last executing test programs:

3.135957783s ago: executing program 1 (id=532):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xcff5, 0x8001, 0xffffffffffffffff, 0x5, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2.987274187s ago: executing program 1 (id=535):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340100000201010400000000000000000200000838000e8006000340000300002c000180f3ff020000000000000000000000ffff6401010014000400fc0200000000000000000000000000000800048004000280080015400000000134000180060003400001000006000340000000000c00028005000100ab0000001400018008000100e000000208000200e00000010800034000000200060012400004"], 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

2.898682203s ago: executing program 1 (id=538):
socket(0x10, 0x803, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'lblc\x00', 0x0, 0x9, 0x64}, 0x2c)

2.828190887s ago: executing program 1 (id=540):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)

2.780576688s ago: executing program 1 (id=542):
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x17, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250af7a19d98c880e1b30400000000001800000000000000000000000000003db0519c2ae7179490"], &(0x7f0000000000)='GPL\x00'}, 0x80)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_int(r1, &(0x7f0000000080)=0x8, 0x12)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0xa}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, r4, 0x1, 0x1, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}}, 0x0)

2.459341188s ago: executing program 1 (id=551):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80)

2.240025872s ago: executing program 2 (id=554):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a000000000000000007"], 0x14}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)

2.188443866s ago: executing program 2 (id=555):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6", 0x46}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000004480)="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", 0xd9b}], 0x5)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)

1.9399395s ago: executing program 2 (id=559):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000008021100000108021100000008021100000020000100000001100128828450"], 0x28)

1.105031179s ago: executing program 0 (id=564):
r0 = socket$igmp(0x2, 0x3, 0x2)
listen(r0, 0x8cd)

998.330268ms ago: executing program 0 (id=565):
write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @val={0x2, 0x0, 0x9, 0xd, 0x1, 0x3}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @multicast, @void, {@llc_tr={0x11, {@llc={0x8e, 0x8e, "13", "ed0c06791b9b6cd57009275ab428cb7a5459501dca5658c5f599332a1645813ebbc1a391ca99261b10cd097e3ff29b4ba35c7aac55edf615638e8159e34b7b4d5223ef29d744d878d4a23c8522af145b5ada088813bed6e0efd05039fee1ad957eaee1c1265ba3b634c2356022182df40fecd59d60e6830caf9f62b4bbb3096b42dce992877d09f5ecdf26450531a8532478dc608ac3064294"}}}}}}, 0xb4)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

950.334986ms ago: executing program 0 (id=566):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x800}}]}}, 0x0, 0x52}, 0x28)

890.10152ms ago: executing program 0 (id=567):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18)

889.830457ms ago: executing program 0 (id=568):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240040d0)
connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
epoll_create1(0x80000)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="00000c37d7ac"})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})

366.347987ms ago: executing program 2 (id=569):
r0 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x40, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

278.270824ms ago: executing program 2 (id=570):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x20)

229.583582ms ago: executing program 2 (id=571):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d)
write$tun(r1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x5f, 0x61, 0x30]}}, &(0x7f0000001180)=""/4096, 0x1d, 0x1000, 0x1, 0x6}, 0x28)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002801400"], 0x48}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x10000000}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
r5 = getpid()
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0)
r8 = socket(0x1e, 0x4, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r10 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x30)
sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r8, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xd335}], 0x2, 0x2120, 0x0)

