last executing test programs:

1.220197096s ago: executing program 0 (id=2429):
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00@\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005000800ff0000000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}}, 0x40010)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0, @ANYBLOB='\f'], 0x34}}, 0x8080)

1.133318405s ago: executing program 2 (id=2430):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0x40000000000000}, 0x18)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6}, 0x47)

1.132340724s ago: executing program 0 (id=2431):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x102a, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.080361359s ago: executing program 0 (id=2432):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}, 0x0)

1.080219064s ago: executing program 2 (id=2433):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0)

1.000442242s ago: executing program 2 (id=2434):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

950.530903ms ago: executing program 0 (id=2435):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = epoll_create1(0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2})

950.200244ms ago: executing program 2 (id=2436):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000000fc0)=""/208, &(0x7f00000010c0)=0xd0)
accept4(r0, 0x0, 0x0, 0x800)

559.362687ms ago: executing program 1 (id=2443):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000)

506.683004ms ago: executing program 1 (id=2444):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01422006020607f6", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="96a116664ad74559c53a5c37bf77920a8e24e3f87917904747209a1e7a7bbd4a06345f71398baf73fc4e2138ce24f0e88c777e4ca8b1fa1a97a591f1b018cf14de7f48a08e12d8b4e2d3f376b583963b", @ANYRES8=0x0], 0xa)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'erspan0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union]}}, 0x0, 0x56}, 0x28)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[], 0x1dc}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00')
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b05, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f00000001c0))
socket$inet6(0xa, 0x1, 0x0)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x15)
socket$inet6(0xa, 0x3, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014})

504.837147ms ago: executing program 2 (id=2445):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022})

404.894391ms ago: executing program 2 (id=2446):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)

262.963233ms ago: executing program 1 (id=2447):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x6004}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x40}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x84}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

189.868083ms ago: executing program 1 (id=2448):
syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @loopback, @multicast1}, "000022eb00000000"}}}}}, 0x0)

139.843175ms ago: executing program 1 (id=2449):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)
recvmmsg(r0, &(0x7f00000044c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x10040, 0x0)

65.771347ms ago: executing program 1 (id=2450):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000080008000540000000020900020073797a310000000008000a40fffffffc9c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000700003806c0000800400018064000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000010000340001800a0001006c696d6974000000240002800c00024000000000800000000c00014000000068"], 0x100}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

65.606143ms ago: executing program 0 (id=2451):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x48}}, 0x0)

