last executing test programs:

812.500386ms ago: executing program 1 (id=337):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7}, 0x1c)

760.038764ms ago: executing program 1 (id=339):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000)

695.221041ms ago: executing program 1 (id=343):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000c80)={'ipvlan1\x00', &(0x7f0000000b80)=@ethtool_drvinfo={0x3, "b6a5a4c554b540f610881ddfc60c7c10be18a8a16e1fd36b19b498d996d2e6b1", "a0f5b5b9a6563713536a30f274de5a7be62afd1c93714b68f85659a4f8be4ae1", "53d063674ff30e6064e9f63d13bc359f93623f64dd4b0df3d38ef244e5eb57c4", "a6bceb100f1bcc066a312d29063a1ef04adedf160f1ab07016c4f7465c955a61", "4143967e44cb0bf2bffe750097e64bdeb49558d0cdb6a6324cf75d622f2be2d7", "e48958e49ee4338d590974d4", 0x7fff, 0x9, 0x8a, 0x5}})

637.875003ms ago: executing program 1 (id=347):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000580)=[{0x30, 0x9, 0x0, 0xfffff02c}, {0x80000006, 0x0, 0x0, 0x5}]}, 0x10)

589.693271ms ago: executing program 1 (id=350):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x803, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

529.995596ms ago: executing program 1 (id=353):
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000000206010200"/19], 0x4c}}, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x30, 0x61, 0x61, 0x4f]}}, &(0x7f00000001c0)=""/199, 0x1e, 0xc7, 0x1, 0x3, 0x10000}, 0x28)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)})
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r6, 0x6, 0xd, &(0x7f0000000000), 0x4)
setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000000), 0x4)
write(r4, &(0x7f0000000340)="ad4add7b05aa7618a9a6ca4ca0e606e6d7f26dd535c8e8d3e2c679285c6483da3d265ba2865c3891685846261c2611bd61f009cb159aafcd1f7b7d70cc8300dc6c4bfd3dff0a642b6d5bba1bd995597ac53cbbc238c1fc535c59c259b7e95745959beaa36b15d34ffe2eceb58857924b0d811d0d799b265f6f6ede5317a8d3cbdd771078913476167c094bc2e0c0f6fc35186e165a1e3dea326deffd", 0x9c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@local, @multicast2}, 0x10)

229.936864ms ago: executing program 0 (id=359):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000240), &(0x7f0000000140)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)

178.579502ms ago: executing program 2 (id=361):
r0 = socket(0x11, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
sendmsg$alg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x18, 0x4005}, 0x60009000)

178.35689ms ago: executing program 0 (id=362):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003ec0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0x11}, {0x10, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3}}, @TCA_FLOWER_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x40004)

119.501922ms ago: executing program 2 (id=363):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x40}, 0x0)

119.248915ms ago: executing program 2 (id=364):
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(r2, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14)

119.141172ms ago: executing program 2 (id=365):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001900010025bd7000fbcbdf250ab01400fd01fe040036000008001e00060004000c0017"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040884)

60.504492ms ago: executing program 0 (id=366):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
recvmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10041, 0x0)

60.106141ms ago: executing program 2 (id=367):
r0 = socket(0x2a, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x2, 0xa51, 0x40, @empty, @empty, 0x7800, 0x40, 0x1, 0x41}})

59.996246ms ago: executing program 0 (id=368):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "4f2e6ba215a4803e00197689c61d80fd77082da016ed6f57e335e66d992ecc0b", "ec2515b759b3f5332ab4b469d66cbcc85b36df0ce1b01672f2ee843e2f878f46", "f3a20e5218b94366490ccbc409a5574b309e6fb6413ddb14e88ab477c18c9dec", "4dcb3dc94ee568b0d592043ac4a986a87af55cb7f7e6f6ed4a35537a28122aba", "74a475c88c7796c5b0a2782159038caa0c0ba9cd03a86df4e81c9532e116be11", "86f56374ac0b296e321a4281", 0x3, 0x6, 0x1, 0x6, 0x7fff}})

486.686µs ago: executing program 2 (id=369):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001680)={r2, 0x7}, 0x8)

169.316µs ago: executing program 0 (id=370):
unshare(0x28020480)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xffffff2a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10)