0s ago: executing program 0 (id=572):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @private2, 0xffffffff}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28603' (ED25519) to the list of known hosts.
syzkaller login: [   50.018389][ T5762] cgroup: Unknown subsys name 'net'
[   50.147937][ T5762] cgroup: Unknown subsys name 'cpuset'
[   50.151867][ T5762] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.445251][ T5762] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.006851][ T5839] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.412784][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   57.462059][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.522766][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.530363][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.532749][ T5858] bridge_slave_0: entered allmulticast mode
[   57.545946][ T5858] bridge_slave_0: entered promiscuous mode
[   57.558135][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.560498][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.562842][ T5858] bridge_slave_1: entered allmulticast mode
[   57.567692][ T5858] bridge_slave_1: entered promiscuous mode
[   57.610485][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.615438][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.636655][ T5858] team0: Port device team_slave_0 added
[   57.640085][ T5858] team0: Port device team_slave_1 added
[   57.655641][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.657931][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.666708][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.671255][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.673629][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.681933][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.706382][ T5858] hsr_slave_0: entered promiscuous mode
[   57.708680][ T5858] hsr_slave_1: entered promiscuous mode
[   57.795475][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.800565][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.805081][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.809235][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.825915][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.828329][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.831037][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.834094][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.869092][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.877944][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.880900][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.889902][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   57.898943][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.902050][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.914146][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.917242][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.028788][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.069782][ T5858] veth0_vlan: entered promiscuous mode
[   58.079273][ T5858] veth1_vlan: entered promiscuous mode
[   58.098370][ T5858] veth0_macvtap: entered promiscuous mode
[   58.102235][ T5858] veth1_macvtap: entered promiscuous mode
[   58.112818][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.119401][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.126248][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.129144][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.131983][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.135019][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.594456][ T5690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.967432][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.971453][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.975579][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.979417][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.982964][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.035092][ T5899] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.039556][ T5899] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.043661][ T5899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.047638][ T5899] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.050996][ T5899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.055107][ T5899] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.060410][ T5899] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.064718][ T5901] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.067284][ T5899] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.068008][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.302380][ T5894] chnl_net:caif_netlink_parms(): no params data found
[   60.370230][ T5897] chnl_net:caif_netlink_parms(): no params data found
[   60.407607][ T5900] chnl_net:caif_netlink_parms(): no params data found
[   60.435505][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.438201][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.440885][ T5894] bridge_slave_0: entered allmulticast mode
[   60.445360][ T5894] bridge_slave_0: entered promiscuous mode
[   60.474424][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.477427][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.480328][ T5894] bridge_slave_1: entered allmulticast mode
[   60.485114][ T5894] bridge_slave_1: entered promiscuous mode
[   60.547521][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.551230][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.554807][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.557462][ T5900] bridge_slave_0: entered allmulticast mode
[   60.560995][ T5900] bridge_slave_0: entered promiscuous mode
[   60.575364][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.578375][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.581018][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.583940][ T5900] bridge_slave_1: entered allmulticast mode
[   60.586657][ T5900] bridge_slave_1: entered promiscuous mode
[   60.597087][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.599681][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.602691][ T5897] bridge_slave_0: entered allmulticast mode
