last executing test programs:

1.170197918s ago: executing program 0 (id=1993):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000001340)=@x25, 0x80)

1.091852501s ago: executing program 0 (id=1994):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

1.041078586s ago: executing program 0 (id=1996):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ac1e0001000000000000000000000000e000000100000000000000000000000000000d9f"], 0x38}}, 0x40000)

1.040232591s ago: executing program 0 (id=1998):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r2, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050)

985.128454ms ago: executing program 2 (id=1999):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000400000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)

984.564177ms ago: executing program 0 (id=2000):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350604000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf664e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386ba3b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f44fc00b69151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a299fa176018054e9149a1c9d20a809ce3000000000000000000000000f6fad8476470bf4bb79d2ba2c0f7147577466f4229b364d6900ad22583c0ec630ea0c6177ad88014b074d88fea473d5ef91ed786bbd3371f0dfcc5ccf4aa82927192aa94fe70a261f1899e1f2f62d50b027f7e7cac8fe3691aa323e71d5e479d466512d1df57633a9006016322978a795431c745f0502e37b8884c368a3f9d5c05a7fb5bd25d95442d09f79c5bd656dccb450cb19c6df406ffcfc414334021df3e4654f84f10070846d3b06795445f79b1f0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

984.368887ms ago: executing program 2 (id=2001):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x2, 0x0, 0x0)

980.801347ms ago: executing program 0 (id=2002):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="6174bfbc7a0cbd3d07140994d4312f18fdcedd5b9cf06f2c4f43be3b143ef59cd6710ac441134840d3ca3b1500173df225abe67be7cf07ddc23d970dcf8134930711d770d21c5687360910b2e0ba2154917436d4"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r2, 0x0, &(0x7f0000000a80))
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0)
sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r9, 0x0, r8, 0x0, 0x7ffff000, 0x6)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)

911.635438ms ago: executing program 2 (id=2003):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r2=>0x0}, 0x8)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10)

907.296549ms ago: executing program 2 (id=2004):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x7}, 0x8)

211.174748ms ago: executing program 1 (id=2017):
r0 = socket(0x10, 0x80003, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000620100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

156.877951ms ago: executing program 1 (id=2018):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x8, 0x4)

91.805333ms ago: executing program 1 (id=2019):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x2000)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc)

91.425593ms ago: executing program 1 (id=2020):
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c000180"], 0x28}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0)

639.674µs ago: executing program 1 (id=2021):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)="fb", 0x1}], 0x1)
close(0x3)

437.927µs ago: executing program 2 (id=2022):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))

158.687µs ago: executing program 1 (id=2023):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@allocspi={0x100, 0x16, 0x1, 0x70bd28, 0x25dfdbfe, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x4e23, 0xf, 0x4e23, 0x12, 0x2, 0x20, 0x0, 0x5e}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@rand_addr=0x64010102, {0x8, 0x100, 0x1, 0x7, 0x1000, 0x1, 0x0, 0x10000}, {0x2, 0x9, 0x3, 0x195d}, {0x9, 0x6, 0xd57}, 0x70bd25, 0x3501, 0xa, 0x4, 0xda, 0xec}, 0x3, 0x328}, [@proto={0x5, 0x19, 0x6c}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014)