0s ago: executing program 0 (id=2452):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c)
close(r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13420' (ED25519) to the list of known hosts.
syzkaller login: [   56.535386][ T5810] cgroup: Unknown subsys name 'net'
[   56.633925][ T5810] cgroup: Unknown subsys name 'cpuset'
[   56.640660][ T5810] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.551400][ T5810] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.871333][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.874929][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.878364][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.882269][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.885902][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.906413][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.910849][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.914085][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.918361][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.922393][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.943659][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.948020][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.951672][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.956134][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.965209][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.282578][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   64.349071][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.428339][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   64.510440][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.513366][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.517688][ T5851] bridge_slave_0: entered allmulticast mode
[   64.521676][ T5851] bridge_slave_0: entered promiscuous mode
[   64.560495][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.563366][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.566744][ T5851] bridge_slave_1: entered allmulticast mode
[   64.570539][ T5851] bridge_slave_1: entered promiscuous mode
[   64.597274][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.600310][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.603345][ T5847] bridge_slave_0: entered allmulticast mode
[   64.607766][ T5847] bridge_slave_0: entered promiscuous mode
[   64.638082][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.640877][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.645468][ T5847] bridge_slave_1: entered allmulticast mode
[   64.649761][ T5847] bridge_slave_1: entered promiscuous mode
[   64.686422][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.719781][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.725822][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.746996][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.763930][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.767645][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.770540][ T5854] bridge_slave_0: entered allmulticast mode
[   64.774247][ T5854] bridge_slave_0: entered promiscuous mode
[   64.821400][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.824400][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.829147][ T5854] bridge_slave_1: entered allmulticast mode
[   64.833056][ T5854] bridge_slave_1: entered promiscuous mode
[   64.838719][ T5847] team0: Port device team_slave_0 added
[   64.842771][ T5851] team0: Port device team_slave_0 added
[   64.861307][ T5851] team0: Port device team_slave_1 added
[   64.879309][ T5847] team0: Port device team_slave_1 added
[   64.898381][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.930269][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.948590][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.951392][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.961758][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.968831][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.971626][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.981660][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.008643][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.011427][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.021732][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.036926][ T5854] team0: Port device team_slave_0 added
[   65.040047][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.042714][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.053095][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.074589][ T5854] team0: Port device team_slave_1 added
[   65.109474][ T5851] hsr_slave_0: entered promiscuous mode
[   65.112618][ T5851] hsr_slave_1: entered promiscuous mode
[   65.144307][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.147749][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.157484][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.183288][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.188198][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.197743][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.208777][ T5847] hsr_slave_0: entered promiscuous mode
[   65.211954][ T5847] hsr_slave_1: entered promiscuous mode
[   65.214894][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   65.217978][ T5847] Cannot create hsr debugfs directory
[   65.319125][ T5854] hsr_slave_0: entered promiscuous mode
[   65.321703][ T5854] hsr_slave_1: entered promiscuous mode
[   65.324274][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   65.327556][ T5854] Cannot create hsr debugfs directory
[   65.521669][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.528593][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.549264][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.563686][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.605178][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.612243][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.629081][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.647977][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.681001][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.697078][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.708647][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.714083][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.802566][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.832081][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   65.838845][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.853230][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.856005][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.866753][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.869594][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.879858][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   65.899642][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.902562][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.919858][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.922660][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.969901][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.977130][ T5232] Bluetooth: hci0: command tx timeout
[   65.979639][ T5232] Bluetooth: hci1: command tx timeout
[   66.011549][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   66.033289][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.036365][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.056748][ T5850] Bluetooth: hci2: command tx timeout
[   66.083875][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.086843][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.270318][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.280583][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.335353][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.363300][ T5851] veth0_vlan: entered promiscuous mode
[   66.381695][ T5847] veth0_vlan: entered promiscuous mode
[   66.388828][ T5851] veth1_vlan: entered promiscuous mode
[   66.404622][ T5847] veth1_vlan: entered promiscuous mode
[   66.450118][ T5854] veth0_vlan: entered promiscuous mode
[   66.454955][ T5851] veth0_macvtap: entered promiscuous mode
[   66.462624][ T5847] veth0_macvtap: entered promiscuous mode
[   66.472802][ T5851] veth1_macvtap: entered promiscuous mode
[   66.480493][ T5847] veth1_macvtap: entered promiscuous mode
[   66.485149][ T5854] veth1_vlan: entered promiscuous mode
[   66.514461][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.519331][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.533586][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.540521][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.557651][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.561877][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.567983][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.581268][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.584587][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.592393][ T5854] veth0_macvtap: entered promiscuous mode
[   66.596651][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.599355][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.602346][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.608948][ T5854] veth1_macvtap: entered promiscuous mode
[   66.653474][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.683163][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.720904][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.734907][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.740086][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.742999][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.747135][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.751375][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.825669][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.829615][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.832822][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.838836][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.873754][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.882174][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.895974][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.903169][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.908997][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.931535][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.949255][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.014093][ T5913] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.201393][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   67.229827][ T5925] bridge_slave_0: left allmulticast mode
[   67.232101][ T5925] bridge_slave_0: left promiscuous mode
[   67.234999][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.253162][ T5925] bridge_slave_1: left allmulticast mode