[   60.606958][ T5897] bridge_slave_0: entered promiscuous mode
[   60.649678][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.652168][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.654959][ T5897] bridge_slave_1: entered allmulticast mode
[   60.657812][ T5897] bridge_slave_1: entered promiscuous mode
[   60.661672][ T5894] team0: Port device team_slave_0 added
[   60.666066][ T5894] team0: Port device team_slave_1 added
[   60.678291][ T5900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.699018][ T5900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.712003][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.729685][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.731886][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.740249][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.745263][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.750032][ T5900] team0: Port device team_slave_0 added
[   60.760380][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.762800][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.772596][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.785015][ T5900] team0: Port device team_slave_1 added
[   60.800128][ T5897] team0: Port device team_slave_0 added
[   60.819468][ T5897] team0: Port device team_slave_1 added
[   60.830955][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.834665][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.844262][ T5900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.866997][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.869245][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.877314][ T5900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.891345][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.894396][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.906543][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.920994][ T5894] hsr_slave_0: entered promiscuous mode
[   60.924816][ T5894] hsr_slave_1: entered promiscuous mode
[   60.927292][ T5894] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.929922][ T5894] Cannot create hsr debugfs directory
[   60.932773][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.935863][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.948833][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.994833][ T5900] hsr_slave_0: entered promiscuous mode
[   60.998006][ T5900] hsr_slave_1: entered promiscuous mode
[   61.000836][ T5900] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.004257][ T5900] Cannot create hsr debugfs directory
[   61.050318][ T5897] hsr_slave_0: entered promiscuous mode
[   61.052845][ T5897] hsr_slave_1: entered promiscuous mode
[   61.055282][ T5897] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.057646][ T5897] Cannot create hsr debugfs directory
[   61.076750][ T5690] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.266549][ T5894] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.274483][ T5894] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.281218][ T5894] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.288083][ T5894] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.362794][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.388290][ T5894] 8021q: adding VLAN 0 to HW filter on device team0
[   61.397219][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.400244][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.409721][  T188] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.412650][  T188] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.559592][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.592188][ T5894] veth0_vlan: entered promiscuous mode
[   61.598597][ T5894] veth1_vlan: entered promiscuous mode
[   61.620234][ T5894] veth0_macvtap: entered promiscuous mode
[   61.625512][ T5894] veth1_macvtap: entered promiscuous mode
[   61.636181][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.644154][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.649709][ T5894] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.652405][ T5894] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.661193][ T5894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.665266][ T5894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.721848][  T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.726647][  T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.751525][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.754524][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.900050][ T5939] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.30'.
[   62.008064][ T5945] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.011729][ T5945] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.017300][ T5945] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.020787][ T5945] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   62.027945][ T5945] vxlan0: entered promiscuous mode
[   62.030013][ T5945] vxlan0: entered allmulticast mode
[   62.053945][   T55] Bluetooth: hci0: command tx timeout
[   62.135659][   T55] Bluetooth: hci1: command tx timeout
[   62.135770][ T5899] Bluetooth: hci2: command tx timeout
[   62.166450][ T5690] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.209234][ T5690] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.347927][ T5690] bridge_slave_1: left allmulticast mode
[   62.350345][ T5690] bridge_slave_1: left promiscuous mode
[   62.353264][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.364550][ T5690] bridge_slave_0: left allmulticast mode
[   62.366691][ T5690] bridge_slave_0: left promiscuous mode
[   62.369264][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.621169][ T5690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.627724][ T5690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.632664][ T5690] bond0 (unregistering): Released all slaves
[   62.734464][ T5690] hsr_slave_0: left promiscuous mode
[   62.740365][ T5690] hsr_slave_1: left promiscuous mode