0s ago: executing program 2 (id=2024):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYRES32, @ANYBLOB="01000000000002004c0012800b0001"], 0x6c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58786' (ED25519) to the list of known hosts.
syzkaller login: [   55.722031][ T5809] cgroup: Unknown subsys name 'net'
[   55.797104][ T5809] cgroup: Unknown subsys name 'cpuset'
[   55.803116][ T5809] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.296779][ T5809] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.227122][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.231591][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.235568][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.239611][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.243449][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.307124][ T5212] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.313869][ T5212] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.325541][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.328546][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.332255][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.335076][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.337889][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.341424][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.385674][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.389656][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.672557][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   63.745954][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   63.783355][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   63.819125][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.822450][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.825123][ T5827] bridge_slave_0: entered allmulticast mode
[   63.828942][ T5827] bridge_slave_0: entered promiscuous mode
[   63.862132][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.865780][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.868974][ T5827] bridge_slave_1: entered allmulticast mode
[   63.873370][ T5827] bridge_slave_1: entered promiscuous mode
[   63.945630][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.979021][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.000132][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.003463][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.006923][ T5832] bridge_slave_0: entered allmulticast mode
[   64.011256][ T5832] bridge_slave_0: entered promiscuous mode
[   64.049002][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.052987][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.055871][ T5832] bridge_slave_1: entered allmulticast mode
[   64.059675][ T5832] bridge_slave_1: entered promiscuous mode
[   64.064687][ T5827] team0: Port device team_slave_0 added
[   64.081528][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.084648][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.087588][ T5834] bridge_slave_0: entered allmulticast mode
[   64.091846][ T5834] bridge_slave_0: entered promiscuous mode
[   64.096401][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.099117][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.102238][ T5834] bridge_slave_1: entered allmulticast mode
[   64.105303][ T5834] bridge_slave_1: entered promiscuous mode
[   64.109181][ T5827] team0: Port device team_slave_1 added
[   64.125642][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.159498][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.209430][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.215348][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.218308][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.231600][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.254012][ T5832] team0: Port device team_slave_0 added
[   64.260450][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.264604][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.267160][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.276451][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.286044][ T5832] team0: Port device team_slave_1 added
[   64.330482][ T5834] team0: Port device team_slave_0 added
[   64.333451][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.336597][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.346730][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.352120][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.354987][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.367009][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.390475][ T5834] team0: Port device team_slave_1 added
[   64.404950][ T5827] hsr_slave_0: entered promiscuous mode
[   64.407661][ T5827] hsr_slave_1: entered promiscuous mode
[   64.436148][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.438731][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.449592][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.479961][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.482585][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.492295][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.521044][ T5832] hsr_slave_0: entered promiscuous mode
[   64.523414][ T5832] hsr_slave_1: entered promiscuous mode
[   64.525714][ T5832] debugfs: 'hsr0' already exists in 'hsr'
[   64.527940][ T5832] Cannot create hsr debugfs directory
[   64.637447][ T5834] hsr_slave_0: entered promiscuous mode
[   64.642687][ T5834] hsr_slave_1: entered promiscuous mode
[   64.645694][ T5834] debugfs: 'hsr0' already exists in 'hsr'
[   64.648015][ T5834] Cannot create hsr debugfs directory
[   64.890792][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.900819][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.920615][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.936100][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.981319][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.991847][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.002507][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.024760][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.105208][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.115261][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.122352][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.144011][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.226736][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.243460][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.272942][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   65.282680][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   65.295533][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.298222][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.306207][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.309121][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.317151][ T5837] Bluetooth: hci0: command tx timeout
[   65.318252][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.334644][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.337122][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.344408][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.347017][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.376641][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   65.380533][ T5837] Bluetooth: hci1: command tx timeout
[   65.404330][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.407311][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.430085][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.432931][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.462030][ T5837] Bluetooth: hci2: command tx timeout
[   65.605659][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.656737][ T5832] veth0_vlan: entered promiscuous mode
[   65.664686][ T5832] veth1_vlan: entered promiscuous mode
[   65.677494][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.710618][ T5832] veth0_macvtap: entered promiscuous mode
[   65.715416][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.729038][ T5832] veth1_macvtap: entered promiscuous mode
[   65.735936][ T5827] veth0_vlan: entered promiscuous mode
[   65.752044][ T5827] veth1_vlan: entered promiscuous mode
[   65.764421][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.785472][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.812905][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.818629][ T5834] veth0_vlan: entered promiscuous mode
[   65.822841][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.825972][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.829625][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.849083][ T5834] veth1_vlan: entered promiscuous mode
[   65.894866][ T5827] veth0_macvtap: entered promiscuous mode
[   65.905373][ T5827] veth1_macvtap: entered promiscuous mode
[   65.963895][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.965276][ T5834] veth0_macvtap: entered promiscuous mode
[   65.967229][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.973871][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.007382][ T5834] veth1_macvtap: entered promiscuous mode
