ T9488] bridge_slave_0: left allmulticast mode
[  134.559581][ T9488] bridge_slave_0: left promiscuous mode
[  134.562034][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.806952][ T5855] syz_tun (unregistering): left allmulticast mode
[  136.028241][ T5878] bond0: (slave netdevsim0): Releasing backup interface
[  136.464102][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.469590][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.473433][ T5878] bond0 (unregistering): Released all slaves
[  136.558748][ T5878] bond1 (unregistering): Released all slaves
[  136.623497][ T5878] tipc: Left network mode
[  136.808158][ T5878] hsr_slave_0: left promiscuous mode
[  136.811106][ T5878] hsr_slave_1: left promiscuous mode
[  136.814052][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.817964][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.191926][ T5878] team0 (unregistering): Port device team_slave_1 removed
[  137.228794][ T5878] team0 (unregistering): Port device team_slave_0 removed
[  138.184834][ T5878] bridge_slave_1: left allmulticast mode
[  138.189007][ T5878] bridge_slave_1: left promiscuous mode
[  138.193101][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.201749][ T5878] bridge_slave_0: left allmulticast mode
[  138.204060][ T5878] bridge_slave_0: left promiscuous mode
[  138.206776][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.565636][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.570028][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.574048][ T5878] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  138.578317][ T5878] bond0 (unregistering): Released all slaves
[  138.588135][ T5878] bond1 (unregistering): Released all slaves
[  138.596842][ T5878] bond2 (unregistering): Released all slaves
[  138.606723][ T5878] bond3 (unregistering): Released all slaves
[  138.681447][ T5878] tipc: Left network mode
[  138.873774][ T5878] mac80211_hwsim hwsim5 wlan0 (unregistering): left allmulticast mode
[  138.877201][ T5878] mac80211_hwsim hwsim5 wlan0 (unregistering): left promiscuous mode
[  138.978256][ T5878] hsr_slave_0: left promiscuous mode
[  138.981183][ T5878] hsr_slave_1: left promiscuous mode
[  138.984040][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.988376][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.338323][ T5878] team_slave_1 (unregistering): left promiscuous mode
[  139.342076][ T5878] team0 (unregistering): Port device team_slave_1 removed
[  139.374645][ T5878] team_slave_0 (unregistering): left promiscuous mode
[  139.378620][ T5878] team0 (unregistering): Port device team_slave_0 removed
[  140.008546][ T5878] IPVS: stop unused estimator thread 0...
[  140.016895][ T5878] ------------[ cut here ]------------
[  140.018933][ T5878] WARNING: CPU: 0 PID: 5878 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  140.022209][ T5878] Modules linked in:
[  140.024015][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  140.028769][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.032663][ T5878] Workqueue: netns cleanup_net
[  140.034516][ T5878] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  140.036843][ T5878] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bb 2d 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 e8 e0 f7 e8 c4 b9 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 b6 b9 9c f7 90 0f 0b 90 e9 60 fe ff ff
[  140.044616][ T5878] RSP: 0018:ffffc9000476f898 EFLAGS: 00010293
[  140.047246][ T5878] RAX: ffffffff8a22f48c RBX: ffff8881092d0000 RCX: ffff888108798000
[  140.050067][ T5878] RDX: 0000000000000000 RSI: ffffffff8dba8f4b RDI: ffff888108798000
[  140.053098][ T5878] RBP: ffffc9000476f9b0 R08: ffffffff8fa38f37 R09: 1ffffffff1f471e6
[  140.056092][ T5878] R10: dffffc0000000000 R11: fffffbfff1f471e7 R12: ffffffff8f6322c0
[  140.059229][ T5878] R13: 1ffff920008edf40 R14: ffff8881092d1480 R15: dffffc0000000000
[  140.062678][ T5878] FS:  0000000000000000(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[  140.066533][ T5878] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.069286][ T5878] CR2: 00007f1580b07d60 CR3: 000000000df36000 CR4: 00000000000006f0
[  140.072744][ T5878] Call Trace:
[  140.074239][ T5878]  <TASK>
[  140.075572][ T5878]  xfrm_net_exit+0x2d/0x70
[  140.077697][ T5878]  ops_undo_list+0x49a/0x990
[  140.079691][ T5878]  ? __pfx_ops_undo_list+0x10/0x10
[  140.081922][ T5878]  ? do_raw_spin_unlock+0x4d/0x240
[  140.084147][ T5878]  cleanup_net+0x4c5/0x800
[  140.086162][ T5878]  ? __pfx_cleanup_net+0x10/0x10
[  140.088284][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.090595][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  140.093058][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  140.095483][ T5878]  process_scheduled_works+0xae1/0x17b0
[  140.097979][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  140.100562][ T5878]  worker_thread+0x8a0/0xda0
[  140.102590][ T5878]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.105308][ T5878]  ? __kthread_parkme+0x7b/0x200
[  140.107688][ T5878]  kthread+0x711/0x8a0
[  140.109335][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  140.111454][ T5878]  ? __pfx_kthread+0x10/0x10