[   62.742502][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.748659][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.751991][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.754958][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.765595][ T5690] veth1_macvtap: left promiscuous mode
[   62.767983][ T5690] veth0_macvtap: left promiscuous mode
[   62.770511][ T5690] veth1_vlan: left promiscuous mode
[   62.772669][ T5690] veth0_vlan: left promiscuous mode
[   63.007016][ T5690] team0 (unregistering): Port device team_slave_1 removed
[   63.026486][ T5690] team0 (unregistering): Port device team_slave_0 removed
[   63.482841][ T5900] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.513616][ T5900] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.521295][ T5900] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.555680][ T5900] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.654524][ T5897] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.681496][ T5897] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.718058][ T5897] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.744719][ T5897] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.947534][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.029007][ T5900] 8021q: adding VLAN 0 to HW filter on device team0
[   64.066677][ T6008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.083623][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.086684][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.100796][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.122781][ T5897] 8021q: adding VLAN 0 to HW filter on device team0
[   64.130487][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.133678][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.138932][ T5899] Bluetooth: hci0: command tx timeout
[   64.166313][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.168698][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.185461][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.188547][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.213468][ T5899] Bluetooth: hci2: command tx timeout
[   64.223695][ T5899] Bluetooth: hci1: command tx timeout
[   64.472676][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.482615][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.571133][ T5900] veth0_vlan: entered promiscuous mode
[   64.596827][ T5897] veth0_vlan: entered promiscuous mode
[   64.602051][ T5900] veth1_vlan: entered promiscuous mode
[   64.617194][ T5897] veth1_vlan: entered promiscuous mode
[   64.660682][ T5900] veth0_macvtap: entered promiscuous mode
[   64.671348][ T5900] veth1_macvtap: entered promiscuous mode
[   64.688942][ T5897] veth0_macvtap: entered promiscuous mode
[   64.699602][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.709255][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.712643][ T5897] veth1_macvtap: entered promiscuous mode
[   64.737993][ T5900] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.741734][ T5900] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.748399][ T5900] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.752044][ T5900] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.792621][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.818585][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.839456][ T5897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.843671][ T5897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.847289][ T5897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.850721][ T5897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.917578][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.923364][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.957921][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.961866][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.004318][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.006794][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.032233][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.035259][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.189409][ T6047] Illegal XDP return value 4294967274 on prog  (id 7) dev N/A, expect packet loss!
[   65.220597][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'.
[   65.279187][ T6053] Zero length message leads to an empty skb
[   65.414954][ T6068] tipc: Started in network mode
[   65.420563][ T6068] tipc: Node identity a2cff0a2ea2, cluster identity 4711
[   65.425260][ T6068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.446274][ T6068] syzkaller0: entered promiscuous mode
[   65.448154][ T6068] syzkaller0: entered allmulticast mode
[   65.566735][ T6067] tipc: Resetting bearer <eth:syzkaller0>
[   65.604887][ T6067] tipc: Disabling bearer <eth:syzkaller0>
[   65.785335][ T6105] ipvlan2: entered promiscuous mode
[   65.789269][ T6105] bridge0: port 3(ipvlan2) entered blocking state
[   65.791702][ T6105] bridge0: port 3(ipvlan2) entered disabled state
[   65.796467][ T6105] ipvlan2: entered allmulticast mode
[   65.798349][ T6105] bridge0: entered allmulticast mode
[   65.801331][ T6105] ipvlan2: left allmulticast mode
[   65.803141][ T6105] bridge0: left allmulticast mode
[   65.820011][ T6107] netlink: 844 bytes leftover after parsing attributes in process `syz.2.89'.
[   65.900193][ T6107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.89'.
[   65.979809][ T6112] syz.1.91 uses obsolete (PF_INET,SOCK_PACKET)
[   66.152966][ T6120] bridge0: port 3(syz_tun) entered blocking state
[   66.156199][ T6120] bridge0: port 3(syz_tun) entered disabled state
[   66.161800][ T6120] syz_tun: entered allmulticast mode
[   66.165728][ T6120] syz_tun: entered promiscuous mode
[   66.168566][ T6120] bridge0: port 3(syz_tun) entered blocking state
[   66.170951][ T6120] bridge0: port 3(syz_tun) entered forwarding state
[   66.210385][ T6124] netlink: 300 bytes leftover after parsing attributes in process `syz.1.96'.
[   66.214950][ T5899] Bluetooth: hci0: command tx timeout
[   66.294043][ T5899] Bluetooth: hci1: command tx timeout
[   66.294096][   T55] Bluetooth: hci2: command tx timeout
[   66.334313][ T6130] netlink: 32 bytes leftover after parsing attributes in process `syz.2.100'.