[   66.025373][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.054474][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.072511][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.084842][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.088796][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.094273][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.097778][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.109926][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.152736][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.182222][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.202839][ T5891] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.204049][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.206775][ T5891] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.256719][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.270332][ T5891] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.283273][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.392116][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.397119][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.441900][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.445339][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.499285][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.524537][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.772899][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'.
[   66.776651][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   66.850312][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'.
[   66.854231][ T5917] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   67.209271][ T5938] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.358823][ T5940] tipc: Started in network mode
[   67.365580][ T5940] tipc: Node identity , cluster identity 4711
[   67.368295][ T5940] tipc: Failed to obtain node identity
[   67.372752][ T5940] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   67.393862][ T5837] Bluetooth: hci0: command tx timeout
[   67.474527][ T5837] Bluetooth: hci1: command tx timeout
[   67.551850][ T5837] Bluetooth: hci2: command tx timeout
[   67.603090][   T33] audit: type=1804 audit(1754073898.639:2): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.28" name="/newroot/10/cgroup.controllers" dev="tmpfs" ino=69 res=1 errno=0
[   67.616036][   T33] audit: type=1800 audit(1754073898.639:3): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.28" name="cgroup.controllers" dev="tmpfs" ino=69 res=0 errno=0
[   67.799125][ T5960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.821710][ T5964] warning: `syz.2.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.829333][ T5962] tipc: Started in network mode
[   67.834266][ T5962] tipc: Node identity f2373f5d2d2e, cluster identity 4711
[   67.839709][ T5962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.851714][ T5962] syzkaller0: entered promiscuous mode
[   67.854236][ T5962] syzkaller0: entered allmulticast mode
[   67.894989][ T5962] tipc: Resetting bearer <eth:syzkaller0>
[   67.908756][ T5961] tipc: Resetting bearer <eth:syzkaller0>
[   67.923990][ T5961] tipc: Disabling bearer <eth:syzkaller0>
[   68.063510][ T5976] netlink: 830 bytes leftover after parsing attributes in process `syz.2.40'.
[   68.229491][ T5986] IPv6: sit1: Disabled Multicast RS
[   68.337246][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'.
[   68.405556][ T5996] netlink: 32 bytes leftover after parsing attributes in process `syz.2.49'.
[   68.409840][ T5996] netlink: 32 bytes leftover after parsing attributes in process `syz.2.49'.
[   68.523451][ T5960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.826497][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60'.
[   68.867887][ T5960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.894691][ T6026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.62'.
[   68.947934][ T5960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.025240][ T5717] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.040176][ T5717] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.060968][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.080656][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.166675][ T2326] IPVS: starting estimator thread 0...
[   69.197252][ T6051] netlink: 'syz.2.74': attribute type 9 has an invalid length.
[   69.274688][ T6049] IPVS: using max 77 ests per chain, 184800 per kthread
[   69.460915][ T5837] Bluetooth: hci0: command tx timeout
[   69.553166][ T5837] Bluetooth: hci1: command tx timeout
[   69.630471][ T5837] Bluetooth: hci2: command tx timeout
[   69.932627][ T6100] macvlan0: entered allmulticast mode
[   69.946858][ T6100] veth1_vlan: entered allmulticast mode
[   70.711701][ T6144] syz.2.113 uses obsolete (PF_INET,SOCK_PACKET)
[   70.979310][ T6154] netlink: 140 bytes leftover after parsing attributes in process `syz.2.116'.
[   71.305676][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.309160][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.542090][ T5837] Bluetooth: hci0: command tx timeout
[   71.557431][ T6182] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   71.630360][ T5837] Bluetooth: hci1: command tx timeout
[   71.700901][ T5837] Bluetooth: hci2: command tx timeout
[   71.898810][ T6202] Zero length message leads to an empty skb
[   71.910661][ T6202] Bluetooth: MGMT ver 1.23
[   72.247406][ T6231] tipc: Started in network mode
[   72.249876][ T6231] tipc: Node identity 2afaa9dcb271, cluster identity 4711
[   72.253411][ T6231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.259168][ T6230] tipc: Resetting bearer <eth:syzkaller0>
[   73.153833][ T6230] tipc: Disabling bearer <eth:syzkaller0>
[   73.238882][ T6250] __nla_validate_parse: 1 callbacks suppressed
[   73.238905][ T6250] netlink: 300 bytes leftover after parsing attributes in process `syz.2.158'.
[   73.563335][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'.
[   73.630834][ T6276] tipc: Started in network mode
[   73.632779][ T6276] tipc: Node identity ac14140f, cluster identity 4711
[   73.635577][ T6276] tipc: New replicast peer: 255.255.255.83
[   73.638811][ T6276] tipc: Enabled bearer <udp:>, priority 10
[   73.671537][ T6278] syzkaller1: entered promiscuous mode
[   73.673778][ T6278] syzkaller1: entered allmulticast mode
[   74.047291][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'.
[   74.161321][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   74.168085][ T6311] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.183620][ T6311] netlink: 'syz.1.183': attribute type 4 has an invalid length.
[   74.393334][ T6325] netlink: 'syz.0.189': attribute type 10 has an invalid length.
[   74.410343][ T6325] netlink: 40 bytes leftover after parsing attributes in process `syz.0.189'.
[   74.576587][ T6325] team0: Port device geneve0 added
[   74.750917][   T61] tipc: Node number set to 2886997007
[   74.782230][ T6347] netlink: 172 bytes leftover after parsing attributes in process `syz.0.199'.
[   75.106461][ T6371] netlink: 36 bytes leftover after parsing attributes in process `syz.2.208'.
[   75.112578][ T6373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.211'.
[   75.117874][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.121334][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.336283][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'.
[   75.663476][ T6416] netlink: 'syz.0.232': attribute type 2 has an invalid length.
[   75.887387][   T47] cfg80211: failed to load regulatory.db
[   76.320867][ T6463] netlink: 'syz.2.254': attribute type 2 has an invalid length.
[   76.573394][ T6470] delete_channel: no stack
[   77.457896][ T6528] netlink: 32 bytes leftover after parsing attributes in process `syz.1.286'.
[   77.586884][ T6540] mac80211_hwsim hwsim2 ": renamed from wlan0 (while UP)
[   77.940720][ T6548] infiniband syz1: set active
[   77.943005][ T6548] infiniband syz1: added macvlan1
[   77.967009][ T6548] RDS/IB: syz1: added
[   77.968925][ T6548] smc: adding ib device syz1 with port count 1
[   77.971815][ T6548] smc:    ib device syz1 port 1 has pnetid 
[   78.399266][ T6575] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   78.408264][ T6548] syz.2.294 (6548) used greatest stack depth: 18752 bytes left
[   78.427943][ T6577] __nla_validate_parse: 1 callbacks suppressed
[   78.427954][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'.
[   78.437167][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'.
[   78.877696][ T6596] netlink: 'syz.0.314': attribute type 13 has an invalid length.
[   78.881064][ T6596] netlink: 'syz.0.314': attribute type 17 has an invalid length.
[   78.926604][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.929185][ T6596] bridge0: port 2(bridge_slave_1) entered listening state
[   78.932611][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.935675][ T6596] bridge0: port 1(bridge_slave_0) entered listening state
[   78.953788][ T6596] 8021q: adding VLAN 0 to HW filter on device team0
[   78.957936][ T6596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.045367][ T6596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.099859][ T6613] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   79.103131][ T6596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.162277][ T6596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.457578][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881229e7400: rx timeout, send abort
[   79.591230][ T6628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.594468][ T6628] syzkaller0: entered promiscuous mode
[   79.596439][ T6628] syzkaller0: entered allmulticast mode
[   79.608879][ T6628] tipc: Resetting bearer <eth:syzkaller0>
[   79.615733][ T6627] tipc: Resetting bearer <eth:syzkaller0>
[   79.634363][ T6627] tipc: Disabling bearer <eth:syzkaller0>
[   79.796439][ T5892] IPVS: starting estimator thread 0...
[   79.880195][ T6637] IPVS: using max 78 ests per chain, 187200 per kthread
[   79.919166][ T6647] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   79.958176][    C0] vcan0: j1939_tp_rxtimer: 0xffff888125d45800: rx timeout, send abort