[   67.255392][ T5925] bridge_slave_1: left promiscuous mode
[   67.266057][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.289231][ T5925] bond0: (slave bond_slave_0): Releasing backup interface
[   67.303411][ T5925] bond0: (slave bond_slave_1): Releasing backup interface
[   67.312778][ T5925] team0: Port device team_slave_0 removed
[   67.330036][ T5925] team0: Port device team_slave_1 removed
[   67.332320][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.335390][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.341602][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.344729][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.586800][ T5925] syz.2.7 (5925) used greatest stack depth: 19896 bytes left
[   67.653608][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'.
[   67.661088][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'.
[   67.839497][ T5950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19'.
[   67.843137][ T5950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19'.
[   67.859236][ T5950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19'.
[   67.862683][ T5950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19'.
[   67.884244][ T5952] netlink: 'syz.1.18': attribute type 16 has an invalid length.
[   67.890329][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18'.
[   68.056465][ T5850] Bluetooth: hci1: command tx timeout
[   68.058306][ T5850] Bluetooth: hci0: command tx timeout
[   68.142006][ T5232] Bluetooth: hci2: command tx timeout
[   68.747481][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'.
[   68.916633][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'.
[   68.983039][ T5996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   69.299215][ T6007] nft_compat: unsupported protocol 0
[   69.443404][ T6011] netlink: 'syz.1.42': attribute type 2 has an invalid length.
[   69.694850][ T6029] syz.1.50 uses obsolete (PF_INET,SOCK_PACKET)
[   69.743895][ T6031] bond0: option xmit_hash_policy: invalid value (8)
[   69.971465][ T6047] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   70.136126][ T5232] Bluetooth: hci0: command tx timeout
[   70.137896][ T5232] Bluetooth: hci1: command tx timeout
[   70.220523][ T5232] Bluetooth: hci2: command tx timeout
[   70.405192][ T6081] netlink: 'syz.0.73': attribute type 1 has an invalid length.
[   71.192391][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.201937][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.636800][ T6127] tipc: Started in network mode
[   71.638932][ T6127] tipc: Node identity 2e3992fe6c7a, cluster identity 4711
[   71.643147][ T6127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.650475][ T6127] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   71.677779][ T6127] tipc: Resetting bearer <eth:syzkaller0>
[   71.720697][ T6126] tipc: Disabling bearer <eth:syzkaller0>
[   71.857143][ T6137] netlink: 'syz.1.98': attribute type 11 has an invalid length.
[   72.161765][ T6155] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.220123][ T5232] Bluetooth: hci1: command tx timeout
[   72.222574][ T5232] Bluetooth: hci0: command tx timeout
[   72.266513][ T6155] Zero length message leads to an empty skb
[   72.269612][ T6162] netlink: 'syz.0.109': attribute type 4 has an invalid length.
[   72.296959][ T5850] Bluetooth: hci2: command tx timeout
[   72.300498][ T6162] netlink: 'syz.0.109': attribute type 4 has an invalid length.
[   72.337689][ T6162] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.432824][ T6162] syz.0.109 (6162) used greatest stack depth: 19832 bytes left
[   72.591036][ T6174] __nla_validate_parse: 5 callbacks suppressed
[   72.591052][ T6174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.114'.
[   72.597965][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.114'.
[   72.724495][ T6182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.119'.
[   72.735679][ T6182] netlink: 'syz.0.119': attribute type 6 has an invalid length.
[   72.738763][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'.
[   73.393877][ T6219] lo speed is unknown, defaulting to 1000
[   73.402600][ T6219] lo speed is unknown, defaulting to 1000
[   73.414862][ T6219] lo speed is unknown, defaulting to 1000
[   73.436707][ T6219] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   73.462775][ T6219] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   73.505816][ T6219] lo speed is unknown, defaulting to 1000
[   73.524285][ T6219] lo speed is unknown, defaulting to 1000
[   73.537692][ T6219] lo speed is unknown, defaulting to 1000
[   73.716598][ T6232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.139'.
[   74.199685][ T6255] netlink: 'syz.1.150': attribute type 1 has an invalid length.
[   74.839139][ T6271] netlink: 3 bytes leftover after parsing attributes in process `syz.2.157'.
[   74.860438][ T6275] netlink: 224 bytes leftover after parsing attributes in process `syz.1.160'.
[   74.897159][ T6271] tipc: Can't bind to reserved service type 2
[   75.014908][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'.
[   75.446579][ T6317] tipc: Started in network mode
[   75.450875][ T6317] tipc: Node identity , cluster identity 4711
[   75.453478][ T6317] tipc: Failed to obtain node identity
[   75.455496][ T6317] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   75.850538][ T6348] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   75.921906][ T6354] netlink: 'syz.1.197': attribute type 4 has an invalid length.
[   76.048434][ T6364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.202'.
[   76.342795][ T6389] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[   76.363361][ T6389] bridge_slave_0: left allmulticast mode
[   76.365256][ T6389] bridge_slave_0: left promiscuous mode
[   76.368155][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.372917][ T6389] bridge_slave_1: left allmulticast mode
[   76.382425][ T6389] bridge_slave_1: left promiscuous mode
[   76.384805][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.404512][ T6389] bond0: (slave bond_slave_0): Releasing backup interface
[   76.423742][ T6389] bond0: (slave bond_slave_1): Releasing backup interface
[   76.441563][ T6389] team0: Port device team_slave_0 removed
[   76.455520][ T6389] team0: Port device team_slave_1 removed
[   76.459366][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.474281][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.479883][ T6397] netlink: 'syz.0.214': attribute type 10 has an invalid length.
[   76.489241][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.492259][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.508500][   T95] lo speed is unknown, defaulting to 1000
[   76.520604][ T6397] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[   76.526098][ T6397] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.530804][ T6397] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   77.154716][ T6432] ieee802154 phy0 wpan0: encryption failed: -22
[   77.171954][   T10] cfg80211: failed to load regulatory.db
[   77.344185][ T6441] syzkaller0: entered promiscuous mode
[   77.351208][ T6441] syzkaller0: entered allmulticast mode
[   77.654305][ T6469] netlink: 'syz.2.249': attribute type 1 has an invalid length.
[   77.660025][ T6469] netlink: 244 bytes leftover after parsing attributes in process `syz.2.249'.
[   78.337431][ T6473] syzkaller1: entered promiscuous mode
[   78.339568][ T6473] syzkaller1: entered allmulticast mode
[   78.343041][ T6479] tipc: Enabling <ib:lo> not permitted
[   78.346099][ T6479] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   78.432805][ T6484] delete_channel: no stack
[   78.616186][ T6498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.260'.
[   78.884990][ T6519] Illegal XDP return value 1672441946 on prog  (id 38) dev N/A, expect packet loss!
[   78.928207][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[   78.945931][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'.
[   79.054776][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.278'.
[   79.068717][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'.
[   79.192596][ T6548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.284'.
[   79.380477][ T6562] vlan2: entered promiscuous mode
[   79.382225][ T6562] gretap0: entered promiscuous mode
[   79.826621][ T6586] lo speed is unknown, defaulting to 1000
[   79.955042][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'.
[   79.968726][ T6606] veth0_to_bond: entered allmulticast mode
[   80.132803][ T6616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.315'.
[   80.306581][ T6626] Bluetooth: MGMT ver 1.23
[   80.311649][ T6624] netlink: 'syz.1.318': attribute type 4 has an invalid length.
[   80.461127][ T6634] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.323'.
[   80.608380][ T6646] xt_policy: neither incoming nor outgoing policy selected
[   80.717387][ T6652] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   82.035735][ T6741] netlink: 'syz.1.376': attribute type 1 has an invalid length.
[   82.688119][ T6788] __nla_validate_parse: 6 callbacks suppressed
[   82.688135][ T6788] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.401'.
[   82.788914][ T6800] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   83.088554][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'.
[   83.129652][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'.
[   83.280684][ T6831] netlink: 'syz.2.419': attribute type 1 has an invalid length.
[   83.284004][ T6831] netlink: 'syz.2.419': attribute type 2 has an invalid length.
[   83.301231][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'.
[   83.616559][ T6848] netlink: 88 bytes leftover after parsing attributes in process `syz.2.427'.
[   83.798966][ T6853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.964401][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.436'.
[   83.970099][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.436'.
[   84.051862][ T6870] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.438'.
[   84.119995][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'.
[   84.162178][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'.
[   84.173940][ T6872] lo speed is unknown, defaulting to 1000
[   84.950555][ T6925] netlink: 'syz.2.465': attribute type 1 has an invalid length.
[   85.043077][ T6932] netlink: 'syz.1.467': attribute type 5 has an invalid length.
[   85.249976][   T52] IPVS: starting estimator thread 0...
[   85.264725][ T6948] syzkaller1: entered promiscuous mode
[   85.272256][ T6948] syzkaller1: entered allmulticast mode
[   85.376129][ T6949] IPVS: using max 42 ests per chain, 100800 per kthread
[   85.854832][ T6985] netlink: 'syz.1.488': attribute type 4 has an invalid length.
[   87.184354][ T7052] blkio.reset_stats is deprecated
