last executing test programs:

593.938335ms ago: executing program 2 (id=362):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

523.057155ms ago: executing program 2 (id=366):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc004)

497.405368ms ago: executing program 1 (id=367):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005740)=ANY=[@ANYBLOB="24000000330007ff0f00000000000000037c"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x40010)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)

384.570007ms ago: executing program 1 (id=369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

383.785208ms ago: executing program 2 (id=371):
syz_init_net_socket$ax25(0x3, 0x3, 0x1)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000200)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000001000000000037a80000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)

333.787938ms ago: executing program 0 (id=372):
syz_emit_ethernet(0xdf1, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0xdbb, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x5e, 0xa, 0x4, 0x5, 0x0, 0x28, 0x1, [@private0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x62, 0x18c, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0x3a, 0x6, [0xfffffffffffffffc, 0x8000, 0x100000000, 0x80000001, 0x7, 0x9, 0x5, 0xffffffffffffff01]}}, @ra, @calipso={0x7, 0x38, {0x3, 0xc, 0x9, 0x1, [0x2000000, 0xcf, 0x5, 0x7, 0xfff, 0x5]}}, @generic={0x8a, 0xbcf, "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"}]}], {0x4e20, 0x4e21, 0xfb, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}, "26bc4d426df105a1b58f88af5302632add03e74e52382f19361f1ac1f419c10d8b6bcf60e47c33ead5f2965f642051faafa26d8ebe6a0e0cace9ef28675a63eca98617a63b857c37b5785c467a08a996f9aa07fe5cab460e9de65bd9e2ad58279e4f028fc7a6b55dc1d00e27cb2ad9861d298078b453f5dbb2241454dc9b9bc17b74bdd8ad9bf50703c1d01160085441e3ea5a106541ac9d52358163e17b4702087136898c219933a98f9110629833a0c862f81772042367f47bf94d89459688ae2ecd90d87f258f6f821ae7b9b1ebf9d870f62da8c66c69fd85a5c1e297edea907ab62050183c7dd6ae1d16420da1"}}}}}}}, 0x0)

333.505249ms ago: executing program 1 (id=373):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
unshare(0x6020400)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000400000004000000090000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x2, r6}, 0x38)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x8004)
sendmsg$nl_route_sched(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtaction={0x18, 0x30, 0x51b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
recvfrom(r5, &(0x7f0000000380)=""/245, 0xf5, 0x2003, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0xf0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e15", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB], 0x24}}, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x3e, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180))
socket(0x10, 0x3, 0x0)

333.23378ms ago: executing program 2 (id=374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1, 0x70bd2a}, 0x1c}}, 0x0)

264.478313ms ago: executing program 0 (id=375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x24604, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x26}, @IFLA_AF_SPEC={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008810}, 0x20040850)

264.025773ms ago: executing program 2 (id=376):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4080001)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080)
r10 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r10, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x17, r8, 0x1, 0xf9}, 0x14)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r12, 0x2000012, 0xffffffffffffffca, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$bt_l2cap(r11, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe)
connect$bt_l2cap(r11, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3fcf00"/28], 0x48)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf86000000000000070800", @ANYRES32=r14, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xe0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x9f, 0x7, 0x1, 0x0, "ae30c6652469d550a8437e3e8b97770333c319c0df32f1650cf3bc1fb039336bc6eac347403829945d23b77ab77b46f5d56b910b6d11f60ed30ee657c6a80a56a1e6b8d81eff55fc789dcb0ba37ae7ae2384db372594d89857d1681b74369369ca3e38fea5f93939074886098ca26d7f083ee2b75acff176928b4b9336481c058901157bed37577ad5242a4cb9f219201e97408876ddf4eafc93f0"}]}], {0x14}}, 0x154}}, 0x0)

213.776537ms ago: executing program 0 (id=377):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r1=>0x0})
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r3=>r1, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}})