0s ago: executing program 0 (id=371):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r0}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

kernel console output (not intermixed with test programs):

syzkaller login: [   46.275363][ T5763] dhcpcd-run-hook (5763) used greatest stack depth: 20504 bytes left
Warning: Permanently added '[localhost]:20300' (ED25519) to the list of known hosts.
[   50.009242][ T5804] cgroup: Unknown subsys name 'net'
[   50.134505][ T5804] cgroup: Unknown subsys name 'cpuset'
[   50.139050][ T5804] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.285805][ T5804] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.750028][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.762608][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.766615][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.770623][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.774353][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.786129][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.789755][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.794793][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.798795][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.802315][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.848681][ T5226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.862287][ T5226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.866126][ T5226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.873914][ T5226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.877914][ T5226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.095373][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   57.181270][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   57.230088][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.234058][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.237355][ T5835] bridge_slave_0: entered allmulticast mode
[   57.241211][ T5835] bridge_slave_0: entered promiscuous mode
[   57.248793][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.252303][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.255367][ T5835] bridge_slave_1: entered allmulticast mode
[   57.259321][ T5835] bridge_slave_1: entered promiscuous mode
[   57.349408][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.354915][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.357542][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.359944][ T5831] bridge_slave_0: entered allmulticast mode
[   57.365403][ T5831] bridge_slave_0: entered promiscuous mode
[   57.368734][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.371325][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.375083][ T5831] bridge_slave_1: entered allmulticast mode
[   57.378541][ T5831] bridge_slave_1: entered promiscuous mode
[   57.390044][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.458592][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.465060][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.477993][ T5835] team0: Port device team_slave_0 added
[   57.493478][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   57.518122][ T5835] team0: Port device team_slave_1 added
[   57.529872][ T5831] team0: Port device team_slave_0 added
[   57.566176][ T5831] team0: Port device team_slave_1 added
[   57.569647][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.572783][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.583562][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.617596][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.620478][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.631130][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.663695][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.666591][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.677764][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.696563][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.699482][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.710487][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.777691][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.780907][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.784387][ T5841] bridge_slave_0: entered allmulticast mode
[   57.788200][ T5841] bridge_slave_0: entered promiscuous mode
[   57.817771][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.820874][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.824201][ T5841] bridge_slave_1: entered allmulticast mode
[   57.828137][ T5841] bridge_slave_1: entered promiscuous mode
[   57.849040][ T5835] hsr_slave_0: entered promiscuous mode
[   57.852475][ T5835] hsr_slave_1: entered promiscuous mode
[   57.872556][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.882723][ T5831] hsr_slave_0: entered promiscuous mode
[   57.885968][ T5831] hsr_slave_1: entered promiscuous mode
[   57.888984][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.892883][ T5831] Cannot create hsr debugfs directory
[   57.898809][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.968471][ T5841] team0: Port device team_slave_0 added