[   79.961803][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881229e7400: abort rx timeout. Force session deactivation
[   79.995634][ T6653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.338'.
[   80.315546][ T6678] ieee802154 phy0 wpan0: encryption failed: -22
[   80.461736][    C0] vcan0: j1939_tp_rxtimer: 0xffff888125d45800: abort rx timeout. Force session deactivation
[   80.534590][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.356'.
[   80.621484][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.349'.
[   80.624537][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.349'.
[   80.715518][ T6703] syz.1.360 (6703) used greatest stack depth: 18072 bytes left
[   80.838389][ T6711] netlink: 'syz.1.364': attribute type 1 has an invalid length.
[   80.841358][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'.
[   81.521085][ T6724] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   81.623665][ T6730] netlink: 'syz.2.373': attribute type 303 has an invalid length.
[   82.187497][ T6752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.382'.
[   82.406778][ T6768] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.389'.
[   82.988196][ T6820] netlink: 36 bytes leftover after parsing attributes in process `syz.1.414'.
[   83.584975][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'.
[   86.087599][ T6957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.476'.
[   86.143755][ T6960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.234193][ T6966] netlink: 48 bytes leftover after parsing attributes in process `syz.2.481'.
[   86.278095][ T6970] netlink: 'syz.1.482': attribute type 16 has an invalid length.
[   86.282329][ T6970] netlink: 'syz.1.482': attribute type 3 has an invalid length.
[   86.286090][ T6970] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.482'.
[   86.347919][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'.
[   86.361812][ T6977] bond_slave_0: entered promiscuous mode
[   86.364200][ T6977] bond_slave_1: entered promiscuous mode
[   86.366490][ T6977] macsec1: entered promiscuous mode
[   86.368212][ T6977] bond0: entered promiscuous mode
[   86.370658][ T6977] macsec1: entered allmulticast mode
[   86.372560][ T6977] bond0: entered allmulticast mode
[   86.374748][ T6977] bond_slave_0: entered allmulticast mode
[   86.377401][ T6977] bond_slave_1: entered allmulticast mode
[   86.708125][ T6977] bond0: left allmulticast mode
[   86.710663][ T6977] bond_slave_0: left allmulticast mode
[   86.713574][ T6977] bond_slave_1: left allmulticast mode
[   86.716376][ T6977] bond0: left promiscuous mode
[   86.720935][ T6977] bond_slave_0: left promiscuous mode
[   86.723745][ T6977] bond_slave_1: left promiscuous mode
[   87.158113][ T7002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.494'.
[   87.245251][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.498832][ T7022] openvswitch: netlink: IP tunnel dst address not specified
[   87.582259][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'.
[   87.776746][ T7037] netlink: 44 bytes leftover after parsing attributes in process `syz.0.509'.
[   87.992947][ T7054] raw_sendmsg: syz.1.514 forgot to set AF_INET. Fix it!
[   88.051762][ T7051] nbd0: detected capacity change from 0 to 127
[   88.059200][   T57] block nbd0: Receive control failed (result -104)
[   88.127602][ T7062] netlink: 'syz.0.517': attribute type 10 has an invalid length.
[   88.141260][ T7062] team0: Port device dummy0 added
[   88.707793][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.526'.
[   88.723899][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.526'.
[   89.152433][ T7118] netlink: 300 bytes leftover after parsing attributes in process `syz.1.541'.
[   89.548094][ T7148] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   89.549152][ T7150] netlink: 440 bytes leftover after parsing attributes in process `syz.1.558'.
[   89.558387][ T7148] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   89.735266][ T7162] netlink: 176 bytes leftover after parsing attributes in process `syz.1.564'.
[   89.918304][ T7164] netlink: 'syz.0.565': attribute type 4 has an invalid length.
[   90.446366][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.576'.
[   90.450476][ T7192] netlink: 'syz.1.576': attribute type 1 has an invalid length.
[   90.453750][ T7192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.576'.
[   90.949331][ T7210] netlink: 256 bytes leftover after parsing attributes in process `syz.0.585'.
[   91.049622][ T7216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.588'.
[   91.086407][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.588'.
[   91.120492][ T7216] IPVS: length: 220 != 24
[   91.137192][ T7213] bond0: option mode: unable to set because the bond device has slaves
[   91.267470][ T7227] netlink: 'syz.1.593': attribute type 1 has an invalid length.
[   91.312953][ T7227] netlink: 'syz.1.593': attribute type 1 has an invalid length.
[   91.391066][ T7236] ieee802154 phy0 wpan0: encryption failed: -22
[   91.718769][ T7259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.314147][ T7301] netlink: 'syz.2.624': attribute type 39 has an invalid length.
[   93.213900][ T7320] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   93.492530][ T7335] pimreg: entered allmulticast mode
[   94.342852][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[   94.347118][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[   94.435889][ T7362] __nla_validate_parse: 7 callbacks suppressed
[   94.435918][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'.
[   94.587489][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'.
[   94.593601][ T7383] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   94.885660][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'.
[   95.117343][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.121243][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.289072][ T7427] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.299561][ T7427] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.355900][ T7427] veth1_vlan: left allmulticast mode
[   95.358415][ T7427] macvlan0: left allmulticast mode
[   95.515849][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.516888][ T5890] syz1: Port: 1 Link DOWN
[   95.525602][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.532579][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.554036][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.559272][ T7448] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   95.776155][ T7463] veth0_to_bond: entered allmulticast mode
[   95.802988][ T7465] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   95.807692][ T7465] macvtap1: entered allmulticast mode
[   95.810780][ T7465] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   95.818084][ T7465] batman_adv: batadv0: Adding interface: macvtap1
[   95.820618][ T7465] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.832287][ T7465] batman_adv: batadv0: Interface activated: macvtap1
[   95.898193][ T7471] nbd: must specify at least one socket
[   95.923848][ T7473] netlink: 'syz.2.699': attribute type 1 has an invalid length.
[   95.938524][ T7473] netlink: 228 bytes leftover after parsing attributes in process `syz.2.699'.
[   95.946824][ T7473] NCSI netlink: No device for ifindex 0
[   95.991365][ T7475] : renamed from pim6reg1
[   96.084753][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'.
[   96.205090][ T7490] netlink: 'syz.2.707': attribute type 1 has an invalid length.
[   96.208450][ T7490] netlink: 236 bytes leftover after parsing attributes in process `syz.2.707'.
[   96.286300][ T7496] netlink: 3 bytes leftover after parsing attributes in process `syz.2.710'.
[   96.751546][ T7516] netlink: 'syz.0.719': attribute type 3 has an invalid length.
[   96.755298][ T7516] netlink: 'syz.0.719': attribute type 1 has an invalid length.
[   96.758903][ T7516] netlink: 220 bytes leftover after parsing attributes in process `syz.0.719'.
[   97.019842][ T7528] syz_tun: entered allmulticast mode
[   97.032499][ T7528] dvmrp8: entered allmulticast mode
[   97.047997][ T7528] dvmrp1: entered allmulticast mode
[   97.063104][ T7527] syz_tun: left allmulticast mode
[   97.065674][ T7527] dvmrp1: left allmulticast mode
[   97.537591][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'.
[   97.594769][ T7558] netlink: 68 bytes leftover after parsing attributes in process `syz.0.739'.
[   97.899899][   T33] audit: type=1800 audit(1754073928.929:4): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.737" name="cgroup.controllers" dev="tmpfs" ino=1358 res=0 errno=0
[   98.234898][ T7575] batadv_slave_1: entered promiscuous mode
[   98.238384][ T7574] batadv_slave_1: left promiscuous mode
[   98.304564][   T61] IPVS: starting estimator thread 0...
[   98.400425][ T7580] IPVS: using max 55 ests per chain, 132000 per kthread
[   98.456644][ T7590] vlan2: entered allmulticast mode
[   98.458716][ T7590] syz_tun: entered allmulticast mode
[   99.414973][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.419085][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.580869][ T7600] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.597863][ T7600] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.799122][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.806864][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.811523][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.851852][ T7638] syzkaller1: entered promiscuous mode
[   99.854274][ T7638] syzkaller1: entered allmulticast mode