162.721864ms ago: executing program 0 (id=378):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123dee2dd2b184b256482322de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28"], 0xe0}], 0x1}, 0x40040)

156.058007ms ago: executing program 1 (id=379):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'blkio'}]}, 0x7)

74.065954ms ago: executing program 2 (id=380):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0xc, 0x4)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)

73.841346ms ago: executing program 1 (id=381):
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0)

73.414625ms ago: executing program 0 (id=382):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xfdef)

1.373738ms ago: executing program 0 (id=383):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$int_in(r2, 0x5452, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4)

0s ago: executing program 1 (id=384):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45001' (ED25519) to the list of known hosts.
syzkaller login: [   56.150900][ T5794] cgroup: Unknown subsys name 'net'
[   56.317386][ T5794] cgroup: Unknown subsys name 'cpuset'
[   56.323175][ T5794] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.019146][ T5794] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.988315][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.992062][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.994668][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.997690][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.000473][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.025005][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.028209][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.030947][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.033764][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.037069][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.067477][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.070943][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.074238][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.083148][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.085569][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.351507][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   70.459273][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.462149][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.464898][ T5861] bridge_slave_0: entered allmulticast mode
[   70.467929][ T5861] bridge_slave_0: entered promiscuous mode
[   70.511402][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.514220][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.516870][ T5861] bridge_slave_1: entered allmulticast mode
[   70.520008][ T5861] bridge_slave_1: entered promiscuous mode
[   70.526121][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   70.569027][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   70.586252][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.604891][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.664235][ T5861] team0: Port device team_slave_0 added
[   70.683720][ T5861] team0: Port device team_slave_1 added
[   70.690863][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.693202][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.695283][ T5864] bridge_slave_0: entered allmulticast mode
[   70.697868][ T5864] bridge_slave_0: entered promiscuous mode
[   70.734949][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.736973][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.739048][ T5864] bridge_slave_1: entered allmulticast mode
[   70.742148][ T5864] bridge_slave_1: entered promiscuous mode
[   70.763789][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.766317][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.768696][ T5868] bridge_slave_0: entered allmulticast mode
[   70.771226][ T5868] bridge_slave_0: entered promiscuous mode
[   70.786549][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.788543][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.797434][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.801725][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.804719][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.807205][ T5868] bridge_slave_1: entered allmulticast mode
[   70.810064][ T5868] bridge_slave_1: entered promiscuous mode
[   70.815490][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.818806][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.821306][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.829164][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.841740][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.885107][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.890874][ T5864] team0: Port device team_slave_0 added
[   70.896083][ T5864] team0: Port device team_slave_1 added
[   70.927515][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.945241][ T5861] hsr_slave_0: entered promiscuous mode
[   70.947402][ T5861] hsr_slave_1: entered promiscuous mode
[   70.974399][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.976316][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.983744][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.998094][ T5868] team0: Port device team_slave_0 added
[   71.001635][ T5868] team0: Port device team_slave_1 added
[   71.014697][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.017108][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.025699][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.054385][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.056428][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.064627][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.068905][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.070841][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.079636][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.155368][ T5864] hsr_slave_0: entered promiscuous mode
[   71.158067][ T5864] hsr_slave_1: entered promiscuous mode