[   58.004641][ T5841] team0: Port device team_slave_1 added
[   58.058005][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.060888][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.072271][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.088358][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.091203][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.103025][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.250153][ T5841] hsr_slave_0: entered promiscuous mode
[   58.254042][ T5841] hsr_slave_1: entered promiscuous mode
[   58.256957][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.260057][ T5841] Cannot create hsr debugfs directory
[   58.382807][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.406838][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.415162][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.434665][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.504404][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.512987][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.524789][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.550841][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.597629][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.606958][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.615154][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.630295][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.739851][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.781059][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   58.791020][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.801755][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.804998][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.825510][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.829105][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.848042][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   58.857456][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.870367][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.873489][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.883259][ T5226] Bluetooth: hci0: command tx timeout
[   58.883270][   T54] Bluetooth: hci1: command tx timeout
[   58.894459][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.897566][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.939996][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   58.961766][ T5226] Bluetooth: hci2: command tx timeout
[   58.968537][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.971633][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.001678][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.004694][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.200916][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.271501][ T5831] veth0_vlan: entered promiscuous mode
[   59.277700][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.299182][ T5831] veth1_vlan: entered promiscuous mode
[   59.309330][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.354858][ T5841] veth0_vlan: entered promiscuous mode
[   59.380274][ T5831] veth0_macvtap: entered promiscuous mode
[   59.386845][ T5841] veth1_vlan: entered promiscuous mode
[   59.391152][ T5831] veth1_macvtap: entered promiscuous mode
[   59.424479][ T5835] veth0_vlan: entered promiscuous mode
[   59.436424][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.439784][ T5841] veth0_macvtap: entered promiscuous mode
[   59.449811][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.458968][ T5841] veth1_macvtap: entered promiscuous mode
[   59.466790][ T5835] veth1_vlan: entered promiscuous mode
[   59.472632][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.476481][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.480180][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.485088][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.509873][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.520823][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.541116][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.548181][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.553505][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.556760][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.618786][ T5835] veth0_macvtap: entered promiscuous mode
[   59.635329][ T5835] veth1_macvtap: entered promiscuous mode
[   59.640845][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.654277][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.704083][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.717532][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.722778][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.726622][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.764889][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.768534][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.781934][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.785385][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.801011][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.813407][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.819833][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.865851][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.869243][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.983378][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.986505][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.049980][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.065307][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.595101][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'.