[   87.192079][ T7054] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   87.263712][ T7058] syzkaller0: tun_chr_ioctl cmd 1074025677
[   87.266027][ T7058] syzkaller0: linktype set to 1
[   87.806259][ T7090] __nla_validate_parse: 6 callbacks suppressed
[   87.806272][ T7090] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.531'.
[   87.822005][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'.
[   87.848069][ T7090] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   87.850932][ T7090] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   87.917953][ T7103] netlink: 'syz.1.537': attribute type 12 has an invalid length.
[   87.920953][ T7103] netlink: 'syz.1.537': attribute type 29 has an invalid length.
[   87.923481][ T7103] netlink: 148 bytes leftover after parsing attributes in process `syz.1.537'.
[   87.933995][ T7103] netlink: 'syz.1.537': attribute type 2 has an invalid length.
[   87.936457][ T7103] netlink: 23 bytes leftover after parsing attributes in process `syz.1.537'.
[   87.939675][ T7103] netlink: 'syz.1.537': attribute type 12 has an invalid length.
[   87.942007][ T7103] netlink: 'syz.1.537': attribute type 29 has an invalid length.
[   87.951387][ T7103] netlink: 148 bytes leftover after parsing attributes in process `syz.1.537'.
[   87.954104][ T7103] netlink: 'syz.1.537': attribute type 2 has an invalid length.
[   87.960265][ T7103] netlink: 23 bytes leftover after parsing attributes in process `syz.1.537'.
[   88.279110][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.425027][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.571'.
[   89.451506][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.571'.
[   89.589741][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'.
[   89.660462][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.578'.
[   90.298875][ T7239] netlink: 'syz.0.599': attribute type 1 has an invalid length.
[   90.384860][ T7245] openvswitch: netlink: Unknown nsh attribute 0
[   90.390131][ T7245] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.515455][ T7254] wg1 speed is unknown, defaulting to 1000
[   90.519899][ T7254] wg1 speed is unknown, defaulting to 1000
[   90.529398][ T7254] wg1 speed is unknown, defaulting to 1000
[   90.578969][ T7254] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   90.662643][ T7254] wg1 speed is unknown, defaulting to 1000
[   90.673433][ T7254] wg1 speed is unknown, defaulting to 1000
[   90.695900][ T7254] wg1 speed is unknown, defaulting to 1000
[   91.143202][ T7293] tipc: Started in network mode
[   91.145187][ T7293] tipc: Node identity 5ee2b8ebd565, cluster identity 4711
[   91.148690][ T7293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.152203][ T7293] syzkaller0: entered promiscuous mode
[   91.155416][ T7293] syzkaller0: entered allmulticast mode
[   91.187801][ T7293] tipc: Resetting bearer <eth:syzkaller0>
[   91.193781][ T7292] tipc: Resetting bearer <eth:syzkaller0>
[   91.230816][ T7292] tipc: Disabling bearer <eth:syzkaller0>
[   92.157180][ T7382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   92.160149][ T7382] IPv6: NLM_F_CREATE should be set when creating new route
[   92.183538][ T7379] lo speed is unknown, defaulting to 1000
[   92.193382][ T7379] wg1 speed is unknown, defaulting to 1000
[   92.463238][ T7400] Unsupported xt match
[   92.463251][ T7400] unable to load match
[   92.674886][ T7418] netlink: 'syz.2.683': attribute type 1 has an invalid length.
[   92.838489][ T7430] __nla_validate_parse: 13 callbacks suppressed
[   92.838505][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'.
[   92.859645][ T7433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.981352][ T7443] netlink: 'syz.2.694': attribute type 4 has an invalid length.
[   92.983936][ T7443] netlink: 17 bytes leftover after parsing attributes in process `syz.2.694'.
[   93.175519][ T7452] lo speed is unknown, defaulting to 1000
[   93.187181][ T7452] wg1 speed is unknown, defaulting to 1000
[   93.592502][ T7475] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.687563][ T7475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.698742][ T7475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.795295][ T7478] ip6gre1: entered allmulticast mode
[   93.801283][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.805793][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.809059][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.818907][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.857157][ T7482] netlink: 'syz.0.710': attribute type 1 has an invalid length.
[   93.862074][ T7482] netlink: 'syz.0.710': attribute type 4 has an invalid length.
[   93.868086][ T7482] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.710'.
[   93.874654][ T7482] netlink: 'syz.0.710': attribute type 1 has an invalid length.
[   93.877993][ T7482] netlink: 'syz.0.710': attribute type 4 has an invalid length.
[   93.881447][ T7482] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.710'.
[   93.989627][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'.
[   93.995030][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'.
[   94.118684][ T7497] x9: renamed from bridge_slave_0 (while UP)
[   94.144169][ T7497] netlink: 'syz.0.719': attribute type 5 has an invalid length.
[   94.163963][ T7497] netlink: 'syz.0.719': attribute type 12 has an invalid length.
[   94.564411][ T7521] syzkaller1: entered promiscuous mode
[   94.576677][ T7521] syzkaller1: entered allmulticast mode
[   95.891309][ T7582] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   95.983810][ T5877] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   96.812821][ T7622] netlink: 'syz.1.766': attribute type 10 has an invalid length.
[   96.819343][ T7620] netlink: 'syz.2.765': attribute type 1 has an invalid length.
[   96.820954][ T7622] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   96.828632][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'.
[   96.849480][ T7620] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.853324][ T7622] bridge_slave_1: left allmulticast mode
[   96.863464][ T7622] bridge_slave_1: left promiscuous mode
[   96.865994][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.870270][ T7622] bridge_slave_0: left allmulticast mode
[   96.872265][ T7622] bridge_slave_0: left promiscuous mode
[   96.874185][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.888295][ T7622] bond0: (slave bridge0): Releasing backup interface
[   96.939184][ T7620] bond1: (slave gretap1): making interface the new active one
[   96.942996][ T7620] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   97.193674][ T7640] Bluetooth: MGMT ver 1.23
[   98.020827][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.799'.
[   98.035272][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.799'.
[   98.523845][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.809'.
[   98.617523][ T7732] validate_nla: 1 callbacks suppressed
[   98.617554][ T7732] netlink: 'syz.0.809': attribute type 1 has an invalid length.
[   98.624066][ T7732] netlink: 'syz.0.809': attribute type 1 has an invalid length.
[   98.957240][   T33] audit: type=1800 audit(1755387494.650:2): pid=7745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.815" name="memory.events" dev="tmpfs" ino=1338 res=0 errno=0
[   99.202003][ T7765] vxcan2: entered promiscuous mode
[   99.359691][ T7480] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   99.617296][ T7790] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   99.621629][ T7790] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  100.479698][ T7854] batadv_slave_1: entered promiscuous mode
[  100.488383][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.863'.
[  100.492549][ T7853] batadv_slave_1: left promiscuous mode
[  100.547270][ T7859] ieee802154 phy0 wpan0: encryption failed: -22
[  100.884170][ T7893] netlink: 'syz.1.881': attribute type 1 has an invalid length.
[  101.131699][ T7896] bond2: (slave gretap1): making interface the new active one
[  101.135348][ T7896] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  101.153273][ T7897] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  101.697981][ T7942] netlink: 'syz.2.900': attribute type 12 has an invalid length.
[  102.030156][ T7951] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  102.316918][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'.
[  102.774577][ T7981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.784147][ T7981] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  102.791108][ T7981] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  102.798145][ T7981] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  102.804049][ T7981] tipc: Resetting bearer <eth:syzkaller0>
[  103.227497][ T8006] netlink: 44 bytes leftover after parsing attributes in process `syz.1.929'.
[  103.231512][ T8006] netlink: 43 bytes leftover after parsing attributes in process `syz.1.929'.
[  103.235063][ T8006] netlink: 'syz.1.929': attribute type 6 has an invalid length.
[  103.240752][ T8006] netlink: 'syz.1.929': attribute type 5 has an invalid length.
[  103.245319][ T8006] netlink: 43 bytes leftover after parsing attributes in process `syz.1.929'.
[  103.444060][ T8023] netlink: 'syz.1.937': attribute type 12 has an invalid length.
[  103.470562][ T8027] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  103.483609][ T8027] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  103.692968][ T8050] netlink: 76 bytes leftover after parsing attributes in process `syz.0.950'.
[  103.705993][ T8050] netlink: 76 bytes leftover after parsing attributes in process `syz.0.950'.
[  103.807054][   T10] tipc: Node number set to 1111724798
[  104.022982][ T8078] veth0_vlan: left promiscuous mode
[  104.027648][ T8078] veth0_vlan: entered promiscuous mode
[  104.035040][ T8085] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  104.545761][ T8141] netlink: 120 bytes leftover after parsing attributes in process `syz.2.987'.
[  104.593059][ T8145] netlink: 68 bytes leftover after parsing attributes in process `syz.0.990'.
[  104.596718][ T8145] netlink: 56 bytes leftover after parsing attributes in process `syz.0.990'.
[  104.707649][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.993'.
[  104.711036][ T8154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.993'.
[  104.791680][ T8166] C: renamed from team_slave_0
[  104.800733][ T8166] netlink: 'syz.0.999': attribute type 1 has an invalid length.
[  104.803763][ T8166] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  105.734613][ T8200] netlink: 'syz.1.1014': attribute type 4 has an invalid length.
[  106.523072][ T8245] netpci0: tun_chr_ioctl cmd 1074025681
[  107.130401][ T8276] netlink: 'syz.2.1050': attribute type 2 has an invalid length.
[  107.133241][ T8276] netlink: 'syz.2.1050': attribute type 1 has an invalid length.