[   99.949077][ T7642] __nla_validate_parse: 2 callbacks suppressed
[   99.949097][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'.
[  100.015902][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.773'.
[  100.022063][ T7647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.773'.
[  101.194356][ T7718] netlink: 'syz.1.796': attribute type 1 has an invalid length.
[  101.227834][ T7718] 8021q: adding VLAN 0 to HW filter on device bond4
[  101.343505][ T7718] bond4: (slave geneve2): making interface the new active one
[  101.348420][ T7718] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  101.359571][ T7727] bond4: entered promiscuous mode
[  101.362512][ T7727] geneve2: entered promiscuous mode
[  101.631691][ T7736] netlink: 92 bytes leftover after parsing attributes in process `syz.2.799'.
[  102.281173][ T7814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.392396][ T7829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.822'.
[  105.588753][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.878'.
[  106.003814][ T7996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.059669][ T7996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.087445][ T8004] netlink: 'syz.2.895': attribute type 1 has an invalid length.
[  106.128485][ T8004] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.146814][ T8010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.175583][ T8004] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.179920][ T8004] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  106.186411][ T8004] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  106.245634][ T8015] veth3: entered promiscuous mode
[  106.255492][ T8015] bond1: (slave veth3): Enslaving as an active interface with a down link
[  106.281051][ T8004] erspan0: entered allmulticast mode
[  106.286450][ T8004] bond1: (slave erspan0): making interface the new active one
[  106.291314][ T8004] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  106.444695][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'.
[  106.544091][ T8036] netlink: 'syz.2.905': attribute type 30 has an invalid length.
[  106.587174][ T8039] netlink: 32 bytes leftover after parsing attributes in process `syz.1.907'.
[  106.594058][ T8039] netlink: 32 bytes leftover after parsing attributes in process `syz.1.907'.
[  106.639353][ T8043] netlink: 'syz.1.909': attribute type 15 has an invalid length.
[  106.791139][ T8054] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.914'.
[  107.639941][ T8092] netlink: 60 bytes leftover after parsing attributes in process `syz.1.931'.
[  108.443326][ T8148] netlink: 'syz.0.947': attribute type 1 has an invalid length.
[  108.463897][ T8148] 8021q: adding VLAN 0 to HW filter on device bond1
[  108.485609][ T8148] bond1: (slave veth3): Enslaving as an active interface with a down link
[  108.501738][ T8148] vlan2: entered allmulticast mode
[  108.504303][ T8148] veth1: entered allmulticast mode
[  108.507122][ T8148] bond1: (slave vlan2): Opening slave failed
[  108.558531][ T8147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.385798][   T33] audit: type=1800 audit(1754073940.419:5): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.958" name="memory.events" dev="tmpfs" ino=1826 res=0 errno=0
[  109.400196][   T33] audit: type=1804 audit(1754073940.419:6): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.958" name="memory.events" dev="tmpfs" ino=1826 res=1 errno=0
[  109.606928][ T8233] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  110.462939][ T8289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.993'.
[  110.495720][ T8297] netlink: 'syz.1.995': attribute type 1 has an invalid length.
[  110.513897][ T8297] netlink: 180 bytes leftover after parsing attributes in process `syz.1.995'.
[  110.763817][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'.
[  111.858985][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'.
[  111.868429][ T8387] batadv0: entered promiscuous mode
[  111.874845][ T8387] batadv0: left promiscuous mode
[  111.944756][ T8394] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1043'.
[  111.949196][ T8394] unsupported nla_type 65024
[  112.061839][ T8404] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  112.141422][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'.
[  112.144649][ T8418] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1054'.
[  112.146984][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1055'.
[  112.308304][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'.
[  112.313077][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'.
[  113.249790][ T8456] Driver unsupported XDP return value 0 on prog  (id 176) dev N/A, expect packet loss!
[  113.312675][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'.
[  113.368501][ T8464] pimreg3: entered allmulticast mode
[  113.374967][ T8466] netlink: 'syz.2.1074': attribute type 1 has an invalid length.
[  113.783943][ T8500] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  113.788897][ T8497] IPVS: stopping backup sync thread 8500 ...
[  114.055058][ T8522] syzkaller1: entered promiscuous mode
[  114.057914][ T8522] syzkaller1: entered allmulticast mode
[  114.526962][ T8558] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  114.532417][ T8558] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  115.246176][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'.
[  115.579643][ T8621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.583228][ T8621] syzkaller0: entered promiscuous mode
[  115.585596][ T8621] syzkaller0: entered allmulticast mode
[  115.602170][ T8621] tipc: Resetting bearer <eth:syzkaller0>
[  115.607634][ T8620] tipc: Resetting bearer <eth:syzkaller0>
[  115.621014][ T8620] tipc: Disabling bearer <eth:syzkaller0>
[  116.006742][ T8673] netlink: 'syz.1.1166': attribute type 1 has an invalid length.
[  116.011111][ T8673] netlink: 'syz.1.1166': attribute type 2 has an invalid length.
[  116.013974][ T8673] netlink: 'syz.1.1166': attribute type 8 has an invalid length.
[  116.017119][ T8673] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.1166'.
[  116.393442][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'.
[  116.442866][ T8718] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  116.713566][ T8738] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  116.888912][ T8750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.017990][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1201'.
[  117.839162][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'.
[  117.843764][ T8837] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  117.846572][ T8837] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.945791][ T8839] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  118.252604][ T5837] Bluetooth: hci2: link tx timeout
[  118.255107][ T5837] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  118.258659][ T5837] Bluetooth: hci2: link tx timeout
[  118.264333][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.305194][ T8870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1242'.
[  118.376470][ T8870] team0: Port device team_slave_0 removed
[  118.414712][ T8879] netlink: 'syz.0.1245': attribute type 1 has an invalid length.
[  118.417962][ T8879] netlink: 'syz.0.1245': attribute type 1 has an invalid length.
[  118.522957][ T8884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1247'.
[  118.662233][   T62] block nbd0: Possible stuck request ffff888020e90000: control (read@0,1024B). Runtime 30 seconds
[  118.667174][   T62] block nbd0: Possible stuck request ffff888020e90200: control (read@1024,1024B). Runtime 30 seconds
[  118.672564][   T62] block nbd0: Possible stuck request ffff888020e90400: control (read@2048,1024B). Runtime 30 seconds
[  118.677146][   T62] block nbd0: Possible stuck request ffff888020e90600: control (read@3072,1024B). Runtime 30 seconds
[  119.276609][ T8930] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1268'.
[  119.303200][ T8932] trusted_key: syz.0.1269 sent an empty control message without MSG_MORE.
[  119.331688][ T8934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1270'.
[  119.839521][ T8966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1285'.
[  119.843855][ T8966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1285'.
[  120.151440][ T8981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.155925][ T8981] syzkaller0: entered promiscuous mode
[  120.158343][ T8981] syzkaller0: entered allmulticast mode
[  120.182643][ T8981] tipc: Resetting bearer <eth:syzkaller0>
[  120.188629][ T8980] tipc: Resetting bearer <eth:syzkaller0>
[  120.206071][ T8980] tipc: Disabling bearer <eth:syzkaller0>
[  120.343301][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  120.466439][ T8986] netlink: 'syz.1.1294': attribute type 10 has an invalid length.
[  120.486732][ T8986] team0: Port device dummy0 added
[  120.817395][ T9002] netlink: 'syz.1.1303': attribute type 11 has an invalid length.
[  121.199432][ T9037] netlink: 'syz.1.1318': attribute type 1 has an invalid length.
[  121.202920][ T9037] __nla_validate_parse: 5 callbacks suppressed
[  121.202941][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'.
[  121.415521][ T9050] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1323'.
[  121.872304][ T9077] netlink: 'syz.2.1333': attribute type 1 has an invalid length.
[  121.884758][ T9077] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1333'.
[  121.888694][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'.
[  122.200235][ T9097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1342'.