[   60.609052][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'.
[   60.716230][ T5943] syz.0.19 uses obsolete (PF_INET,SOCK_PACKET)
[   60.897826][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'.
[   60.962378][ T5226] Bluetooth: hci0: command tx timeout
[   60.973594][ T5226] Bluetooth: hci1: command tx timeout
[   60.999653][ T5967] vlan2: entered allmulticast mode
[   61.002100][ T5967] veth1: entered allmulticast mode
[   61.041954][ T5226] Bluetooth: hci2: command tx timeout
[   61.086039][ T5969] warning: `syz.1.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.115437][ T5971] netlink: 788 bytes leftover after parsing attributes in process `syz.2.32'.
[   61.178741][ T5975] xt_CT: You must specify a L4 protocol and not use inversions on it
[   61.447853][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'.
[   61.463495][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'.
[   61.478783][ T5991] batadv0: entered promiscuous mode
[   61.480575][ T5991] macsec1: entered allmulticast mode
[   61.484296][ T5991] batadv0: entered allmulticast mode
[   61.488141][ T5991] batadv0: left allmulticast mode
[   61.490709][ T5991] batadv0: left promiscuous mode
[   61.553496][ T6002] netlink: 'syz.1.46': attribute type 4 has an invalid length.
[   61.866885][ T6018] netlink: 'syz.1.54': attribute type 29 has an invalid length.
[   61.974740][ T6027] ieee802154 phy0 wpan0: encryption failed: -22
[   62.434707][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.448734][ T6056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.452082][ T6056] IPv6: NLM_F_CREATE should be set when creating new route
[   62.484390][ T6056] lo: entered allmulticast mode
[   62.497565][ T6056] tunl0: entered allmulticast mode
[   62.505663][ T6056] gre0: entered allmulticast mode
[   62.523879][ T6062] netlink: 'syz.0.76': attribute type 11 has an invalid length.
[   62.527604][ T6062] netlink: 244 bytes leftover after parsing attributes in process `syz.0.76'.
[   62.527869][ T6056] gretap0: entered allmulticast mode
[   62.554304][ T6056] erspan0: entered allmulticast mode
[   62.562858][ T6056] ip_vti0: entered allmulticast mode
[   62.567247][ T6056] ip6_vti0: entered allmulticast mode
[   62.574315][ T6056] sit0: entered allmulticast mode
[   62.580477][ T6056] ip6tnl0: entered allmulticast mode
[   62.591217][ T6056] ip6gre0: entered allmulticast mode
[   62.599040][ T6056] syz_tun: entered allmulticast mode
[   62.607764][ T6056] ip6gretap0: entered allmulticast mode
[   62.616076][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.619942][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.628962][ T6056] bridge0: entered allmulticast mode
[   62.635382][ T6056] vcan0: entered allmulticast mode
[   62.640181][ T6056] bond0: entered allmulticast mode
[   62.644789][ T6056] bond_slave_0: entered allmulticast mode
[   62.647368][ T6056] bond_slave_1: entered allmulticast mode
[   62.655188][ T6056] team0: entered allmulticast mode
[   62.658380][ T6056] team_slave_0: entered allmulticast mode
[   62.663893][ T6056] team_slave_1: entered allmulticast mode
[   62.671138][ T6056] dummy0: entered allmulticast mode
[   62.677543][ T6056] nlmon0: entered allmulticast mode
[   62.682135][ T6056] caif0: entered allmulticast mode
[   62.684875][ T6056] batadv0: entered allmulticast mode
[   62.690860][ T6056] vxcan0: entered allmulticast mode
[   62.694883][ T6056] vxcan1: entered allmulticast mode
[   62.697864][ T6056] veth0: entered allmulticast mode
[   62.703055][ T6056] veth1: entered allmulticast mode
[   62.709698][ T6056] wg0: entered allmulticast mode
[   62.714605][ T6056] wg1: entered allmulticast mode
[   62.725018][ T6056] wg2: entered allmulticast mode
[   62.729628][ T6056] veth0_to_bridge: entered allmulticast mode
[   62.738717][ T6056] veth1_to_bridge: entered allmulticast mode
[   62.747094][ T6056] veth0_to_bond: entered allmulticast mode
[   62.753699][ T6056] veth1_to_bond: entered allmulticast mode
[   62.759721][ T6056] veth0_to_team: entered allmulticast mode
[   62.768647][ T6056] veth1_to_team: entered allmulticast mode
[   62.779315][ T6056] veth0_to_batadv: entered allmulticast mode
[   62.785065][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.788565][ T6056] batadv_slave_0: entered allmulticast mode
[   62.795808][ T6056] veth1_to_batadv: entered allmulticast mode
[   62.800982][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.805260][ T6056] batadv_slave_1: entered allmulticast mode
[   62.811208][ T6056] xfrm0: entered allmulticast mode
[   62.816807][ T6056] veth0_to_hsr: entered allmulticast mode
[   62.823135][ T6056] hsr_slave_0: entered allmulticast mode