[  107.300446][ T8288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.429857][ T8294] lo speed is unknown, defaulting to 1000
[  107.433688][ T8294] wg1 speed is unknown, defaulting to 1000
[  108.547776][ T8358] openvswitch: netlink: IPv4 tun info is not correct
[  108.914095][ T5911] lo speed is unknown, defaulting to 1000
[  108.917659][ T5911] syz2: Port: 1 Link DOWN
[  108.920295][ T5310] wg1 speed is unknown, defaulting to 1000
[  108.922764][ T7480] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.927511][ T5310] syz0: Port: 1 Link DOWN
[  108.929460][ T7480] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.936451][ T7480] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.941011][ T7480] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.178298][ T8391] syzkaller1: entered promiscuous mode
[  109.184052][ T8391] syzkaller1: entered allmulticast mode
[  109.237518][ T8395] netlink: 'syz.2.1106': attribute type 7 has an invalid length.
[  109.273481][ T8398] netlink: 'syz.2.1108': attribute type 1 has an invalid length.
[  109.276904][ T8398] netlink: 'syz.2.1108': attribute type 1 has an invalid length.
[  110.835945][ T8477] __nla_validate_parse: 10 callbacks suppressed
[  110.835961][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'.
[  110.843006][ T8477] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1143'.
[  110.932521][ T8483] netlink: 'syz.0.1146': attribute type 1 has an invalid length.
[  110.944996][ T8486] netlink: 'syz.1.1147': attribute type 1 has an invalid length.
[  110.950519][ T8483] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1146'.
[  110.990959][ T8486] 8021q: adding VLAN 0 to HW filter on device bond3
[  111.019836][ T8486] 8021q: adding VLAN 0 to HW filter on device bond3
[  111.022912][ T8486] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  111.035088][ T8486] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  111.088780][ T8495] bond3: (slave bridge0): Enslaving as an active interface with a down link
[  111.103609][ T8498] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1152'.
[  111.545253][ T8532] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1165'.
[  111.581279][ T8532] netlink: 'syz.1.1165': attribute type 1 has an invalid length.
[  111.598518][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'.
[  111.612736][ T8532] 8021q: adding VLAN 0 to HW filter on device bond4
[  111.633902][ T8532] bond4: (slave gretap3): making interface the new active one
[  111.644804][ T8532] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  111.833040][ T8547] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  111.848203][ T8549] netlink: 'syz.2.1173': attribute type 2 has an invalid length.
[  111.851312][ T8549] netlink: 'syz.2.1173': attribute type 1 has an invalid length.
[  111.996339][ T8561] netlink: 'syz.1.1179': attribute type 1 has an invalid length.
[  112.001326][ T8561] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1179'.
[  112.004757][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'.
[  112.182307][ T8579] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1188'.
[  112.694836][ T8614] netlink: 'syz.1.1204': attribute type 9 has an invalid length.
[  112.700894][ T8614] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1204'.
[  112.993478][ T8631] team0: Device gtp0 is of different type
[  113.369736][ T8660] bridge0: port 1(batadv1) entered blocking state
[  113.372731][ T8660] bridge0: port 1(batadv1) entered disabled state
[  113.375825][ T8660] batadv1: entered allmulticast mode
[  113.381616][ T8660] batadv1: entered promiscuous mode
[  113.856067][ T7480] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  113.860023][ T7480] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  113.960211][ T8699] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  113.964503][ T8699] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  113.980158][ T8699] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  113.988689][ T8699] netem: change failed
[  114.288730][ T8721] syzkaller1: entered promiscuous mode
[  114.290888][ T8721] syzkaller1: entered allmulticast mode
[  114.406274][ T8731] syz_tun: entered allmulticast mode
[  114.409728][ T8730] syz_tun: left allmulticast mode
[  114.740796][ T8761] syzkaller0: create flow: hash 3567282037 index 1
[  114.849653][ T8754] syzkaller0: delete flow: hash 3567282037 index 1
[  116.269035][ T8803] __nla_validate_parse: 7 callbacks suppressed
[  116.269053][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1289'.
[  116.509736][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'.
[  116.684228][ T5877] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.702824][ T5877] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.707786][ T5877] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.711861][ T5877] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.400663][ T8886] lo speed is unknown, defaulting to 1000
[  117.404355][ T8886] wg1 speed is unknown, defaulting to 1000
[  117.562028][ T8895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1331'.
[  117.565874][ T8895] netem: unknown loss type 13
[  117.570913][ T8895] netem: change failed
[  117.768933][ T8913] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1338'.
[  118.113589][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'.
[  118.200345][ T8886] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  118.291178][ T8939] vlan0: entered allmulticast mode
[  118.293725][ T8939] veth1: entered allmulticast mode
[  118.300479][ T8939] batman_adv: batadv0: Adding interface: vlan0
[  118.303158][ T8939] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.317760][ T8939] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active
[  118.463976][ T8952] netlink: 'syz.2.1356': attribute type 9 has an invalid length.
[  118.475888][ T8952] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1356'.
[  118.642900][ T7480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.654484][ T7480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.667182][ T7480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.673330][ T7480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.807302][ T8979] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1364'.
[  119.187793][ T9010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1377'.
[  119.351097][ T9024] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.359379][ T9024] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  119.362158][ T9024] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  119.494443][ T9032] can: request_module (can-proto-5) failed.
[  119.504036][ T9038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1387'.
[  119.989336][ T9045] netlink: 'syz.2.1388': attribute type 1 has an invalid length.
[  120.002998][ T9045] netlink: 'syz.2.1388': attribute type 1 has an invalid length.
[  120.012049][ T9045] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1388'.
[  120.743147][ T9091] Bluetooth: MGMT ver 1.23
[  121.944734][ T9143] netlink: 'syz.1.1428': attribute type 11 has an invalid length.
[  122.180272][ T9149] netlink: 'syz.1.1429': attribute type 1 has an invalid length.
[  122.183644][ T9149] __nla_validate_parse: 2 callbacks suppressed
[  122.183657][ T9149] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1429'.
[  122.193546][ T9149] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1429'.
[  122.775747][ T5232] Bluetooth: hci2: command 0x0405 tx timeout
[  122.775862][ T5850] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  124.051152][   T33] audit: type=1800 audit(1755387519.740:3): pid=9230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1458" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2630 res=0 errno=0
[  124.155920][ T9238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.368150][ T9263] netlink: 'syz.2.1474': attribute type 1 has an invalid length.
[  124.401977][ T9263] bond2: (slave bridge3): Enslaving as an active interface with a down link
[  125.812793][ T9378] IPVS: Scheduler module ip_vs_sip not found
[  126.070201][ T9399] syzkaller1: entered promiscuous mode
[  126.075038][ T9399] syzkaller1: entered allmulticast mode
[  126.212120][ T9416] IPv6: addrconf: prefix option has invalid lifetime
[  126.314212][ T9421] lo speed is unknown, defaulting to 1000
[  126.323220][ T9421] wg1 speed is unknown, defaulting to 1000
[  127.282312][ T9470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1526'.
[  127.361404][ T9480] netlink: 'syz.1.1530': attribute type 16 has an invalid length.
[  127.363917][ T9480] netlink: 'syz.1.1530': attribute type 17 has an invalid length.
[  127.454415][ T9488] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.464649][ T9488] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  127.476346][ T9488] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  127.647651][ T9515] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.659733][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'.
[  128.143438][ T9581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1571'.
[  128.239933][ T9593] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1578'.
[  128.362205][ T9610] netlink: 'syz.2.1585': attribute type 3 has an invalid length.
[  128.652145][ T9632] bridge0: port 1(erspan0) entered blocking state
[  128.655400][ T9632] bridge0: port 1(erspan0) entered disabled state
[  128.667503][ T9632] erspan0: entered allmulticast mode
[  128.670223][ T9632] erspan0: entered promiscuous mode
[  128.680798][ T9632] bridge0: port 1(erspan0) entered blocking state
[  128.683637][ T9632] bridge0: port 1(erspan0) entered forwarding state
[  128.701195][ T9632] erspan0: left allmulticast mode
[  128.702859][ T9632] erspan0: left promiscuous mode
[  128.704520][ T9632] bridge0: port 1(erspan0) entered disabled state
[  128.812036][ T9641] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.819356][ T9640] tipc: Resetting bearer <eth:syzkaller0>
[  129.308091][ T9669] netlink: 'syz.2.1610': attribute type 1 has an invalid length.
[  129.311527][ T9669] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1610'.
[  129.454665][ T9675] nbd: socks must be embedded in a SOCK_ITEM attr
[  129.808735][   T10] tipc: Node number set to 2340927723
[  130.066545][ T9640] tipc: Disabling bearer <eth:syzkaller0>
[  130.077817][ T9679] sit0: entered promiscuous mode
[  130.085880][ T9679] netlink: 'syz.2.1615': attribute type 1 has an invalid length.
[  130.088639][ T9679] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1615'.
[  130.453114][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'.
[  130.463807][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'.
[  130.472554][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'.
[  130.488023][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'.