[   66.444901][ T6134] netlink: 'syz.2.102': attribute type 1 has an invalid length.
[   66.460123][ T6134] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.490574][ T6134] veth3: entered promiscuous mode
[   66.502551][ T6134] bond1: (slave veth3): Enslaving as an active interface with a down link
[   66.539807][ T6134] erspan0: entered allmulticast mode
[   66.550620][ T6134] bond1: (slave erspan0): making interface the new active one
[   66.556995][ T6134] erspan0: entered promiscuous mode
[   66.559015][ T6134] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   67.579954][ T6219] netlink: 44 bytes leftover after parsing attributes in process `syz.0.139'.
[   67.700123][ T6212] infiniband syz0: set down
[   67.703122][ T6212] infiniband syz0: added ipvlan1
[   67.727719][ T6212] RDS/IB: syz0: added
[   67.729878][ T6212] smc: adding ib device syz0 with port count 1
[   67.732216][ T6212] smc:    ib device syz0 port 1 has pnetid 
[   68.262754][ T6236] netlink: 277 bytes leftover after parsing attributes in process `syz.0.146'.
[   68.293495][   T55] Bluetooth: hci0: command tx timeout
[   68.373294][   T55] Bluetooth: hci2: command tx timeout
[   68.375562][ T5899] Bluetooth: hci1: command tx timeout
[   68.482501][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'.
[   68.486697][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'.
[   68.566516][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'.
[   68.626343][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'.
[   68.874960][ T6266] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.927284][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.160'.
[   69.092105][ T6238] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   69.230541][ T6256] xt_CT: No such helper "snmp"
[   70.374182][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[   70.542591][ T6312] netlink: 88 bytes leftover after parsing attributes in process `syz.2.179'.
[   70.563756][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.179'.
[   70.669910][ T6322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.766489][ T6322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.785588][ T6322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.031748][ T6332] xt_CT: No such helper "syz1"
[   71.176550][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.178742][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.500666][ T6368] netlink: 'syz.2.204': attribute type 2 has an invalid length.
[   71.869285][ T6389] netlink: 'syz.0.212': attribute type 1 has an invalid length.
[   71.878681][ T6389] netlink: 224 bytes leftover after parsing attributes in process `syz.0.212'.
[   71.949438][ T6392] ipvlan0: entered promiscuous mode
[   72.547702][ T6420] veth0_to_bond: entered allmulticast mode
[   73.177291][ T6438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'.
[   73.188535][ T6438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'.
[   73.390698][ T6447] netlink: 'syz.1.238': attribute type 3 has an invalid length.
[   74.043767][ T6458] netlink: 240 bytes leftover after parsing attributes in process `syz.2.244'.
[   74.119846][ T6464] tipc: Enabled bearer <udp:syz2>, priority 10
[   74.306323][ T6476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.252'.
[   74.312459][ T6478] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.253'.
[   74.427749][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'.
[   74.469159][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.260'.
[   74.590949][ T6502] netlink: 104 bytes leftover after parsing attributes in process `syz.1.266'.
[   74.767371][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'.
[   74.999761][ T6541] warning: `syz.1.285' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.155503][ T6557] team_slave_0: entered promiscuous mode
[   75.158289][ T6557] team_slave_1: entered promiscuous mode
[   75.160928][ T6557] vlan2: entered promiscuous mode
[   75.163086][ T6557] team0: entered promiscuous mode
[   75.244649][ T6033] tipc: Node number set to 1223684258
[   75.376474][ T6573] netlink: 11 bytes leftover after parsing attributes in process `syz.0.298'.
[   75.570294][ T6588] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   75.730308][ T6603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.879002][ T6609] wireguard0: entered promiscuous mode
[   75.882752][ T6609] wireguard0: entered allmulticast mode
[   75.887001][ T6611] xt_hashlimit: size too large, truncated to 1048576
[   75.939451][ T6613] : renamed from vxcan1 (while UP)
[   76.756996][ T6656] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   76.762485][ T6657] openvswitch: netlink: Flow key attr not present in new flow.
[   76.764841][ T6656] Bluetooth: MGMT ver 1.23
[   77.040197][ T6678] geneve1: entered promiscuous mode
[   77.042623][ T6678] geneve1: entered allmulticast mode
[   77.071711][ T6678] syz.0.343 (6678) used greatest stack depth: 18960 bytes left
[   77.626783][ T6715] IPv6: sit1: Disabled Multicast RS
[   77.658603][ T6717] netlink: 'syz.1.362': attribute type 3 has an invalid length.
[   77.711804][   T12] erspan0: left promiscuous mode
[   78.613422][ T6730] xt_TCPMSS: Only works on TCP SYN packets
[   78.647062][ T6734] __nla_validate_parse: 1 callbacks suppressed
[   78.647079][ T6734] netlink: 36 bytes leftover after parsing attributes in process `syz.0.368'.
[   78.660605][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'.
[   78.660732][ T6736] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.370'.
[   78.735837][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'.
[   78.773702][   T55] Bluetooth: hci2: command tx timeout
[   79.030413][ T6765] netlink: 'syz.1.383': attribute type 21 has an invalid length.
[   79.035988][ T6765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.383'.
[   79.159776][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'.
[   79.165214][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'.
[   79.168218][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'.
[   79.237258][ T6786] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000