[   62.827635][ T6056] veth1_to_hsr: entered allmulticast mode
[   62.833132][ T6056] hsr_slave_1: entered allmulticast mode
[   62.839188][ T6056] hsr0: entered allmulticast mode
[   62.844218][ T6056] veth1_virt_wifi: entered allmulticast mode
[   62.849555][ T6056] veth0_virt_wifi: entered allmulticast mode
[   62.856786][ T6056] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   62.860450][ T6056] veth1_vlan: entered allmulticast mode
[   62.865827][ T6056] veth0_vlan: entered allmulticast mode
[   62.878862][ T6056] vlan0: entered allmulticast mode
[   62.881345][ T6056] vlan1: entered allmulticast mode
[   62.885526][ T6056] macvlan0: entered allmulticast mode
[   62.891025][ T6056] macvlan1: entered allmulticast mode
[   62.896896][ T6056] ipvlan0: entered allmulticast mode
[   62.899324][ T6056] ipvlan1: entered allmulticast mode
[   62.904770][ T6056] veth1_macvtap: entered allmulticast mode
[   62.910264][ T6056] veth0_macvtap: entered allmulticast mode
[   62.917465][ T6056] macvtap0: entered allmulticast mode
[   62.924687][ T6056] macsec0: entered allmulticast mode
[   62.931017][ T6056] geneve0: entered allmulticast mode
[   62.936803][ T6056] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.940825][ T6056] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.944893][ T6056] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.948628][ T6056] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.954303][ T6056] geneve1: entered allmulticast mode
[   62.963869][ T6056] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   62.976795][ T6056] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[   62.983502][ T6056] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[   62.989925][ T6056] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[   63.004677][ T6056] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   63.016359][ T6056] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   63.021272][ T6056] mac80211_hwsim hwsim8 wlan2: entered allmulticast mode
[   63.042384][ T5226] Bluetooth: hci1: command tx timeout
[   63.121856][ T5226] Bluetooth: hci2: command tx timeout
[   63.246397][ T6086] ip6t_srh: unknown srh invflags 4449
[   63.413532][ T6097] netlink: 48 bytes leftover after parsing attributes in process `syz.0.87'.
[   64.319959][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   64.325193][ T6111] netlink: 'syz.2.92': attribute type 3 has an invalid length.
[   64.325244][ T6111] netlink: 224 bytes leftover after parsing attributes in process `syz.2.92'.
[   64.399113][ T6116] netlink: 'syz.2.94': attribute type 1 has an invalid length.
[   64.816596][ T6132] macvtap0: left allmulticast mode
[   65.026796][ T6149] netlink: 'syz.2.111': attribute type 1 has an invalid length.
[   65.037526][ T6149] netlink: 'syz.2.111': attribute type 10 has an invalid length.
[   65.122799][ T5226] Bluetooth: hci1: command tx timeout
[   65.212308][ T5226] Bluetooth: hci2: command tx timeout
[   65.775866][ T6204] __nla_validate_parse: 4 callbacks suppressed
[   65.775882][ T6204] netlink: 10 bytes leftover after parsing attributes in process `syz.0.137'.
[   65.910616][ T6210] syz.0.140 uses old SIOCAX25GETINFO
[   66.346617][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'.
[   66.361775][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.374334][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.419154][ T6247] netlink: 'syz.0.155': attribute type 12 has an invalid length.
[   66.422711][ T6247] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.155'.
[   66.477705][ T6250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'.
[   66.499017][ T6250] netlink: 224 bytes leftover after parsing attributes in process `syz.1.157'.
[   67.190676][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'.
[   67.368236][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.185'.
[   67.450954][ T6314] vlan2: entered promiscuous mode
[   67.453213][ T6314] dummy0: entered promiscuous mode
[   67.508894][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'.
[   67.549870][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'.
[   67.741184][ T6334] netlink: 'syz.1.197': attribute type 21 has an invalid length.
[   67.746882][ T6334] netlink: 36 bytes leftover after parsing attributes in process `syz.1.197'.
[   67.762119][    C1] Unknown status report in ack skb
[   67.799725][ T6332] ipt_rpfilter: unknown options
[   68.098363][ T6357] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   68.818105][ T6402] nft_compat: unsupported protocol 0
[   68.909876][ T6408] openvswitch: netlink: Multiple metadata blocks provided
[   68.953134][ T6412] netlink: 'syz.1.234': attribute type 58 has an invalid length.
[   69.210448][ T6430] netlink: 'syz.1.242': attribute type 282 has an invalid length.
[   69.333967][ T6441] ip6t_srh: unknown srh invflags 4449
[   70.334613][ T5883] IPVS: starting estimator thread 0...
[   70.421896][ T6456] IPVS: using max 80 ests per chain, 192000 per kthread
[   70.540332][ T6473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   70.543272][ T6473] IPv6: NLM_F_CREATE should be set when creating new route