[  130.825489][ T9733] netlink: 'syz.1.1636': attribute type 1 has an invalid length.
[  130.829251][ T9733] netlink: 'syz.1.1636': attribute type 3 has an invalid length.
[  130.832368][ T9733] NCSI netlink: No device for ifindex 246
[  130.860803][ T9737] netlink: 'syz.1.1638': attribute type 1 has an invalid length.
[  131.051570][ T9754] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  131.495907][ T9781] gre0: entered allmulticast mode
[  131.715052][ T9780] gre0: left allmulticast mode
[  131.804301][ T9808] netlink: 'syz.1.1669': attribute type 15 has an invalid length.
[  132.322455][ T9850] __nla_validate_parse: 4 callbacks suppressed
[  132.322473][ T9850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1686'.
[  132.345686][ T9850] netlink: 'syz.2.1686': attribute type 2 has an invalid length.
[  132.348824][ T9850] netlink: 'syz.2.1686': attribute type 3 has an invalid length.
[  132.352576][ T9850] netlink: 'syz.2.1686': attribute type 1 has an invalid length.
[  132.358523][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'.
[  132.618966][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.621355][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.973575][ T9903] lo speed is unknown, defaulting to 1000
[  132.979054][ T9903] wg1 speed is unknown, defaulting to 1000
[  133.012958][ T9906] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  133.829907][ T9933] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1719'.
[  134.294466][ T9982] syzkaller0: entered promiscuous mode
[  134.296486][ T9982] syzkaller0: entered allmulticast mode
[  134.323284][ T9991] ieee802154 phy0 wpan0: encryption failed: -22
[  135.594386][T10027] ip6tnl3: entered promiscuous mode
[  135.596383][T10027] ip6tnl3: entered allmulticast mode
[  135.842577][T10049] netlink: 'syz.2.1774': attribute type 1 has an invalid length.
[  135.847065][T10049] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1774'.
[  136.100123][T10068] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1785'.
[  136.103754][T10068] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  136.292129][T10078] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1789'.
[  136.597776][T10097] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  136.644734][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1799'.
[  136.694454][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'.
[  136.783635][T10116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1805'.
[  136.842200][T10121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1808'.
[  136.899601][T10126] tipc: Started in network mode
[  136.902532][T10126] tipc: Node identity 2a44351978b1, cluster identity 4711
[  136.905315][T10126] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.911301][T10126] syzkaller0: entered promiscuous mode
[  136.913367][T10126] syzkaller0: entered allmulticast mode
[  136.933226][T10126] tipc: Resetting bearer <eth:syzkaller0>
[  136.940035][T10125] tipc: Resetting bearer <eth:syzkaller0>
[  136.951445][T10125] tipc: Disabling bearer <eth:syzkaller0>
[  138.693024][T10220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1849'.
[  138.789231][T10230] lo speed is unknown, defaulting to 1000
[  138.793232][T10230] wg1 speed is unknown, defaulting to 1000
[  139.387549][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'.
[  139.400615][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1877'.
[  139.692221][   T33] audit: type=1800 audit(1755387535.380:4): pid=10320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1889" name="memory.events" dev="tmpfs" ino=3037 res=0 errno=0
[  139.700537][   T33] audit: type=1804 audit(1755387535.400:5): pid=10320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1889" name="/newroot/600/memory.events" dev="tmpfs" ino=3037 res=1 errno=0
[  139.818796][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1893'.
[  139.822945][T10328] smc: net device bond0 applied user defined pnetid SYZ
[  140.089879][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1896'.
[  140.315154][T10346] syzkaller0: refused to change device tx_queue_len
[  140.481946][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'.
[  142.055114][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1921'.
[  142.194560][T10405] netlink: 'syz.0.1927': attribute type 1 has an invalid length.
[  142.286470][T10412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1930'.
[  142.361730][T10420] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1934'.
[  142.534994][T10438] raw_sendmsg: syz.1.1943 forgot to set AF_INET. Fix it!
[  142.770764][T10457] ieee802154 phy0 wpan0: encryption failed: -22
[  143.067654][T10478] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1957'.
[  143.678776][T10487] lo speed is unknown, defaulting to 1000
[  143.681444][T10487] wg1 speed is unknown, defaulting to 1000
[  143.733895][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'.
[  143.748125][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'.
[  143.761016][T10494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.919069][T10504] netlink: 'syz.0.1967': attribute type 16 has an invalid length.
[  143.930902][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'.
[  144.119090][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1971'.
[  144.131850][T10512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1970'.
[  144.200256][T10520] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1974'.
[  144.211448][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'.
[  144.214763][T10522] bridge_slave_0: default FDB implementation only supports local addresses
[  144.247321][T10526] netlink: 'syz.2.1977': attribute type 1 has an invalid length.
[  144.249831][T10526] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1977'.
[  144.423784][T10543] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1985'.
[  144.474536][T10545] netlink: 'syz.2.1982': attribute type 16 has an invalid length.
[  144.478986][T10545] netlink: 'syz.2.1982': attribute type 17 has an invalid length.
[  144.591532][T10545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.713850][T10559] netlink: 'syz.0.1992': attribute type 2 has an invalid length.
[  144.790984][T10565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.794501][T10565] syzkaller0: entered promiscuous mode
[  144.797930][T10565] syzkaller0: entered allmulticast mode
[  144.822163][T10565] tipc: Resetting bearer <eth:syzkaller0>
[  144.833789][T10563] tipc: Resetting bearer <eth:syzkaller0>
[  144.875034][T10563] tipc: Disabling bearer <eth:syzkaller0>
[  145.367110][T10592] netlink: 'syz.2.2008': attribute type 1 has an invalid length.
[  145.424400][T10598] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2011'.
[  145.808818][   T52] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  145.831258][   T52] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  146.062400][T10657] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.091041][T10657] syzkaller0: entered promiscuous mode
[  146.093152][T10657] syzkaller0: entered allmulticast mode
[  146.096648][T10657] tipc: Resetting bearer <eth:syzkaller0>
[  146.102173][T10656] tipc: Resetting bearer <eth:syzkaller0>
[  146.370234][T10678] trusted_key: syz.2.2050 sent an empty control message without MSG_MORE.
[  147.085927][  T974] tipc: Node number set to 1391801625
[  147.304069][T10656] tipc: Disabling bearer <eth:syzkaller0>
[  148.700677][T10799] tipc: Resetting bearer <eth:ipvlan1>
[  148.702918][T10799] tipc: Resetting bearer <eth:ipvlan1>
[  148.728589][T10802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.731642][T10802] syzkaller0: entered promiscuous mode
[  148.733598][T10802] syzkaller0: entered allmulticast mode
[  148.766258][T10802] tipc: Resetting bearer <eth:syzkaller0>
[  148.778216][T10801] tipc: Resetting bearer <eth:syzkaller0>
[  148.798390][T10801] tipc: Disabling bearer <eth:syzkaller0>
[  149.088025][T10836] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  149.554273][T10873] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  149.560493][T10873] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  149.685760][T10876] __nla_validate_parse: 7 callbacks suppressed
[  149.685775][T10876] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2143'.
[  149.691988][T10876] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2143'.
[  150.211626][T10910] syzkaller0: entered promiscuous mode
[  150.214045][T10910] syzkaller0: entered allmulticast mode
[  150.222407][T10910] macsec1: entered promiscuous mode
[  150.599345][T10934] netlink: 'syz.0.2169': attribute type 1 has an invalid length.
[  150.603391][T10934] netlink: 'syz.0.2169': attribute type 2 has an invalid length.
[  150.615931][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2169'.
[  150.650951][T10943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2174'.
[  151.068161][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2190'.
[  151.101242][T10976] netlink: 'syz.1.2190': attribute type 2 has an invalid length.
[  152.201232][T11001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.254360][T11001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.323996][T11001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.399704][T11001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.509152][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.526438][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.575528][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.591351][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.628453][T11028] lo speed is unknown, defaulting to 1000
[  152.671144][T11028] wg1 speed is unknown, defaulting to 1000
[  153.494808][T11047] lo speed is unknown, defaulting to 1000
[  153.501970][T11047] wg1 speed is unknown, defaulting to 1000
[  153.874389][T11051] only policy match revision 0 supported
[  153.874409][T11051] unable to load match
[  153.889113][T11053] vlan0: entered promiscuous mode
[  154.214879][T11087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.217907][T11087] IPv6: NLM_F_CREATE should be set when creating new route
[  154.220882][T11087] IPv6: NLM_F_CREATE should be set when creating new route
[  154.409657][T11093] lo speed is unknown, defaulting to 1000
[  154.413385][T11093] wg1 speed is unknown, defaulting to 1000
[  154.467307][T11098] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  154.483685][T11100] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  154.971003][T11140] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.253979][T11154] lo speed is unknown, defaulting to 1000
[  155.267065][T11154] wg1 speed is unknown, defaulting to 1000
[  155.268002][T11158] lo speed is unknown, defaulting to 1000
[  155.289468][T11158] wg1 speed is unknown, defaulting to 1000