[  122.223471][ T9088] netlink: 'syz.0.1338': attribute type 1 has an invalid length.
[  122.227044][ T9088] netlink: 'syz.0.1338': attribute type 4 has an invalid length.
[  122.230829][ T9088] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1338'.
[  122.239587][ T9088] netlink: 'syz.0.1338': attribute type 1 has an invalid length.
[  122.244962][ T9088] netlink: 'syz.0.1338': attribute type 4 has an invalid length.
[  122.249152][ T9088] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1338'.
[  122.341339][ T9107] openvswitch: netlink: Actions may not be safe on all matching packets
[  122.420311][ T5212] Bluetooth: hci2: command 0x0406 tx timeout
[  122.476318][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'.
[  122.481119][ T9120] IPv6: NLM_F_REPLACE set, but no existing node found!
[  122.817482][ T9139] syz_tun: entered allmulticast mode
[  122.822316][ T9139] dvmrp8: left allmulticast mode
[  122.886054][ T9144] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  122.897837][ T9144] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  122.989584][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.999372][ T9139] 8021q: adding VLAN 0 to HW filter on device team0
[  123.012801][ T9139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.068823][ T9138] syz_tun: left allmulticast mode
[  124.057012][ T9222] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1397'.
[  124.173073][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'.
[  124.521805][ T9253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.525806][ T9253] syzkaller0: entered promiscuous mode
[  124.527881][ T9253] syzkaller0: entered allmulticast mode
[  124.552519][ T9253] tipc: Resetting bearer <eth:syzkaller0>
[  124.558483][ T9252] tipc: Resetting bearer <eth:syzkaller0>
[  124.573777][ T9252] tipc: Disabling bearer <eth:syzkaller0>
[  124.713138][ T9261] validate_nla: 3 callbacks suppressed
[  124.713159][ T9261] netlink: 'syz.1.1416': attribute type 30 has an invalid length.
[  124.726619][ T9261] netlink: 'syz.1.1416': attribute type 30 has an invalid length.
[  124.728620][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.739609][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.750384][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.753923][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.113915][ T9290] netlink: 'syz.1.1426': attribute type 10 has an invalid length.
[  125.136946][ T9292] netlink: 'syz.2.1429': attribute type 1 has an invalid length.
[  125.639399][ T9339] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  125.683366][ T9343] netlink: 'syz.0.1454': attribute type 5 has an invalid length.
[  125.723049][ T9345] netlink: 'syz.1.1455': attribute type 46 has an invalid length.
[  125.777419][ T9355] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  126.246134][ T9408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.287861][ T9410] netlink: 'syz.2.1487': attribute type 4 has an invalid length.
[  126.375751][ T9420] netlink: 'syz.0.1492': attribute type 12 has an invalid length.
[  126.399955][ T9423] syz.2.1493 uses old SIOCAX25GETINFO
[  126.817075][ T9450] netlink: 'syz.1.1504': attribute type 10 has an invalid length.
[  126.832988][ T9444] netlink: del zone limit has 4 unknown bytes
[  126.967278][ T1089] smc: removing ib device syz1
[  127.739575][ T9488] netlink: 'syz.0.1522': attribute type 12 has an invalid length.
[  127.745524][ T9488] __nla_validate_parse: 12 callbacks suppressed
[  127.745543][ T9488] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1522'.
[  127.852609][ T9493] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1525'.
[  128.043597][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'.
[  128.047567][ T9508] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  128.642182][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'.
[  128.685500][ T9546] hsr_slave_1 (unregistering): left promiscuous mode
[  128.800635][ T9561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1553'.
[  128.964540][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1557'.
[  128.976864][ T9571] pim6reg: entered allmulticast mode
[  128.986082][ T9571] pim6reg: left allmulticast mode
[  129.127308][ T9601] netlink: 'syz.0.1572': attribute type 11 has an invalid length.
[  129.130915][ T9601] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1572'.
[  129.163427][ T9604] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1573'.
[  129.171571][ T9604] : renamed from bond0 (while UP)
[  129.404560][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'.
[  129.409297][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1581'.
[  130.075712][ T9662] validate_nla: 5 callbacks suppressed
[  130.075736][ T9662] netlink: 'syz.1.1599': attribute type 1 has an invalid length.
[  130.861057][ T9716] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  131.793076][ T9756] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.796919][ T9756] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.935289][ T9756] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.953317][ T9756] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.015356][ T9756] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  132.153700][ T9756] batman_adv: batadv0: Interface deactivated: macvtap1
[  132.159316][ T9756] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  132.165204][ T9756] macvtap1: left allmulticast mode
[  132.171955][ T9756] bond4: left promiscuous mode
[  132.174241][ T9756] geneve2: left promiscuous mode
[  132.228420][ T5717] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.233539][ T5717] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.237274][ T5717] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.243771][ T5717] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.256530][ T5717] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.263952][ T5717] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.268300][ T5717] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.274490][ T5717] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.627333][ T9807] netlink: 'syz.0.1663': attribute type 12 has an invalid length.
[  132.743123][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.755408][ T9815] __nla_validate_parse: 13 callbacks suppressed
[  132.755425][ T9815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1667'.
[  132.764930][ T9815] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1667'.
[  132.904887][ T9825] netlink: 'syz.2.1672': attribute type 1 has an invalid length.
[  132.908329][ T9825] netlink: 'syz.2.1672': attribute type 4 has an invalid length.
[  132.915103][ T9825] netlink: 15538 bytes leftover after parsing attributes in process `syz.2.1672'.
[  132.916817][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'.
[  133.055449][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1677'.
[  133.230383][ T9849] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1684'.
[  133.234541][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1684'.
[  133.409073][ T9858] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1688'.
[  133.485547][ T9860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1689'.
[  133.726181][ T9866] netlink: 'syz.1.1693': attribute type 5 has an invalid length.
[  133.783308][ T9868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1692'.
[  134.149026][ T9891] batadv_slave_0: entered promiscuous mode
[  134.152899][ T9891] batadv_slave_0: entered allmulticast mode
[  134.716236][ T9951] netlink: 'syz.1.1731': attribute type 2 has an invalid length.
[  134.748298][ T9955] netlink: 'syz.2.1732': attribute type 1 has an invalid length.
[  134.770946][ T9955] 8021q: adding VLAN 0 to HW filter on device bond2
[  134.796585][ T9955] bond2: (slave gretap1): making interface the new active one
[  134.803345][ T9955] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  134.913358][ T9961] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.916300][ T9961] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  135.134009][ T9977] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  136.097112][T10020] sctp: [Deprecated]: syz.2.1753 (pid 10020) Use of int in maxseg socket option.
[  136.097112][T10020] Use struct sctp_assoc_value instead
[  136.854289][T10054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.870342][T10054] syzkaller0: entered promiscuous mode
[  136.872249][T10054] syzkaller0: entered allmulticast mode
[  136.894901][T10054] tipc: Resetting bearer <eth:syzkaller0>
[  136.898844][T10053] tipc: Resetting bearer <eth:syzkaller0>
[  136.911483][T10053] tipc: Disabling bearer <eth:syzkaller0>
[  137.321791][T10075] netlink: 'syz.1.1778': attribute type 32 has an invalid length.
[  137.839604][T10102] netlink: 'syz.0.1786': attribute type 10 has an invalid length.
[  137.847851][T10102] __nla_validate_parse: 10 callbacks suppressed
[  137.847864][T10102] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1786'.
[  137.936919][T10108] netlink: 'syz.0.1789': attribute type 2 has an invalid length.
[  137.948111][T10108] : entered promiscuous mode
[  138.161870][T10112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  138.245945][T10121] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1793'.
[  138.374541][T10135] netlink: 'syz.0.1799': attribute type 3 has an invalid length.
[  138.547830][T10150] netlink: 'syz.2.1806': attribute type 13 has an invalid length.
[  138.892760][T10194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1828'.
[  138.984550][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1834'.