[   70.546128][ T6473] IPv6: NLM_F_CREATE should be set when creating new route
[   70.966485][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.969148][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.163262][ T6489] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.415858][ T6497] Zero length message leads to an empty skb
[   71.491899][ T6503] bond_slave_0: entered promiscuous mode
[   71.494612][ T6503] bond_slave_1: entered promiscuous mode
[   71.497592][ T6503] vlan2: entered promiscuous mode
[   71.499773][ T6503] bond0: entered promiscuous mode
[   71.823663][ T6523] __nla_validate_parse: 4 callbacks suppressed
[   71.823675][ T6523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.284'.
[   71.898504][ T6529] netlink: 44 bytes leftover after parsing attributes in process `syz.2.287'.
[   71.909678][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'.
[   72.021232][ T6534] netlink: 'syz.2.289': attribute type 1 has an invalid length.
[   72.109795][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'.
[   72.173375][ T6552] xt_l2tp: unknown flags: 10
[   72.289459][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.302'.
[   72.295199][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.302'.
[   72.311096][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.302'.
[   72.338445][ T6570] xt_time: invalid argument - start or stop time greater than 23:59:59
[   72.405899][ T6576] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[   72.409831][ T6576] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[   72.497446][ T6585] xt_limit: Overflow, try lower: 262144/524288
[   72.666179][ T6601] openvswitch: netlink: Key type 4840 is out of range max 32
[   72.802117][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'.
[   72.806227][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'.
[   72.810203][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'.
[   73.908015][ T6672] Bluetooth: MGMT ver 1.23
[   73.977018][ T6678] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   74.037957][ T6683] bridge_slave_0: left promiscuous mode
[   74.044263][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.049790][ T6683] bridge_slave_1: left promiscuous mode
[   74.054911][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.062058][ T6683] bond0: (slave bond_slave_0): Releasing backup interface
[   74.067292][ T6683] bond0: (slave bond_slave_1): Releasing backup interface
[   74.078246][ T6683] team0: Failed to send options change via netlink (err -105)
[   74.092609][ T6683] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   74.098701][ T6683] team0: Port device team_slave_0 removed
[   74.107150][ T6683] team0: Failed to send options change via netlink (err -105)
[   74.110455][ T6683] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   74.115384][ T6683] team0: Port device team_slave_1 removed
[   74.306813][ T6700] netlink: 'syz.2.365': attribute type 23 has an invalid length.
[   74.435416][ T6714] netlink: 'syz.0.372': attribute type 10 has an invalid length.
[   74.449817][ T6714] team0: Port device dummy0 added
[   74.453967][ T6714] netlink: 'syz.0.372': attribute type 10 has an invalid length.
[   74.456873][ T6714] 
[   74.457686][ T6714] ======================================================
[   74.460027][ T6714] WARNING: possible circular locking dependency detected
[   74.462356][ T6714] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   74.466024][ T6714] ------------------------------------------------------
[   74.468238][ T6714] syz.0.372/6714 is trying to acquire lock:
[   74.470151][ T6714] ffff88801fb34e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[   74.473396][ T6714] 
[   74.473396][ T6714] but task is already holding lock:
[   74.476134][ T6714] ffff888022f0cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   74.479512][ T6714] 
[   74.479512][ T6714] which lock already depends on the new lock.
[   74.479512][ T6714] 
[   74.482878][ T6714] 
[   74.482878][ T6714] the existing dependency chain (in reverse order) is:
[   74.486193][ T6714] 
[   74.486193][ T6714] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   74.489227][ T6714]        lock_acquire+0x120/0x360
[   74.491156][ T6714]        __mutex_lock+0x182/0xe80
[   74.493132][ T6714]        dev_set_mtu+0x10e/0x260
[   74.494758][ T6714]        team_add_slave+0x8b8/0x2840
[   74.496598][ T6714]        do_set_master+0x533/0x6d0
[   74.498306][ T6714]        do_setlink+0xcf0/0x41c0
[   74.499952][ T6714]        rtnl_newlink+0x160b/0x1c70
[   74.501901][ T6714]        rtnetlink_rcv_msg+0x7cf/0xb70
[   74.503795][ T6714]        netlink_rcv_skb+0x208/0x470
[   74.505575][ T6714]        netlink_unicast+0x75b/0x8d0
[   74.507345][ T6714]        netlink_sendmsg+0x805/0xb30
[   74.509178][ T6714]        __sock_sendmsg+0x21c/0x270
[   74.510997][ T6714]        ____sys_sendmsg+0x505/0x830
[   74.513117][ T6714]        ___sys_sendmsg+0x21f/0x2a0
[   74.515285][ T6714]        __x64_sys_sendmsg+0x19b/0x260
[   74.517454][ T6714]        do_syscall_64+0xfa/0x3b0