[  155.839135][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'.
[  156.193466][T11200] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2284'.
[  156.197966][T11200] unsupported nlmsg_type 40
[  156.277690][T11210] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2289'.
[  156.280699][T11210] netlink: 'syz.1.2289': attribute type 5 has an invalid length.
[  156.302742][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2291'.
[  156.373314][T11219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2294'.
[  156.396289][T11219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2294'.
[  156.559189][T11233] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  156.818041][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'.
[  156.883256][T11264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2310'.
[  156.918953][T11266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.679602][T11302] bond0: option arp_validate: invalid value (18446744073491447809)
[  158.026970][T11308] netlink: 'syz.0.2329': attribute type 10 has an invalid length.
[  159.962764][T11341] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  160.061379][T11349] sit0: left promiscuous mode
[  160.084405][T11349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.095662][T11351] IPVS: Unknown mcast interface: bridge_slave_0
[  160.547829][T11393] netlink: 'syz.2.2365': attribute type 13 has an invalid length.
[  160.551051][T11393] netlink: 'syz.2.2365': attribute type 17 has an invalid length.
[  160.620356][T11401] netlink: 'syz.0.2371': attribute type 1 has an invalid length.
[  160.628511][T11393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.687659][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'.
[  160.705694][T11399] lo speed is unknown, defaulting to 1000
[  160.709493][T11399] wg1 speed is unknown, defaulting to 1000
[  160.729615][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'.
[  160.905147][T11417] bond3: (slave bridge0): Releasing active interface
[  160.910808][T11417] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  161.152505][T11435] netlink: 'syz.0.2385': attribute type 7 has an invalid length.
[  161.155969][T11435] netlink: 'syz.0.2385': attribute type 8 has an invalid length.
[  161.159029][T11435] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2385'.
[  161.345758][T11448] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  162.969785][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2429'.
[  163.242163][T11548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.698622][T11568] bridge0: port 1(erspan0) entered blocking state
[  163.701282][T11568] bridge0: port 1(erspan0) entered disabled state
[  163.703893][T11568] erspan0: entered allmulticast mode
[  163.707750][T11568] erspan0: entered promiscuous mode
[  163.712759][T11568] erspan0: left allmulticast mode
[  163.714757][T11568] erspan0: left promiscuous mode
[  163.717472][T11568] bridge0: port 1(erspan0) entered disabled state
[  164.169479][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'.
[  164.205289][    C1] ==================================================================
[  164.207904][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  164.211090][    C1] Write of size 8 at addr ffff888028b01fb0 by task syz.2.2446/11576
[  164.215220][    C1] 
[  164.216235][    C1] CPU: 1 UID: 0 PID: 11576 Comm: syz.2.2446 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  164.216257][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.216268][    C1] Call Trace:
[  164.216284][    C1]  <IRQ>
[  164.216298][    C1]  dump_stack_lvl+0x189/0x250
[  164.216320][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  164.216338][    C1]  ? rcu_is_watching+0x15/0xb0
[  164.216352][    C1]  ? __kasan_check_byte+0x12/0x40
[  164.216372][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.216386][    C1]  ? rcu_is_watching+0x15/0xb0
[  164.216399][    C1]  ? lock_release+0x4b/0x3e0
[  164.216421][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  164.216437][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  164.216455][    C1]  print_report+0xca/0x240
[  164.216468][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  164.216488][    C1]  kasan_report+0x118/0x150
[  164.216507][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  164.216530][    C1]  __xfrm_state_delete+0x696/0xca0
[  164.216555][    C1]  xfrm_timer_handler+0x18f/0xa00
[  164.216578][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  164.216597][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  164.216615][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.216634][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  164.216651][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  164.216670][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  164.216687][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  164.216705][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  164.216725][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  164.216738][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  164.216755][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  164.216771][    C1]  handle_softirqs+0x286/0x870
[  164.216786][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  164.216801][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  164.216819][    C1]  __irq_exit_rcu+0xca/0x1f0
[  164.216832][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  164.216848][    C1]  irq_exit_rcu+0x9/0x30
[  164.216860][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  164.216906][    C1]  </IRQ>
[  164.216911][    C1]  <TASK>
[  164.216916][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  164.216936][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  164.216957][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb e3 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  164.216969][    C1] RSP: 0018:ffffc90007027548 EFLAGS: 00000206
[  164.216983][    C1] RAX: 89f5048222e0b500 RBX: 0000000000000000 RCX: 89f5048222e0b500
[  164.216994][    C1] RDX: 0000000000000000 RSI: ffffffff8dba6151 RDI: ffffffff8be33400
[  164.217004][    C1] RBP: ffffffff8213bd04 R08: 0000000000000000 R09: ffffffff8213bd04
[  164.217013][    C1] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001
[  164.217021][    C1] R13: ffff8881099996d8 R14: 0000000000000001 R15: 0000000000000246
[  164.217031][    C1]  ? validate_mm+0x1d4/0x4b0
[  164.217045][    C1]  ? validate_mm+0x1d4/0x4b0
[  164.217068][    C1]  down_read+0x46/0x2e0
[  164.217079][    C1]  ? validate_mm+0x1d4/0x4b0
[  164.217093][    C1]  validate_mm+0x1d4/0x4b0
[  164.217108][    C1]  ? __pfx_validate_mm+0x10/0x10
[  164.217124][    C1]  ? __pfx_uprobe_mmap+0x10/0x10
[  164.217138][    C1]  ? vma_wants_writenotify+0xb3/0x2a0
[  164.217155][    C1]  ? vma_set_page_prot+0xc3/0x100
[  164.217173][    C1]  mmap_region+0x15a5/0x20c0
[  164.217197][    C1]  ? __pfx_mmap_region+0x10/0x10
[  164.217237][    C1]  ? mm_get_unmapped_area+0xa7/0xd0
[  164.217260][    C1]  ? bpf_lsm_mmap_addr+0x9/0x20
[  164.217276][    C1]  ? security_mmap_addr+0x71/0x270
[  164.217295][    C1]  ? shmem_mapping+0xd/0x50
[  164.217309][    C1]  ? memfd_check_seals_mmap+0x165/0x200
[  164.217325][    C1]  do_mmap+0xc45/0x10d0
[  164.217347][    C1]  ? __pfx_do_mmap+0x10/0x10
[  164.217362][    C1]  ? down_write_killable+0x178/0x230
[  164.217376][    C1]  ? __pfx_down_write_killable+0x10/0x10
[  164.217388][    C1]  ? common_file_perm+0x1b5/0x230
[  164.217412][    C1]  vm_mmap_pgoff+0x2a6/0x4d0
[  164.217431][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  164.217446][    C1]  ? __fget_files+0x2a/0x420
[  164.217468][    C1]  ? __fget_files+0x3a0/0x420
[  164.217478][    C1]  ? __fget_files+0x2a/0x420
[  164.217491][    C1]  ksys_mmap_pgoff+0x51f/0x760
[  164.217511][    C1]  do_syscall_64+0xfa/0x3b0
[  164.217530][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.217548][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.217561][    C1]  ? exc_page_fault+0x9f/0xf0
[  164.217579][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.217592][    C1] RIP: 0033:0x7f09fc18ebe9
[  164.217605][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.217616][    C1] RSP: 002b:00007f09fd046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  164.217631][    C1] RAX: ffffffffffffffda RBX: 00007f09fc3b6090 RCX: 00007f09fc18ebe9
[  164.217641][    C1] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000000000
[  164.217650][    C1] RBP: 00007f09fc211e19 R08: 0000000000000004 R09: 0000000000000000
[  164.217658][    C1] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000
[  164.217667][    C1] R13: 00007f09fc3b6128 R14: 00007f09fc3b6090 R15: 00007ffc92c5cbe8
[  164.217682][    C1]  </TASK>
[  164.217687][    C1] 
[  164.420025][    C1] Allocated by task 9945:
[  164.421768][    C1]  kasan_save_track+0x3e/0x80
[  164.423621][    C1]  __kasan_slab_alloc+0x6c/0x80
[  164.425525][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  164.427647][    C1]  xfrm_state_alloc+0x24/0x2f0
[  164.429521][    C1]  __find_acq_core+0x8a7/0x1c00
[  164.431518][    C1]  xfrm_find_acq+0x78/0xa0
[  164.433348][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  164.435385][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  164.437373][    C1]  netlink_rcv_skb+0x208/0x470
[  164.439308][    C1]  xfrm_netlink_rcv+0x79/0x90
[  164.441218][    C1]  netlink_unicast+0x82f/0x9e0
[  164.443135][    C1]  netlink_sendmsg+0x805/0xb30
[  164.445057][    C1]  __sock_sendmsg+0x21c/0x270
[  164.446907][    C1]  ____sys_sendmsg+0x505/0x830
[  164.448741][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  164.450623][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  164.452487][    C1]  do_syscall_64+0xfa/0x3b0
[  164.454322][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.456617][    C1] 
[  164.457630][    C1] Freed by task 10:
[  164.459142][    C1]  kasan_save_track+0x3e/0x80
[  164.460723][    C1]  kasan_save_free_info+0x46/0x50
[  164.462344][    C1]  __kasan_slab_free+0x5b/0x80
[  164.463922][    C1]  kmem_cache_free+0x18f/0x400
[  164.465745][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  164.467723][    C1]  process_scheduled_works+0xae1/0x17b0
[  164.469974][    C1]  worker_thread+0x8a0/0xda0
[  164.471770][    C1]  kthread+0x711/0x8a0
[  164.473391][    C1]  ret_from_fork+0x3fc/0x770
[  164.475225][    C1]  ret_from_fork_asm+0x1a/0x30
[  164.477125][    C1] 
[  164.478087][    C1] The buggy address belongs to the object at ffff888028b01f80
[  164.478087][    C1]  which belongs to the cache xfrm_state of size 928
[  164.483329][    C1] The buggy address is located 48 bytes inside of
[  164.483329][    C1]  freed 928-byte region [ffff888028b01f80, ffff888028b02320)
[  164.488396][    C1] 