[   71.160309][ T5864] debugfs: 'hsr0' already exists in 'hsr'
[   71.162314][ T5864] Cannot create hsr debugfs directory
[   71.193636][ T5868] hsr_slave_0: entered promiscuous mode
[   71.196206][ T5868] hsr_slave_1: entered promiscuous mode
[   71.198763][ T5868] debugfs: 'hsr0' already exists in 'hsr'
[   71.200761][ T5868] Cannot create hsr debugfs directory
[   71.479805][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.491879][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.498327][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.512171][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.568434][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.573739][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.584060][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.602375][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.665660][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.674823][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.680978][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.696255][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.737242][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.782066][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   71.802885][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.805305][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.814318][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.817238][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.829225][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.833463][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.835991][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.877150][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   71.897293][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.910241][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.912761][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.926443][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.929064][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.965767][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   71.979852][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.982052][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.998334][ T5868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.001996][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.019605][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.022232][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.045010][ T5866] Bluetooth: hci1: command tx timeout
[   72.101290][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.128289][ T5866] Bluetooth: hci2: command tx timeout
[   72.130339][ T5866] Bluetooth: hci0: command tx timeout
[   72.171538][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.230311][ T5861] veth0_vlan: entered promiscuous mode
[   72.246773][ T5861] veth1_vlan: entered promiscuous mode
[   72.259575][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.273644][ T5864] veth0_vlan: entered promiscuous mode
[   72.289718][ T5864] veth1_vlan: entered promiscuous mode
[   72.322183][ T5861] veth0_macvtap: entered promiscuous mode
[   72.341406][ T5861] veth1_macvtap: entered promiscuous mode
[   72.355736][ T5868] veth0_vlan: entered promiscuous mode
[   72.368907][ T5864] veth0_macvtap: entered promiscuous mode
[   72.376864][ T5864] veth1_macvtap: entered promiscuous mode
[   72.380253][ T5868] veth1_vlan: entered promiscuous mode
[   72.398624][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.417560][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.428753][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.446184][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.450118][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.457510][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.464775][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.468062][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.484159][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.500539][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.504949][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.510555][ T5868] veth0_macvtap: entered promiscuous mode
[   72.514188][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.536917][ T5868] veth1_macvtap: entered promiscuous mode
[   72.630152][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.639727][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.639743][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.642320][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.647275][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.662103][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.688403][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.690677][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.704845][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.733601][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.738785][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.750407][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.756385][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.761687][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.778378][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   72.844976][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.847654][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.907934][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.908034][ T5927] netlink: 'syz.1.39': attribute type 3 has an invalid length.
[   72.915404][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.058802][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.071461][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.210051][ T5942] vcan0: tx drop: invalid da for name 0x00000000000000c7
[   73.635223][ T5968] syz.0.56 uses obsolete (PF_INET,SOCK_PACKET)
[   74.093942][ T5982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.63'.
[   74.123696][   T56] Bluetooth: hci1: command tx timeout