[   74.519219][ T6714]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.521341][ T6714] 
[   74.521341][ T6714] -> #0 (team->team_lock_key#2){+.+.}-{4:4}:
[   74.524077][ T6714]        validate_chain+0xb9b/0x2140
[   74.525827][ T6714]        __lock_acquire+0xab9/0xd20
[   74.527583][ T6714]        lock_acquire+0x120/0x360
[   74.529324][ T6714]        __mutex_lock+0x182/0xe80
[   74.530999][ T6714]        team_device_event+0x182/0xa20
[   74.532826][ T6714]        notifier_call_chain+0x1b6/0x3e0
[   74.534710][ T6714]        __dev_notify_flags+0x18d/0x2e0
[   74.536443][ T6714]        netif_change_flags+0xe8/0x1a0
[   74.538200][ T6714]        do_setlink+0xc55/0x41c0
[   74.539772][ T6714]        rtnl_newlink+0x160b/0x1c70
[   74.541410][ T6714]        rtnetlink_rcv_msg+0x7cf/0xb70
[   74.543262][ T6714]        netlink_rcv_skb+0x208/0x470
[   74.545327][ T6714]        netlink_unicast+0x75b/0x8d0
[   74.547537][ T6714]        netlink_sendmsg+0x805/0xb30
[   74.549642][ T6714]        __sock_sendmsg+0x21c/0x270
[   74.551391][ T6714]        ____sys_sendmsg+0x505/0x830
[   74.553485][ T6714]        ___sys_sendmsg+0x21f/0x2a0
[   74.555410][ T6714]        __x64_sys_sendmsg+0x19b/0x260
[   74.557267][ T6714]        do_syscall_64+0xfa/0x3b0
[   74.558952][ T6714]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.561106][ T6714] 
[   74.561106][ T6714] other info that might help us debug this:
[   74.561106][ T6714] 
[   74.564438][ T6714]  Possible unsafe locking scenario:
[   74.564438][ T6714] 
[   74.567255][ T6714]        CPU0                    CPU1
[   74.569172][ T6714]        ----                    ----
[   74.571106][ T6714]   lock(&dev_instance_lock_key#3);
[   74.573058][ T6714]                                lock(team->team_lock_key#2);
[   74.575870][ T6714]                                lock(&dev_instance_lock_key#3);
[   74.578492][ T6714]   lock(team->team_lock_key#2);
[   74.580162][ T6714] 
[   74.580162][ T6714]  *** DEADLOCK ***
[   74.580162][ T6714] 
[   74.582792][ T6714] 2 locks held by syz.0.372/6714:
[   74.584468][ T6714]  #0: ffffffff8f51c948 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[   74.587440][ T6714]  #1: ffff888022f0cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   74.590744][ T6714] 
[   74.590744][ T6714] stack backtrace:
[   74.592934][ T6714] CPU: 0 UID: 0 PID: 6714 Comm: syz.0.372 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   74.592948][ T6714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.592956][ T6714] Call Trace:
[   74.592962][ T6714]  <TASK>
[   74.592998][ T6714]  dump_stack_lvl+0x189/0x250
[   74.593016][ T6714]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.593029][ T6714]  ? __pfx__printk+0x10/0x10
[   74.593045][ T6714]  ? print_lock_name+0xde/0x100
[   74.593060][ T6714]  print_circular_bug+0x2ee/0x310
[   74.593077][ T6714]  check_noncircular+0x134/0x160
[   74.593091][ T6714]  validate_chain+0xb9b/0x2140
[   74.593105][ T6714]  ? __lock_acquire+0xab9/0xd20
[   74.593118][ T6714]  __lock_acquire+0xab9/0xd20
[   74.593130][ T6714]  ? team_device_event+0x182/0xa20
[   74.593145][ T6714]  lock_acquire+0x120/0x360
[   74.593155][ T6714]  ? team_device_event+0x182/0xa20
[   74.593171][ T6714]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   74.593189][ T6714]  __mutex_lock+0x182/0xe80
[   74.593200][ T6714]  ? team_device_event+0x182/0xa20
[   74.593217][ T6714]  ? __try_to_del_timer_sync+0x34a/0x3a0
[   74.593232][ T6714]  ? team_device_event+0x182/0xa20
[   74.593248][ T6714]  ? __pfx___mutex_lock+0x10/0x10
[   74.593257][ T6714]  ? __timer_delete_sync+0x218/0x2d0
[   74.593276][ T6714]  team_device_event+0x182/0xa20
[   74.593291][ T6714]  notifier_call_chain+0x1b6/0x3e0
[   74.593306][ T6714]  __dev_notify_flags+0x18d/0x2e0
[   74.593321][ T6714]  ? __pfx___dev_notify_flags+0x10/0x10
[   74.593333][ T6714]  ? __dev_change_flags+0x4cc/0x6d0
[   74.593348][ T6714]  ? __pfx___dev_change_flags+0x10/0x10
[   74.593361][ T6714]  ? __pfx_console_unlock+0x10/0x10
[   74.593374][ T6714]  ? irq_work_queue+0xc3/0x140
[   74.593386][ T6714]  netif_change_flags+0xe8/0x1a0
[   74.593400][ T6714]  do_setlink+0xc55/0x41c0
[   74.593417][ T6714]  ? __pfx_do_setlink+0x10/0x10
[   74.593430][ T6714]  ? _printk+0xcf/0x120
[   74.593442][ T6714]  ? __pfx____ratelimit+0x10/0x10
[   74.593461][ T6714]  ? __lock_acquire+0xab9/0xd20
[   74.593473][ T6714]  ? __mutex_trylock_common+0x153/0x260
[   74.593486][ T6714]  ? __pfx___mutex_trylock_common+0x10/0x10
[   74.593500][ T6714]  ? rcu_is_watching+0x15/0xb0
[   74.593512][ T6714]  ? trace_contention_end+0x39/0x120
[   74.593525][ T6714]  ? __mutex_lock+0x330/0xe80
[   74.593536][ T6714]  ? __pfx_aa_get_newest_label+0x10/0x10
[   74.593553][ T6714]  ? rtnl_newlink+0x8db/0x1c70
[   74.593564][ T6714]  ? rcu_is_watching+0x15/0xb0
[   74.593576][ T6714]  ? __pfx___mutex_lock+0x10/0x10
[   74.593587][ T6714]  ? ns_capable+0x8a/0xf0
[   74.593600][ T6714]  ? rtnl_link_get_net_capable+0x16a/0x350
[   74.593614][ T6714]  rtnl_newlink+0x160b/0x1c70
[   74.593624][ T6714]  ? netlink_sendmsg+0x805/0xb30
[   74.593640][ T6714]  ? __pfx_rtnl_newlink+0x10/0x10