[   79.396994][ T6798] SET target dimension over the limit!
[   79.557874][ T6810] netlink: 'syz.0.405': attribute type 1 has an invalid length.
[   79.859445][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'.
[   80.015842][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'.
[   80.100245][ T6825] infiniband syz!: set active
[   80.108779][ T6825] infiniband syz!: added team_slave_0
[   80.160140][ T6825] RDS/IB: syz!: added
[   80.172875][ T6825] smc: adding ib device syz! with port count 1
[   80.182979][ T6825] smc:    ib device syz! port 1 has pnetid 
[   80.285056][ T6851] netlink: 'syz.1.423': attribute type 1 has an invalid length.
[   80.288163][ T6851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.378560][ T6853] xt_CT: No such helper "pptp"
[   81.071368][ T6892] gretap2: entered promiscuous mode
[   81.073861][ T6892] gretap2: entered allmulticast mode
[   81.408031][ T6916] netlink: 'syz.0.449': attribute type 2 has an invalid length.
[   81.678253][ T6936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.702573][ T6938] ip6gre1: entered promiscuous mode
[   82.265613][ T6976] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   82.270290][ T6033] IPVS: starting estimator thread 0...
[   82.354991][ T6981] IPVS: using max 80 ests per chain, 192000 per kthread
[   82.832503][ T7015] vcan0: tx drop: invalid da for name 0x0000000000000003
[   82.896096][ T7017] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   82.898697][ T7017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.549339][   T33] audit: type=1800 audit(1752108937.410:2): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.500" name="memory.events" dev="tmpfs" ino=907 res=0 errno=0
[   83.604909][ T7047] syzkaller0: entered promiscuous mode
[   83.606817][ T7047] syzkaller0: entered allmulticast mode
[   83.898905][ T7064] siw: device registration error -23
[   84.385603][ T7108] __nla_validate_parse: 12 callbacks suppressed
[   84.385622][ T7108] netlink: 148 bytes leftover after parsing attributes in process `syz.1.535'.
[   84.440948][ T7112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.537'.
[   84.446916][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'.
[   84.453402][ T6033] IPVS: starting estimator thread 0...
[   84.468873][ T7112] netlink: 'syz.0.537': attribute type 10 has an invalid length.
[   84.474212][ T7112] bridge0: port 3(team0) entered blocking state
[   84.477202][ T7112] bridge0: port 3(team0) entered disabled state
[   84.480212][ T7112] team0: entered allmulticast mode
[   84.482639][ T7112] team_slave_0: entered allmulticast mode
[   84.493054][ T7112] team_slave_1: entered allmulticast mode
[   84.498358][ T7112] team0: entered promiscuous mode
[   84.500622][ T7112] team_slave_0: entered promiscuous mode
[   84.506307][ T7112] team_slave_1: entered promiscuous mode
[   84.515668][ T7112] bridge0: port 3(team0) entered blocking state
[   84.518317][ T7112] bridge0: port 3(team0) entered forwarding state
[   84.558271][ T7115] IPVS: using max 44 ests per chain, 105600 per kthread
[   84.742906][ T7132] netlink: 'syz.2.547': attribute type 1 has an invalid length.
[   84.750702][ T7132] netlink: 224 bytes leftover after parsing attributes in process `syz.2.547'.
[   84.778623][ T7134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'.
[   84.796762][ T7136] netlink: 'syz.2.549': attribute type 11 has an invalid length.
[   84.800100][ T7136] netlink: 'syz.2.549': attribute type 4 has an invalid length.
[   84.809041][ T7136] netlink: 224 bytes leftover after parsing attributes in process `syz.2.549'.
[   84.907043][ T5903] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.017276][ T5903] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.074220][ T7146] netlink: 76 bytes leftover after parsing attributes in process `syz.0.553'.
[   85.078036][ T7146] nbd: illegal input index 65508
[   85.132278][ T5903] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.226997][ T5903] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.425877][ T5903] bridge_slave_1: left allmulticast mode
[   85.428400][ T5903] bridge_slave_1: left promiscuous mode
[   85.434237][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.440510][ T5899] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.446379][ T5899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.456201][ T5899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.464145][ T5899] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.469162][ T5903] bridge_slave_0: left allmulticast mode
[   85.471618][ T5903] bridge_slave_0: left promiscuous mode
[   85.475747][ T5899] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.479619][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.507207][ T7169] netlink: 'syz.2.559': attribute type 13 has an invalid length.
[   85.509773][ T7169] netlink: 'syz.2.559': attribute type 17 has an invalid length.
[   85.774577][ T7175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.843981][ T7175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.908072][ T7175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.916835][ T5903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.922851][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.929067][ T5903] bond0 (unregistering): Released all slaves
[   85.942795][ T5903] bond1 (unregistering): Released all slaves
[   86.008603][ T7169] erspan0: left allmulticast mode
[   86.092780][ T7169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.550894][    T9] cfg80211: failed to load regulatory.db
[   87.206696][ T5903] hsr_slave_0: left promiscuous mode
[   87.211337][ T5903] hsr_slave_1: left promiscuous mode
[   87.215349][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.218462][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.222397][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.226232][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.242177][ T5903] veth1_macvtap: left promiscuous mode
[   87.245399][ T5903] veth0_macvtap: left promiscuous mode
[   87.247959][ T5903] veth1_vlan: left promiscuous mode