[  164.489362][    C1] The buggy address belongs to the physical page:
[  164.491865][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28b00
[  164.495298][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  164.498560][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  164.501133][    C1] page_type: f5(slab)
[  164.502407][    C1] raw: 00fff00000000040 ffff888104db1640 dead000000000122 0000000000000000
[  164.505331][    C1] raw: 0000000000000000 00000000000e000e 00000000f5000000 0000000000000000
[  164.508727][    C1] head: 00fff00000000040 ffff888104db1640 dead000000000122 0000000000000000
[  164.512109][    C1] head: 0000000000000000 00000000000e000e 00000000f5000000 0000000000000000
[  164.515550][    C1] head: 00fff00000000002 ffffea0000a2c001 00000000ffffffff 00000000ffffffff
[  164.518878][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  164.522291][    C1] page dumped because: kasan: bad access detected
[  164.524869][    C1] page_owner tracks the page as allocated
[  164.527147][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6040, tgid 6039 (syz.2.55), ts 69838059510, free_ts 69799245557
[  164.534437][    C1]  post_alloc_hook+0x240/0x2a0
[  164.536320][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  164.538545][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  164.540863][    C1]  alloc_pages_mpol+0x232/0x4a0
[  164.542784][    C1]  allocate_slab+0x8a/0x370
[  164.544609][    C1]  ___slab_alloc+0xbeb/0x1410
[  164.546461][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  164.548549][    C1]  xfrm_state_alloc+0x24/0x2f0
[  164.550528][    C1]  xfrm_add_sa+0x17d1/0x4070
[  164.552419][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  164.554401][    C1]  netlink_rcv_skb+0x208/0x470
[  164.556315][    C1]  xfrm_netlink_rcv+0x79/0x90
[  164.558242][    C1]  netlink_unicast+0x82f/0x9e0
[  164.560139][    C1]  netlink_sendmsg+0x805/0xb30
[  164.562092][    C1]  __sock_sendmsg+0x21c/0x270
[  164.563954][    C1]  ____sys_sendmsg+0x505/0x830
[  164.565792][    C1] page last free pid 6036 tgid 6034 stack trace:
[  164.568363][    C1]  __free_frozen_pages+0xbc4/0xd30
[  164.570360][    C1]  stack_depot_save_flags+0x436/0x860
[  164.572492][    C1]  kasan_save_track+0x4f/0x80
[  164.574404][    C1]  __kasan_kmalloc+0x93/0xb0
[  164.576174][    C1]  __kmalloc_node_noprof+0x276/0x4e0
[  164.578230][    C1]  alloc_slab_obj_exts+0x39/0xa0
[  164.580123][    C1]  __memcg_slab_post_alloc_hook+0x31e/0x7f0
[  164.582371][    C1]  __kvmalloc_node_noprof+0x466/0x5f0
[  164.584436][    C1]  bpf_check+0xf20/0x1d2d0
[  164.586142][    C1]  bpf_prog_load+0x1318/0x1930
[  164.588050][    C1]  __sys_bpf+0x528/0x870
[  164.589689][    C1]  __x64_sys_bpf+0x7c/0x90
[  164.591429][    C1]  do_syscall_64+0xfa/0x3b0
[  164.593214][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.595528][    C1] 
[  164.596447][    C1] Memory state around the buggy address:
[  164.598627][    C1]  ffff888028b01e80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  164.601723][    C1]  ffff888028b01f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  164.604782][    C1] >ffff888028b01f80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.607866][    C1]                                      ^
[  164.610062][    C1]  ffff888028b02000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.613188][    C1]  ffff888028b02080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.616379][    C1] ==================================================================
[  164.619927][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  164.622683][    C1] CPU: 1 UID: 0 PID: 11576 Comm: syz.2.2446 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  164.627400][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.631217][    C1] Call Trace:
[  164.632478][    C1]  <IRQ>
[  164.633607][    C1]  dump_stack_lvl+0x99/0x250
[  164.635411][    C1]  ? __asan_memcpy+0x40/0x70
[  164.637268][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.639451][    C1]  ? __pfx__printk+0x10/0x10
[  164.641345][    C1]  vpanic+0x281/0x750
[  164.642987][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  164.645110][    C1]  ? __pfx_vpanic+0x10/0x10
[  164.646972][    C1]  ? irqentry_exit+0x74/0x90
[  164.648895][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.651014][    C1]  panic+0xb9/0xc0
[  164.652534][    C1]  ? __pfx_panic+0x10/0x10
[  164.654307][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  164.656661][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  164.659216][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  164.661376][    C1]  check_panic_on_warn+0x89/0xb0
[  164.663378][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  164.665509][    C1]  end_report+0x78/0x160
[  164.667243][    C1]  kasan_report+0x129/0x150
[  164.669073][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  164.671232][    C1]  __xfrm_state_delete+0x696/0xca0
[  164.673291][    C1]  xfrm_timer_handler+0x18f/0xa00
[  164.675333][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  164.677518][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  164.679853][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.681906][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  164.684278][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  164.686740][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  164.688976][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  164.690964][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  164.693028][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  164.695279][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  164.697674][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  164.699700][    C1]  handle_softirqs+0x286/0x870
[  164.701568][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  164.703477][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  164.705533][    C1]  __irq_exit_rcu+0xca/0x1f0
[  164.707330][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  164.709377][    C1]  irq_exit_rcu+0x9/0x30
[  164.711119][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  164.713329][    C1]  </IRQ>
[  164.714500][    C1]  <TASK>
[  164.715665][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  164.718071][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  164.720131][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb e3 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  164.727561][    C1] RSP: 0018:ffffc90007027548 EFLAGS: 00000206
[  164.729914][    C1] RAX: 89f5048222e0b500 RBX: 0000000000000000 RCX: 89f5048222e0b500
[  164.732902][    C1] RDX: 0000000000000000 RSI: ffffffff8dba6151 RDI: ffffffff8be33400
[  164.736025][    C1] RBP: ffffffff8213bd04 R08: 0000000000000000 R09: ffffffff8213bd04
[  164.739073][    C1] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001
[  164.742178][    C1] R13: ffff8881099996d8 R14: 0000000000000001 R15: 0000000000000246
[  164.745291][    C1]  ? validate_mm+0x1d4/0x4b0
[  164.747135][    C1]  ? validate_mm+0x1d4/0x4b0
[  164.749053][    C1]  down_read+0x46/0x2e0
[  164.750727][    C1]  ? validate_mm+0x1d4/0x4b0
[  164.752529][    C1]  validate_mm+0x1d4/0x4b0
[  164.754303][    C1]  ? __pfx_validate_mm+0x10/0x10
[  164.756296][    C1]  ? __pfx_uprobe_mmap+0x10/0x10
[  164.758329][    C1]  ? vma_wants_writenotify+0xb3/0x2a0
[  164.760492][    C1]  ? vma_set_page_prot+0xc3/0x100
[  164.762541][    C1]  mmap_region+0x15a5/0x20c0
[  164.764447][    C1]  ? __pfx_mmap_region+0x10/0x10
[  164.766447][    C1]  ? mm_get_unmapped_area+0xa7/0xd0
[  164.768550][    C1]  ? bpf_lsm_mmap_addr+0x9/0x20
[  164.770540][    C1]  ? security_mmap_addr+0x71/0x270
[  164.772582][    C1]  ? shmem_mapping+0xd/0x50
[  164.774372][    C1]  ? memfd_check_seals_mmap+0x165/0x200
[  164.776579][    C1]  do_mmap+0xc45/0x10d0
[  164.778252][    C1]  ? __pfx_do_mmap+0x10/0x10
[  164.780072][    C1]  ? down_write_killable+0x178/0x230
[  164.782137][    C1]  ? __pfx_down_write_killable+0x10/0x10
[  164.784352][    C1]  ? common_file_perm+0x1b5/0x230
[  164.786327][    C1]  vm_mmap_pgoff+0x2a6/0x4d0
[  164.788128][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  164.790214][    C1]  ? __fget_files+0x2a/0x420
[  164.792009][    C1]  ? __fget_files+0x3a0/0x420
[  164.793848][    C1]  ? __fget_files+0x2a/0x420
[  164.795709][    C1]  ksys_mmap_pgoff+0x51f/0x760
[  164.797657][    C1]  do_syscall_64+0xfa/0x3b0
[  164.799469][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.801546][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.803902][    C1]  ? exc_page_fault+0x9f/0xf0
[  164.805796][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.808102][    C1] RIP: 0033:0x7f09fc18ebe9
[  164.809846][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.817316][    C1] RSP: 002b:00007f09fd046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  164.820547][    C1] RAX: ffffffffffffffda RBX: 00007f09fc3b6090 RCX: 00007f09fc18ebe9
[  164.823610][    C1] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000000000
[  164.826613][    C1] RBP: 00007f09fc211e19 R08: 0000000000000004 R09: 0000000000000000
[  164.829699][    C1] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000
[  164.832770][    C1] R13: 00007f09fc3b6128 R14: 00007f09fc3b6090 R15: 00007ffc92c5cbe8
[  164.835949][    C1]  </TASK>
[  164.837901][    C1] Kernel Offset: disabled
[  164.839607][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:39:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000000 RCX=01d424775f7b0d00 RDX=0000000000000000
RSI=ffffffff8172c1b2 RDI=ffffffff8e139ee0 RBP=ffffffff8172c195 RSP=ffffc90006fd6f48
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90006fd7118 R11=ffffffff81ac3870
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8222eab6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f58767ea6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=0000000028a02000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fa913212e53
XMM06=0000000000000000 00007fa913212e4d XMM07=0000000000000000 00007fa913212e61
XMM08=0000000000000000 00007fa913212ee7 XMM09=0000000000000000 00007fa913212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff888106658237 R9 =1ffff11020ccb046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9917 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f09fd0466c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555594566808 CR3=0000000108888000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f09fc387498 00007f09fc387470 XMM03=00007f09fc3874a8 00007f09fc3874a0
XMM04=00007f09fceed100 00007f09fc387460 XMM05=00007f09fc387478 00007f09fc3874c0
XMM06=00007f09fc3874b8 00007f09fc3874b0 XMM07=00007f09fc3874a8 00007f09fc3874a0
XMM08=0000000000000000 00007f09fc212ee7 XMM09=0000000000000000 00007f09fc212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