[  139.442450][T10274] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  139.745181][   T33] audit: type=1800 audit(1754073970.779:7): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1882" name=33FFFF dev="tmpfs" ino=2791 res=0 errno=0
[  139.756237][T10307] netlink: 'syz.1.1883': attribute type 13 has an invalid length.
[  139.759199][T10307] netlink: 'syz.1.1883': attribute type 17 has an invalid length.
[  139.822432][T10307] 8021q: adding VLAN 0 to HW filter on device team0
[  139.834899][T10307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.906398][T10307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1883'.
[  139.912326][T10307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.979542][T10320] netlink: 'syz.2.1888': attribute type 3 has an invalid length.
[  139.984421][T10320] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1888'.
[  139.994687][T10307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.055428][T10307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.068817][T10324] netlink: 'syz.0.1884': attribute type 16 has an invalid length.
[  140.073929][T10324] netlink: 'syz.0.1884': attribute type 17 has an invalid length.
[  140.112176][T10324] 8021q: adding VLAN 0 to HW filter on device 
[  140.118152][T10324] 8021q: adding VLAN 0 to HW filter on device team0
[  140.128765][T10324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.354936][T10338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.358348][T10338] syzkaller0: entered promiscuous mode
[  140.360574][T10338] syzkaller0: entered allmulticast mode
[  140.381693][T10338] tipc: Resetting bearer <eth:syzkaller0>
[  140.386582][T10337] tipc: Resetting bearer <eth:syzkaller0>
[  140.397547][T10337] tipc: Disabling bearer <eth:syzkaller0>
[  141.396926][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'.
[  142.209119][T10468] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1957'.
[  142.707688][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1977'.
[  142.897061][T10532] policy can only be matched on NF_INET_PRE_ROUTING
[  142.897074][T10532] unable to load match
[  142.984213][T10538] validate_nla: 3 callbacks suppressed
[  142.984224][T10538] netlink: 'syz.0.1992': attribute type 3 has an invalid length.
[  143.270908][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2002'.
[  143.308703][T10563] bridge_slave_1: left allmulticast mode
[  143.310838][T10563] bridge_slave_1: left promiscuous mode
[  143.312905][T10563] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.317834][T10563] bridge_slave_0: left allmulticast mode
[  143.319873][T10563] bridge_slave_0: left promiscuous mode
[  143.322780][T10563] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.105062][T10600] netlink: 'syz.1.2020': attribute type 1 has an invalid length.
[  144.108956][T10600] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2020'.
[  144.192106][T10608] netlink: 'syz.2.2024': attribute type 1 has an invalid length.
[  144.195113][T10607] ==================================================================
[  144.198309][T10607] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  144.200831][T10607] Read of size 4 at addr ffff888026eb0e44 by task syz.1.2023/10607
[  144.203606][T10608] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.2024'.
[  144.204252][T10607] 
[  144.204262][T10607] CPU: 0 UID: 0 PID: 10607 Comm: syz.1.2023 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  144.204273][T10607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.204278][T10607] Call Trace:
[  144.204282][T10607]  <TASK>
[  144.204287][T10607]  dump_stack_lvl+0x189/0x250
[  144.204299][T10607]  ? __kasan_check_byte+0x12/0x40
[  144.204312][T10607]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.204321][T10607]  ? lock_release+0x4b/0x3e0
[  144.204333][T10607]  ? __virt_addr_valid+0x4a5/0x5c0
[  144.204343][T10607]  print_report+0xca/0x240
[  144.204354][T10607]  ? xfrm_alloc_spi+0x570/0xf30
[  144.204363][T10607]  kasan_report+0x118/0x150
[  144.204375][T10607]  ? xfrm_alloc_spi+0x570/0xf30
[  144.204384][T10607]  xfrm_alloc_spi+0x570/0xf30
[  144.204392][T10607]  ? xfrm_alloc_spi+0x2a0/0xf30
[  144.204401][T10607]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  144.204409][T10607]  ? xfrm_find_acq+0x87/0xa0
[  144.204418][T10607]  xfrm_alloc_userspi+0x70b/0xc90
[  144.204427][T10607]  ? __pfx_aa_get_newest_label+0x10/0x10
[  144.204440][T10607]  ? apparmor_capable+0x137/0x1b0
[  144.204447][T10607]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  144.204455][T10607]  ? __nla_parse+0x40/0x60
[  144.204464][T10607]  xfrm_user_rcv_msg+0x7a3/0xab0
[  144.204473][T10607]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  144.204487][T10607]  ? __pfx___mutex_trylock_common+0x10/0x10
[  144.204495][T10607]  ? rcu_is_watching+0x15/0xb0
[  144.204506][T10607]  ? trace_contention_end+0x39/0x120
[  144.204513][T10607]  ? __mutex_lock+0x335/0x1340
[  144.204525][T10607]  netlink_rcv_skb+0x208/0x470
[  144.204537][T10607]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  144.204547][T10607]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  144.204560][T10607]  ? netlink_deliver_tap+0x2e/0x1b0
[  144.204600][T10607]  ? netlink_deliver_tap+0x2e/0x1b0
[  144.204611][T10607]  xfrm_netlink_rcv+0x79/0x90
[  144.204620][T10607]  netlink_unicast+0x82f/0x9e0
[  144.204632][T10607]  ? __pfx_netlink_unicast+0x10/0x10
[  144.204642][T10607]  ? netlink_sendmsg+0x642/0xb30
[  144.204654][T10607]  ? skb_put+0x11b/0x210
[  144.204661][T10607]  netlink_sendmsg+0x805/0xb30
[  144.204673][T10607]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.204685][T10607]  ? aa_sock_msg_perm+0x94/0x160
[  144.204694][T10607]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  144.204704][T10607]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.204716][T10607]  __sock_sendmsg+0x21c/0x270
[  144.204727][T10607]  ____sys_sendmsg+0x505/0x830
[  144.204736][T10607]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.204744][T10607]  ? import_iovec+0x74/0xa0
[  144.204754][T10607]  ___sys_sendmsg+0x21f/0x2a0
[  144.204762][T10607]  ? __pfx____sys_sendmsg+0x10/0x10
[  144.204774][T10607]  ? __fget_files+0x2a/0x420
[  144.204781][T10607]  ? __fget_files+0x3a0/0x420
[  144.204792][T10607]  __x64_sys_sendmsg+0x19b/0x260
[  144.204803][T10607]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  144.204815][T10607]  ? rcu_is_watching+0x15/0xb0
[  144.204831][T10607]  ? do_syscall_64+0xbe/0x3b0
[  144.204846][T10607]  do_syscall_64+0xfa/0x3b0
[  144.204861][T10607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.204872][T10607]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  144.204887][T10607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.204900][T10607] RIP: 0033:0x7fd9bb38eb69
[  144.204911][T10607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.204921][T10607] RSP: 002b:00007fd9bc284038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.204933][T10607] RAX: ffffffffffffffda RBX: 00007fd9bb5b5fa0 RCX: 00007fd9bb38eb69
[  144.204942][T10607] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000003
[  144.204951][T10607] RBP: 00007fd9bb411df1 R08: 0000000000000000 R09: 0000000000000000
[  144.204958][T10607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.204965][T10607] R13: 0000000000000000 R14: 00007fd9bb5b5fa0 R15: 00007ffd0134e438
[  144.204977][T10607]  </TASK>
[  144.204983][T10607] 
[  144.343578][T10607] Allocated by task 8419:
[  144.345083][T10607]  kasan_save_track+0x3e/0x80
[  144.346688][T10607]  __kasan_slab_alloc+0x6c/0x80
[  144.348330][T10607]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  144.350258][T10607]  xfrm_state_alloc+0x24/0x2f0
[  144.351888][T10607]  __find_acq_core+0x8a7/0x1c00
[  144.353535][T10607]  xfrm_find_acq+0x78/0xa0
[  144.355079][T10607]  xfrm_alloc_userspi+0x6b3/0xc90
[  144.357325][T10607]  xfrm_user_rcv_msg+0x7a3/0xab0
[  144.359040][T10607]  netlink_rcv_skb+0x208/0x470
[  144.360752][T10607]  xfrm_netlink_rcv+0x79/0x90
[  144.362464][T10607]  netlink_unicast+0x82f/0x9e0
[  144.364325][T10607]  netlink_sendmsg+0x805/0xb30
[  144.365997][T10607]  __sock_sendmsg+0x21c/0x270
[  144.367553][T10607]  ____sys_sendmsg+0x505/0x830
[  144.369119][T10607]  ___sys_sendmsg+0x21f/0x2a0
[  144.370650][T10607]  __x64_sys_sendmsg+0x19b/0x260
[  144.372290][T10607]  do_syscall_64+0xfa/0x3b0
[  144.373860][T10607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.376045][T10607] 
[  144.377038][T10607] Freed by task 5892:
[  144.378333][T10607]  kasan_save_track+0x3e/0x80
[  144.379938][T10607]  kasan_save_free_info+0x46/0x50
[  144.381783][T10607]  __kasan_slab_free+0x62/0x70
[  144.383478][T10607]  kmem_cache_free+0x18f/0x400
[  144.385158][T10607]  xfrm_state_gc_task+0x518/0x6a0
[  144.386801][T10607]  process_scheduled_works+0xae1/0x17b0
[  144.388588][T10607]  worker_thread+0x8a0/0xda0
[  144.390078][T10607]  kthread+0x711/0x8a0
[  144.391507][T10607]  ret_from_fork+0x3fc/0x770
[  144.393172][T10607]  ret_from_fork_asm+0x1a/0x30
[  144.394926][T10607] 
[  144.395999][T10607] The buggy address belongs to the object at ffff888026eb0d80
[  144.395999][T10607]  which belongs to the cache xfrm_state of size 928
[  144.400734][T10607] The buggy address is located 196 bytes inside of
[  144.400734][T10607]  freed 928-byte region [ffff888026eb0d80, ffff888026eb1120)
[  144.405316][T10607] 
[  144.406187][T10607] The buggy address belongs to the physical page:
[  144.408436][T10607] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026eb1f80 pfn:0x26eb0
[  144.411985][T10607] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  144.414887][T10607] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  144.417937][T10607] page_type: f5(slab)