[   87.250301][ T5903] veth0_vlan: left promiscuous mode
[   87.406636][ T3564] smc: removing ib device syz0
[   87.496339][   T55] Bluetooth: hci1: command tx timeout
[   87.588555][ T5903] team_slave_1 (unregistering): left promiscuous mode
[   87.594408][ T5903] team0 (unregistering): Port device team_slave_1 removed
[   87.617378][ T5903] team_slave_0 (unregistering): left promiscuous mode
[   87.621137][ T5903] team0 (unregistering): Port device team_slave_0 removed
[   87.923492][ T7224] geneve3: entered promiscuous mode
[   87.925464][ T7224] geneve3: entered allmulticast mode
[   87.939215][    T9] ==================================================================
[   87.942015][    T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[   87.944975][    T9] Read of size 8 at addr ffff888124f562e8 by task kworker/0:0/9
[   87.949192][    T9] 
[   87.950243][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   87.950259][    T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.950268][    T9] Workqueue: events smc_ib_port_event_work
[   87.950291][    T9] Call Trace:
[   87.950298][    T9]  <TASK>
[   87.950305][    T9]  dump_stack_lvl+0x189/0x250
[   87.950321][    T9]  ? __virt_addr_valid+0x1c8/0x5c0
[   87.950337][    T9]  ? rcu_is_watching+0x15/0xb0
[   87.950351][    T9]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.950363][    T9]  ? rcu_is_watching+0x15/0xb0
[   87.950375][    T9]  ? lock_release+0x4b/0x3e0
[   87.950389][    T9]  ? __virt_addr_valid+0x1c8/0x5c0
[   87.950403][    T9]  ? __virt_addr_valid+0x4a5/0x5c0
[   87.950418][    T9]  print_report+0xd2/0x2b0
[   87.950430][    T9]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   87.950446][    T9]  kasan_report+0x118/0x150
[   87.950462][    T9]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   87.950480][    T9]  __ethtool_get_link_ksettings+0x6e/0x190
[   87.950496][    T9]  ib_get_eth_speed+0x15e/0x7b0
[   87.950543][    T9]  ? __pfx_ib_get_eth_speed+0x10/0x10
[   87.950562][    T9]  ? do_raw_spin_unlock+0x4d/0x240
[   87.950581][    T9]  rxe_query_port+0x93/0x3b0
[   87.950597][    T9]  ib_query_port+0x170/0x830
[   87.950610][    T9]  smc_ib_port_event_work+0x15a/0x940
[   87.950629][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[   87.950646][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[   87.950660][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[   87.950673][    T9]  process_scheduled_works+0xae1/0x17b0
[   87.950695][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[   87.950712][    T9]  worker_thread+0x8a0/0xda0
[   87.950733][    T9]  kthread+0x711/0x8a0
[   87.950749][    T9]  ? __pfx_worker_thread+0x10/0x10
[   87.950761][    T9]  ? __pfx_kthread+0x10/0x10
[   87.950775][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[   87.950788][    T9]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.950796][    T9]  ? __pfx_kthread+0x10/0x10
[   87.950810][    T9]  ret_from_fork+0x3fc/0x770
[   87.950825][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[   87.950837][    T9]  ? __switch_to_asm+0x39/0x70
[   87.950850][    T9]  ? __switch_to_asm+0x33/0x70
[   87.950861][    T9]  ? __pfx_kthread+0x10/0x10
[   87.950875][    T9]  ret_from_fork_asm+0x1a/0x30
[   87.950894][    T9]  </TASK>
[   87.950898][    T9] 
[   88.043738][    T9] Allocated by task 5897:
[   88.045466][    T9]  kasan_save_track+0x3e/0x80
[   88.047384][    T9]  __kasan_kmalloc+0x93/0xb0
[   88.049295][    T9]  __kvmalloc_node_noprof+0x30d/0x5f0
[   88.051588][    T9]  alloc_netdev_mqs+0xa6/0x11e0
[   88.053584][    T9]  rtnl_create_link+0x31f/0xd10
[   88.055598][    T9]  rtnl_newlink_create+0x25c/0xb00
[   88.057688][    T9]  rtnl_newlink+0x16d6/0x1c70
[   88.059619][    T9]  rtnetlink_rcv_msg+0x7cf/0xb70
[   88.061655][    T9]  netlink_rcv_skb+0x208/0x470
[   88.063683][    T9]  netlink_unicast+0x75b/0x8d0
[   88.065725][    T9]  netlink_sendmsg+0x805/0xb30
[   88.067775][    T9]  __sock_sendmsg+0x21c/0x270
[   88.069685][    T9]  __sys_sendto+0x3bd/0x520
[   88.071591][    T9]  __x64_sys_sendto+0xde/0x100
[   88.073559][    T9]  do_syscall_64+0xfa/0x3b0
[   88.075446][    T9]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.077965][    T9] 
[   88.078985][    T9] Freed by task 5903:
[   88.080622][    T9]  kasan_save_track+0x3e/0x80
[   88.082535][    T9]  kasan_save_free_info+0x46/0x50
[   88.084607][    T9]  __kasan_slab_free+0x62/0x70
[   88.086585][    T9]  kfree+0x18e/0x440
[   88.088214][    T9]  device_release+0x9c/0x1c0
[   88.090098][    T9]  kobject_put+0x22b/0x480
[   88.091924][    T9]  netdev_run_todo+0xd2e/0xea0
[   88.093933][    T9]  default_device_exit_batch+0x81e/0x890
[   88.096246][    T9]  ops_undo_list+0x525/0x990
[   88.098106][    T9]  cleanup_net+0x4c5/0x800
[   88.099939][    T9]  process_scheduled_works+0xae1/0x17b0
[   88.102256][    T9]  worker_thread+0x8a0/0xda0
[   88.104282][    T9]  kthread+0x711/0x8a0
[   88.106015][    T9]  ret_from_fork+0x3fc/0x770
[   88.107926][    T9]  ret_from_fork_asm+0x1a/0x30
[   88.109897][    T9] 
[   88.110928][    T9] The buggy address belongs to the object at ffff888124f56000
[   88.110928][    T9]  which belongs to the cache kmalloc-cg-4k of size 4096
[   88.116788][    T9] The buggy address is located 744 bytes inside of
[   88.116788][    T9]  freed 4096-byte region [ffff888124f56000, ffff888124f57000)
[   88.122519][    T9] 
[   88.123614][    T9] The buggy address belongs to the physical page:
[   88.126307][    T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x124f50
[   88.130018][    T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   88.133541][    T9] memcg:ffff888108e09cc1
[   88.135313][    T9] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   88.138526][    T9] page_type: f5(slab)
[   88.140212][    T9] raw: 057ff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[   88.143806][    T9] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888108e09cc1
[   88.147453][    T9] head: 057ff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[   88.151005][    T9] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888108e09cc1