[   74.593656][ T6714]  ? kasan_quarantine_put+0xdd/0x220
[   74.593668][ T6714]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.593679][ T6714]  ? nlmon_xmit+0xb0/0x100
[   74.593690][ T6714]  ? kmem_cache_free+0x18f/0x400
[   74.593704][ T6714]  ? __local_bh_enable_ip+0x12d/0x1c0
[   74.593716][ T6714]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.593726][ T6714]  ? __local_bh_enable_ip+0x12d/0x1c0
[   74.593737][ T6714]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   74.593751][ T6714]  ? __dev_queue_xmit+0x27e/0x3a70
[   74.593769][ T6714]  ? __lock_acquire+0xab9/0xd20
[   74.593784][ T6714]  ? __pfx_rtnl_newlink+0x10/0x10
[   74.593795][ T6714]  rtnetlink_rcv_msg+0x7cf/0xb70
[   74.593813][ T6714]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   74.593824][ T6714]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   74.593836][ T6714]  ? ref_tracker_free+0x63a/0x7d0
[   74.593846][ T6714]  ? __copy_skb_header+0xa7/0x550
[   74.593862][ T6714]  ? __pfx_ref_tracker_free+0x10/0x10
[   74.593873][ T6714]  ? __skb_clone+0x63/0x7a0
[   74.593889][ T6714]  netlink_rcv_skb+0x208/0x470
[   74.593903][ T6714]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   74.593915][ T6714]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   74.593930][ T6714]  ? netlink_deliver_tap+0x2e/0x1b0
[   74.593942][ T6714]  ? netlink_deliver_tap+0x2e/0x1b0
[   74.593956][ T6714]  netlink_unicast+0x75b/0x8d0
[   74.593996][ T6714]  netlink_sendmsg+0x805/0xb30
[   74.594014][ T6714]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.594028][ T6714]  ? aa_sock_msg_perm+0x94/0x160
[   74.594045][ T6714]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   74.594055][ T6714]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.594068][ T6714]  __sock_sendmsg+0x21c/0x270
[   74.594079][ T6714]  ____sys_sendmsg+0x505/0x830
[   74.594095][ T6714]  ? __pfx_____sys_sendmsg+0x10/0x10
[   74.594110][ T6714]  ? import_iovec+0x74/0xa0
[   74.594124][ T6714]  ___sys_sendmsg+0x21f/0x2a0
[   74.594137][ T6714]  ? __pfx____sys_sendmsg+0x10/0x10
[   74.594157][ T6714]  ? __fget_files+0x2a/0x420
[   74.594171][ T6714]  ? __fget_files+0x3a0/0x420
[   74.594188][ T6714]  __x64_sys_sendmsg+0x19b/0x260
[   74.594201][ T6714]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   74.594218][ T6714]  ? rcu_is_watching+0x15/0xb0
[   74.594230][ T6714]  ? do_syscall_64+0xbe/0x3b0
[   74.594242][ T6714]  do_syscall_64+0xfa/0x3b0
[   74.594252][ T6714]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.594261][ T6714]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.594271][ T6714]  ? exc_page_fault+0x9f/0xf0
[   74.594287][ T6714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.594298][ T6714] RIP: 0033:0x7f9f8498e929
[   74.594309][ T6714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.594318][ T6714] RSP: 002b:00007f9f8580e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   74.594330][ T6714] RAX: ffffffffffffffda RBX: 00007f9f84bb5fa0 RCX: 00007f9f8498e929
[   74.594338][ T6714] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008
[   74.594344][ T6714] RBP: 00007f9f84a10b39 R08: 0000000000000000 R09: 0000000000000000
[   74.594351][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.594357][ T6714] R13: 0000000000000000 R14: 00007f9f84bb5fa0 R15: 00007ffe8cfc58b8
[   74.594368][ T6714]  </TASK>
[   74.795238][   T54] Bluetooth: hci2: command 0x0405 tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   74.870066][ T6714] team0: Port device dummy0 removed
[   74.875430][ T6714] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   75.520711][ T5881] bond0 (unregistering): Released all slaves
[   75.738006][ T5881] hsr_slave_0: left promiscuous mode
[   75.740707][ T5881] hsr_slave_1: left promiscuous mode
[   76.334849][ T5881] IPVS: stop unused estimator thread 0...
[   81.204928][  T973] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
03:52:13  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002a0d RDI=0000000000002a0e RBP=00000000000003f8 RSP=ffffc9000876df10
R8 =ffff888107d88237 R9 =1ffff11020fb1046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78e5 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9f8580e6c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c393dfe CR3=0000000029816000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f65fe011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e13ee60 RBP=ffffffff81729af5 RSP=ffffc9000476f310
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc9000476f558 R11=fffff520008edead
R12=0000000000000002 R13=ffffffff8e13ee60 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8b6f01a0 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001680 CR3=0000000029814000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f65fe184478 00007f65fe184450 XMM03=00007f65fe184488 00007f65fe184480
XMM04=00007f65feced100 00007f65fe184440 XMM05=00007f65fe184458 00007f65fe1844a0
XMM06=00007f65fe184498 00007f65fe184490 XMM07=00007f65fe184488 00007f65fe184480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f65fe011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