[  144.419296][T10607] raw: 00fff00000000040 ffff88801ab89280 dead000000000122 0000000000000000
[  144.422289][T10607] raw: ffff888026eb1f80 00000000800e000c 00000000f5000000 0000000000000000
[  144.425522][T10607] head: 00fff00000000040 ffff88801ab89280 dead000000000122 0000000000000000
[  144.428748][T10607] head: ffff888026eb1f80 00000000800e000c 00000000f5000000 0000000000000000
[  144.431730][T10607] head: 00fff00000000002 ffffea00009bac01 00000000ffffffff 00000000ffffffff
[  144.434632][T10607] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  144.438029][T10607] page dumped because: kasan: bad access detected
[  144.440191][T10607] page_owner tracks the page as allocated
[  144.442096][T10607] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6417, tgid 6414 (syz.1.233), ts 75671402231, free_ts 72860628401
[  144.448701][T10607]  post_alloc_hook+0x240/0x2a0
[  144.450343][T10607]  get_page_from_freelist+0x21e4/0x22c0
[  144.452178][T10607]  __alloc_frozen_pages_noprof+0x181/0x370
[  144.454113][T10607]  alloc_pages_mpol+0x232/0x4a0
[  144.455956][T10607]  allocate_slab+0x8a/0x3b0
[  144.457668][T10607]  ___slab_alloc+0xbfc/0x1480
[  144.459376][T10607]  kmem_cache_alloc_noprof+0x283/0x3c0
[  144.461301][T10607]  xfrm_state_alloc+0x24/0x2f0
[  144.463018][T10607]  xfrm_add_sa+0x17d1/0x4070
[  144.464711][T10607]  xfrm_user_rcv_msg+0x7a3/0xab0
[  144.466436][T10607]  netlink_rcv_skb+0x208/0x470
[  144.468023][T10607]  xfrm_netlink_rcv+0x79/0x90
[  144.469670][T10607]  netlink_unicast+0x82f/0x9e0
[  144.471350][T10607]  netlink_sendmsg+0x805/0xb30
[  144.472953][T10607]  __sock_sendmsg+0x21c/0x270
[  144.474595][T10607]  ____sys_sendmsg+0x505/0x830
[  144.476723][T10607] page last free pid 5892 tgid 5892 stack trace:
[  144.478886][T10607]  __free_frozen_pages+0xc71/0xe70
[  144.480611][T10607]  __put_partials+0x161/0x1c0
[  144.482184][T10607]  put_cpu_partial+0x17c/0x250
[  144.483944][T10607]  __slab_free+0x2f7/0x400
[  144.485664][T10607]  qlist_free_all+0x97/0x140
[  144.487767][T10607]  kasan_quarantine_reduce+0x148/0x160
[  144.490131][T10607]  __kasan_slab_alloc+0x22/0x80
[  144.491776][T10607]  __kmalloc_cache_noprof+0x1be/0x3d0
[  144.493511][T10607]  nsim_fib_event_work+0x1174/0x3180
[  144.495351][T10607]  process_scheduled_works+0xae1/0x17b0
[  144.497456][T10607]  worker_thread+0x8a0/0xda0
[  144.499042][T10607]  kthread+0x711/0x8a0
[  144.500429][T10607]  ret_from_fork+0x3fc/0x770
[  144.502011][T10607]  ret_from_fork_asm+0x1a/0x30
[  144.503713][T10607] 
[  144.504604][T10607] Memory state around the buggy address:
[  144.506637][T10607]  ffff888026eb0d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  144.509540][T10607]  ffff888026eb0d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.512164][T10607] >ffff888026eb0e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.514804][T10607]                                            ^
[  144.517338][T10607]  ffff888026eb0e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.520025][T10607]  ffff888026eb0f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.522931][T10607] ==================================================================
[  144.526477][T10607] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  144.529176][T10607] CPU: 0 UID: 0 PID: 10607 Comm: syz.1.2023 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  144.533174][T10607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.536884][T10607] Call Trace:
[  144.538019][T10607]  <TASK>
[  144.539025][T10607]  dump_stack_lvl+0x99/0x250
[  144.540554][T10607]  ? __asan_memcpy+0x40/0x70
[  144.542140][T10607]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.543987][T10607]  ? __pfx__printk+0x10/0x10
[  144.545847][T10607]  panic+0x2db/0x790
[  144.547260][T10607]  ? __pfx_panic+0x10/0x10
[  144.549050][T10607]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  144.551313][T10607]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.553512][T10607]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.555796][T10607]  ? print_memory_metadata+0x314/0x400
[  144.557590][T10607]  ? xfrm_alloc_spi+0x570/0xf30
[  144.559320][T10607]  check_panic_on_warn+0x89/0xb0
[  144.560912][T10607]  ? xfrm_alloc_spi+0x570/0xf30
[  144.562457][T10607]  end_report+0x78/0x160
[  144.563838][T10607]  kasan_report+0x129/0x150
[  144.565344][T10607]  ? xfrm_alloc_spi+0x570/0xf30
[  144.567158][T10607]  xfrm_alloc_spi+0x570/0xf30
[  144.568795][T10607]  ? xfrm_alloc_spi+0x2a0/0xf30
[  144.570391][T10607]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  144.572154][T10607]  ? xfrm_find_acq+0x87/0xa0
[  144.573960][T10607]  xfrm_alloc_userspi+0x70b/0xc90
[  144.576141][T10607]  ? __pfx_aa_get_newest_label+0x10/0x10
[  144.578149][T10607]  ? apparmor_capable+0x137/0x1b0
[  144.579946][T10607]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  144.581958][T10607]  ? __nla_parse+0x40/0x60
[  144.583494][T10607]  xfrm_user_rcv_msg+0x7a3/0xab0
[  144.585118][T10607]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  144.586952][T10607]  ? __pfx___mutex_trylock_common+0x10/0x10
[  144.588987][T10607]  ? rcu_is_watching+0x15/0xb0
[  144.590635][T10607]  ? trace_contention_end+0x39/0x120
[  144.592487][T10607]  ? __mutex_lock+0x335/0x1340
[  144.594118][T10607]  netlink_rcv_skb+0x208/0x470
[  144.595797][T10607]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  144.597763][T10607]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  144.599755][T10607]  ? netlink_deliver_tap+0x2e/0x1b0
[  144.601869][T10607]  ? netlink_deliver_tap+0x2e/0x1b0
[  144.603848][T10607]  xfrm_netlink_rcv+0x79/0x90
[  144.605494][T10607]  netlink_unicast+0x82f/0x9e0
[  144.607128][T10607]  ? __pfx_netlink_unicast+0x10/0x10
[  144.608924][T10607]  ? netlink_sendmsg+0x642/0xb30
[  144.610679][T10607]  ? skb_put+0x11b/0x210
[  144.612197][T10607]  netlink_sendmsg+0x805/0xb30
[  144.613964][T10607]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.616030][T10607]  ? aa_sock_msg_perm+0x94/0x160
[  144.617836][T10607]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  144.619754][T10607]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.621813][T10607]  __sock_sendmsg+0x21c/0x270
[  144.623424][T10607]  ____sys_sendmsg+0x505/0x830
[  144.625031][T10607]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.626835][T10607]  ? import_iovec+0x74/0xa0
[  144.628395][T10607]  ___sys_sendmsg+0x21f/0x2a0
[  144.630037][T10607]  ? __pfx____sys_sendmsg+0x10/0x10
[  144.631864][T10607]  ? __fget_files+0x2a/0x420
[  144.633450][T10607]  ? __fget_files+0x3a0/0x420
[  144.635193][T10607]  __x64_sys_sendmsg+0x19b/0x260
[  144.637191][T10607]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  144.639239][T10607]  ? rcu_is_watching+0x15/0xb0
[  144.641247][T10607]  ? do_syscall_64+0xbe/0x3b0
[  144.643177][T10607]  do_syscall_64+0xfa/0x3b0
[  144.645040][T10607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.647119][T10607]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  144.649172][T10607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.651282][T10607] RIP: 0033:0x7fd9bb38eb69
[  144.652808][T10607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.659148][T10607] RSP: 002b:00007fd9bc284038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.661971][T10607] RAX: ffffffffffffffda RBX: 00007fd9bb5b5fa0 RCX: 00007fd9bb38eb69
[  144.665044][T10607] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000003
[  144.668013][T10607] RBP: 00007fd9bb411df1 R08: 0000000000000000 R09: 0000000000000000
[  144.670810][T10607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.673377][T10607] R13: 0000000000000000 R14: 00007fd9bb5b5fa0 R15: 00007ffd0134e438
[  144.676090][T10607]  </TASK>
[  144.677916][T10607] Kernel Offset: disabled
[  144.679402][T10607] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:46:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000010f1 RDI=00000000000010f2 RBP=00000000000003f8 RSP=ffffc900030869f0
R8 =ffff88801fca0237 R9 =1ffff11003f94046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a9590f R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd9bc2846c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000f000 CR3=0000000030832000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd9bb587498 00007fd9bb587470 XMM03=00007fd9bb5874a8 00007fd9bb5874a0
XMM04=00007fd9bc0ed100 00007fd9bb587460 XMM05=00007fd9bb587478 00007fd9bb5874c0
XMM06=00007fd9bb5874b8 00007fd9bb5874b0 XMM07=00007fd9bb5874a8 00007fd9bb5874a0
XMM08=0000000000000000 00007fd9bb412eab XMM09=0000000000000000 00007fd9bb412f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000005 RBX=dffffc0000000000 RCX=ffff888034068000 RDX=0000000000000000
RSI=ffffffff8e16d100 RDI=0000000000000000 RBP=ffffc90002eb7ee0 RSP=ffffc90002eb7dd8
R8 =ffffc90002eb7e6f R9 =0000000000000000 R10=ffffc90002eb7e60 R11=fffff520005d6fce
R12=0000000000000000 R13=ffffc90002eb7e60 R14=00007ffef1f78bc0 R15=0000000000000000
RIP=ffffffff81bfb637 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557a8c4500 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e441a2c000 CR3=00000000307fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=80ef28d09100000e 6d9c59001a00003f
XMM02=ffffffff823bd5b4 ffffffff823bd2f2 XMM03=ffffffff823be3ee ffffffff823bd63c
XMM04=ffffffff823be661 ffffffff823be3ee XMM05=ffffffff823bd63c ffffffff823bd5b4
XMM06=ffffffff823bd2f2 ffffffff823bd29e XMM07=ffffffff8233043d ffffffff823302de
XMM08=0000000000000000 00007f5013a12eab XMM09=0000000000000000 00007f5013a12f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