[   88.154473][    T9] head: 057ff00000000003 ffffea000493d401 00000000ffffffff 00000000ffffffff
[   88.157934][    T9] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   88.161627][    T9] page dumped because: kasan: bad access detected
[   88.164353][    T9] page_owner tracks the page as allocated
[   88.166686][    T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5897, tgid 5897 (syz-executor), ts 61132418585, free_ts 0
[   88.174949][    T9]  post_alloc_hook+0x240/0x2a0
[   88.177005][    T9]  get_page_from_freelist+0x21e4/0x22c0
[   88.179345][    T9]  __alloc_frozen_pages_noprof+0x181/0x370
[   88.181766][    T9]  alloc_pages_mpol+0x232/0x4a0
[   88.183851][    T9]  allocate_slab+0x8a/0x3b0
[   88.185808][    T9]  ___slab_alloc+0xbfc/0x1480
[   88.187776][    T9]  __kmalloc_cache_noprof+0x296/0x3d0
[   88.190023][    T9]  ipv6_add_dev+0x6ca/0x1370
[   88.192018][    T9]  addrconf_notify+0x794/0x1010
[   88.194118][    T9]  notifier_call_chain+0x1b6/0x3e0
[   88.196354][    T9]  register_netdevice+0x1608/0x1ae0
[   88.198566][    T9]  virt_wifi_newlink+0x428/0x860
[   88.200715][    T9]  rtnl_newlink_create+0x310/0xb00
[   88.202921][    T9]  rtnl_newlink+0x16d6/0x1c70
[   88.204992][    T9]  rtnetlink_rcv_msg+0x7cf/0xb70
[   88.207139][    T9]  netlink_rcv_skb+0x208/0x470
[   88.209184][    T9] page_owner free stack trace missing
[   88.211455][    T9] 
[   88.212457][    T9] Memory state around the buggy address:
[   88.214791][    T9]  ffff888124f56180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.218157][    T9]  ffff888124f56200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.221383][    T9] >ffff888124f56280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.224686][    T9]                                                           ^
[   88.227778][    T9]  ffff888124f56300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.231037][    T9]  ffff888124f56380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   88.234249][    T9] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   88.245278][    T9] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   88.248387][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   88.253421][    T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.257545][    T9] Workqueue: events smc_ib_port_event_work
[   88.259938][    T9] Call Trace:
[   88.261359][    T9]  <TASK>
[   88.262660][    T9]  dump_stack_lvl+0x99/0x250
[   88.264600][    T9]  ? __asan_memcpy+0x40/0x70
[   88.266567][    T9]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.268724][    T9]  ? __pfx__printk+0x10/0x10
[   88.270705][    T9]  panic+0x2db/0x790
[   88.272401][    T9]  ? __pfx_panic+0x10/0x10
[   88.274324][    T9]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   88.276797][    T9]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   88.279316][    T9]  ? print_memory_metadata+0x314/0x400
[   88.281541][    T9]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   88.284100][    T9]  check_panic_on_warn+0x89/0xb0
[   88.286091][    T9]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   88.288685][    T9]  end_report+0x78/0x160
[   88.290537][    T9]  kasan_report+0x129/0x150
[   88.292424][    T9]  ? __ethtool_get_link_ksettings+0x6e/0x190
[   88.295013][    T9]  __ethtool_get_link_ksettings+0x6e/0x190
[   88.297452][    T9]  ib_get_eth_speed+0x15e/0x7b0
[   88.299515][    T9]  ? __pfx_ib_get_eth_speed+0x10/0x10
[   88.301752][    T9]  ? do_raw_spin_unlock+0x4d/0x240
[   88.303912][    T9]  rxe_query_port+0x93/0x3b0
[   88.305924][    T9]  ib_query_port+0x170/0x830
[   88.308031][    T9]  smc_ib_port_event_work+0x15a/0x940
[   88.310218][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[   88.312365][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[   88.314802][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[   88.317118][    T9]  process_scheduled_works+0xae1/0x17b0
[   88.319342][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[   88.321741][    T9]  worker_thread+0x8a0/0xda0
[   88.323645][    T9]  kthread+0x711/0x8a0
[   88.325360][    T9]  ? __pfx_worker_thread+0x10/0x10
[   88.327460][    T9]  ? __pfx_kthread+0x10/0x10
[   88.329375][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[   88.331561][    T9]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.333633][    T9]  ? __pfx_kthread+0x10/0x10
[   88.335584][    T9]  ret_from_fork+0x3fc/0x770
[   88.337468][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[   88.339662][    T9]  ? __switch_to_asm+0x39/0x70
[   88.341746][    T9]  ? __switch_to_asm+0x33/0x70
[   88.343711][    T9]  ? __pfx_kthread+0x10/0x10
[   88.345631][    T9]  ret_from_fork_asm+0x1a/0x30
[   88.347317][    T9]  </TASK>
[   88.349408][    T9] Kernel Offset: disabled
[   88.351236][    T9] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:55:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000c7090
R8 =ffff888107b38237 R9 =1ffff11020f67046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78e8 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32dffff8 CR3=0000000029356000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133a4fe ffffffff8133a4fe
XMM02=00007f03fd985478 ffffffff8133a4fe XMM03=00007f03fd985488 00007f03fd985480
XMM04=00007f03fe4ed100 00007f03fd985440 XMM05=00007f03fd985458 00007f03fd9854a0
XMM06=00007f03fd985498 00007f03fd985490 XMM07=00007f03fd985488 00007f03fd985480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f03fd811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1984601107fcc100 RBX=ffffffff81975d58 RCX=1984601107fcc100 RDX=0000000000000001
RSI=ffffffff8d996d18 RDI=ffffffff8be28fc0 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f34b11eeb68 CR3=0000000027856000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81b92d45 ffffffff81b92c25
XMM02=ffffffff81ed5749 ffffffff81b92c25 XMM03=ffffffff8186ca2a ffffffff8186c9b6
XMM04=00007f50fd8ed100 00007f50fcd85440 XMM05=00007f50fcd85458 00007f50fcd854a0
XMM06=00007f50fcd85498 00007f50fcd85490 XMM07=00007f50fcd85488 00007f50fcd85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f50fcc11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