[  140.113288][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.115327][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.117468][ T5878]  ? __pfx_kthread+0x10/0x10
[  140.119267][ T5878]  ret_from_fork+0x3fc/0x770
[  140.121086][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  140.123082][ T5878]  ? __switch_to_asm+0x39/0x70
[  140.125152][ T5878]  ? __switch_to_asm+0x33/0x70
[  140.127191][ T5878]  ? __pfx_kthread+0x10/0x10
[  140.129003][ T5878]  ret_from_fork_asm+0x1a/0x30
[  140.130977][ T5878]  </TASK>
[  140.132222][ T5878] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  140.135090][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  140.138498][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.141590][ T5878] Workqueue: netns cleanup_net
[  140.143461][ T5878] Call Trace:
[  140.144552][ T5878]  <TASK>
[  140.145480][ T5878]  dump_stack_lvl+0x99/0x250
[  140.146894][ T5878]  ? __asan_memcpy+0x40/0x70
[  140.148341][ T5878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.150015][ T5878]  ? __pfx__printk+0x10/0x10
[  140.151503][ T5878]  vpanic+0x281/0x750
[  140.153016][ T5878]  ? __pfx__printk+0x10/0x10
[  140.154879][ T5878]  ? __pfx_vpanic+0x10/0x10
[  140.156484][ T5878]  ? is_bpf_text_address+0x292/0x2b0
[  140.158612][ T5878]  panic+0xb9/0xc0
[  140.160100][ T5878]  ? __pfx_panic+0x10/0x10
[  140.162008][ T5878]  __warn+0x31b/0x4b0
[  140.163599][ T5878]  ? xfrm_state_fini+0x26d/0x2f0
[  140.165573][ T5878]  ? xfrm_state_fini+0x26d/0x2f0
[  140.167564][ T5878]  report_bug+0x2be/0x4f0
[  140.169257][ T5878]  ? xfrm_state_fini+0x26d/0x2f0
[  140.171219][ T5878]  ? xfrm_state_fini+0x26d/0x2f0
[  140.173153][ T5878]  ? xfrm_state_fini+0x26f/0x2f0
[  140.174858][ T5878]  handle_bug+0x84/0x160
[  140.176250][ T5878]  exc_invalid_op+0x1a/0x50
[  140.177792][ T5878]  asm_exc_invalid_op+0x1a/0x20
[  140.179431][ T5878] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  140.181731][ T5878] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bb 2d 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 e8 e0 f7 e8 c4 b9 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 b6 b9 9c f7 90 0f 0b 90 e9 60 fe ff ff
[  140.188309][ T5878] RSP: 0018:ffffc9000476f898 EFLAGS: 00010293
[  140.190743][ T5878] RAX: ffffffff8a22f48c RBX: ffff8881092d0000 RCX: ffff888108798000
[  140.193265][ T5878] RDX: 0000000000000000 RSI: ffffffff8dba8f4b RDI: ffff888108798000
[  140.196464][ T5878] RBP: ffffc9000476f9b0 R08: ffffffff8fa38f37 R09: 1ffffffff1f471e6
[  140.199669][ T5878] R10: dffffc0000000000 R11: fffffbfff1f471e7 R12: ffffffff8f6322c0
[  140.202194][ T5878] R13: 1ffff920008edf40 R14: ffff8881092d1480 R15: dffffc0000000000
[  140.205459][ T5878]  ? xfrm_state_fini+0x26c/0x2f0
[  140.207245][ T5878]  ? xfrm_state_fini+0x26c/0x2f0
[  140.208944][ T5878]  xfrm_net_exit+0x2d/0x70
[  140.210679][ T5878]  ops_undo_list+0x49a/0x990
[  140.212312][ T5878]  ? __pfx_ops_undo_list+0x10/0x10
[  140.214310][ T5878]  ? do_raw_spin_unlock+0x4d/0x240
[  140.216980][ T5878]  cleanup_net+0x4c5/0x800
[  140.218869][ T5878]  ? __pfx_cleanup_net+0x10/0x10
[  140.221487][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.223627][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  140.225722][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  140.228232][ T5878]  process_scheduled_works+0xae1/0x17b0
[  140.230523][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  140.233285][ T5878]  worker_thread+0x8a0/0xda0
[  140.235180][ T5878]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.238650][ T5878]  ? __kthread_parkme+0x7b/0x200
[  140.240504][ T5878]  kthread+0x711/0x8a0
[  140.242112][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  140.244090][ T5878]  ? __pfx_kthread+0x10/0x10
[  140.245911][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.247860][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.249866][ T5878]  ? __pfx_kthread+0x10/0x10
[  140.251690][ T5878]  ret_from_fork+0x3fc/0x770
[  140.254193][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  140.256219][ T5878]  ? __switch_to_asm+0x39/0x70
[  140.258100][ T5878]  ? __switch_to_asm+0x33/0x70
[  140.260054][ T5878]  ? __pfx_kthread+0x10/0x10
[  140.261886][ T5878]  ret_from_fork_asm+0x1a/0x30
[  140.263818][ T5878]  </TASK>
[  140.265814][ T5878] Kernel Offset: disabled
[  140.267592][ T5878] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:14:36  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000476f030
R8 =ffff888020c48237 R9 =1ffff11004189046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018e2 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1580b07d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000002a13db0c 0000000000000019 XMM01=000000316e616c77 000055fcf36e1cb8
XMM02=000100ffffffffff 0101000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000ff00000000 00000000000000ff XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=911d36915ad1ff00 RBX=ffffffff819683f8 RCX=911d36915ad1ff00 RDX=0000000000000001
RSI=ffffffff8d9b9a1a RDI=ffffffff8be33880 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38f30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d7000
RIP=ffffffff8b7aa3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e71e8c0e68 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