[   74.154101][ T5951] Bluetooth: hci0: Opcode 0x080f failed: -4
[   74.203300][   T56] Bluetooth: hci0: command tx timeout
[   74.205392][   T56] Bluetooth: hci2: command tx timeout
[   74.621745][ T6002] xt_hashlimit: overflow, rate too high: 0
[   75.282590][ T6020] pim6reg: entered allmulticast mode
[   75.298411][ T6020] pim6reg: left allmulticast mode
[   75.773784][ T6058] netlink: 'syz.1.98': attribute type 1 has an invalid length.
[   75.816034][ T6060] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.965108][ T6068] bond1: option ad_user_port_key: invalid value (65535)
[   75.967281][ T6068] bond1: option ad_user_port_key: allowed values 0 - 1023
[   75.974897][ T6068] bond1 (unregistering): Released all slaves
[   75.981993][ T6071] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[   76.058022][ T6068] Zero length message leads to an empty skb
[   76.203100][ T5866] Bluetooth: hci1: command tx timeout
[   76.285221][ T5866] Bluetooth: hci2: command tx timeout
[   76.287385][ T5866] Bluetooth: hci0: command 0x040f tx timeout
[   76.597889][ T6118] Bluetooth: MGMT ver 1.23
[   77.022690][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.131'.
[   77.025284][ T6139] netlink: 'syz.1.131': attribute type 7 has an invalid length.
[   77.027602][ T6139] netlink: 'syz.1.131': attribute type 8 has an invalid length.
[   77.029838][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'.
[   77.046369][ T6139] veth1: entered promiscuous mode
[   77.048972][ T6139] veth0: entered promiscuous mode
[   77.051181][ T6139] erspan0: entered promiscuous mode
[   77.121423][ T6142] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   77.307682][ T6144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.697775][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'.
[   77.736096][ T5642] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.739248][ T5642] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.742574][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'.
[   77.744468][ T5642] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.751608][ T5642] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.767112][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'.
[   77.771131][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'.
[   77.887519][ T6175] netlink: 348 bytes leftover after parsing attributes in process `syz.0.144'.
[   77.969338][ T6179] netlink: 'syz.2.147': attribute type 1 has an invalid length.
[   78.284123][   T56] Bluetooth: hci1: command tx timeout
[   78.363882][ T5866] Bluetooth: hci2: command tx timeout
[   78.365983][   T56] Bluetooth: hci0: command 0x040f tx timeout
[   78.829987][ T6247] tipc: Started in network mode
[   78.833618][ T6247] tipc: Node identity c2f2cea023f6, cluster identity 4711
[   78.836880][ T6247] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.841518][ T6247] syzkaller0: entered promiscuous mode
[   78.844107][ T6247] syzkaller0: entered allmulticast mode
[   78.864264][ T6247] tipc: Resetting bearer <eth:syzkaller0>
[   78.878506][ T6246] tipc: Resetting bearer <eth:syzkaller0>
[   78.890433][ T6246] tipc: Disabling bearer <eth:syzkaller0>
[   79.041574][ T6260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.179'.
[   79.293174][ T6279] ipvlan2: entered promiscuous mode
[   79.376629][ T6280] netlink: 'syz.1.187': attribute type 9 has an invalid length.
[   79.379494][ T6280] netlink: 'syz.1.187': attribute type 3 has an invalid length.
[   79.382298][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'.
[   80.445039][   T56] Bluetooth: hci0: command 0x040f tx timeout
[   80.928970][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'.
[   80.966412][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'.
[   81.550419][ T6379] netlink: 'syz.0.228': attribute type 29 has an invalid length.
[   81.628642][ T6383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.366249][ T6424] netlink: 'syz.1.247': attribute type 61 has an invalid length.
[   83.776109][ T6469] netlink: 'syz.0.262': attribute type 9 has an invalid length.
[   83.779235][ T6469] netlink: 'syz.0.262': attribute type 7 has an invalid length.
[   83.782044][ T6469] netlink: 'syz.0.262': attribute type 8 has an invalid length.
[   83.802470][ T6471] netlink: 'syz.2.263': attribute type 1 has an invalid length.
[   84.037378][ T6494] IPv6: addrconf: prefix option has invalid lifetime
[   84.618084][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   85.089342][ T6530] netlink: 104 bytes leftover after parsing attributes in process `syz.1.287'.
[   85.350546][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'.
[   86.048034][ T1271] cfg80211: failed to load regulatory.db
[   86.092300][ T6567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.302'.
[   86.200882][ T6569] netlink: 'syz.2.302': attribute type 2 has an invalid length.
[   86.578352][ T6568] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   86.809218][ T6581] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.861644][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.307'.
[   86.992568][ T6591] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   87.016580][ T6591] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   87.033967][ T6591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.312'.
[   87.037023][ T6591] nbd: must specify at least one socket
[   87.045862][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'.
[   87.049098][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'.
[   87.248987][ T6617] veth2: entered promiscuous mode
[   87.250523][ T6617] veth2: entered allmulticast mode
[   87.394558][ T6624] nbd0: detected capacity change from 0 to 127
[   87.401325][   T57] block nbd0: Receive control failed (result -32)
[   87.403963][ T6513] block nbd0: Send control failed (result -32)
[   87.404029][ T6513] block nbd0: Request send failed, requeueing
[   87.405789][   T54] block nbd0: Dead connection, failed to find a fallback
[   87.410732][   T54] block nbd0: shutting down sockets
[   87.413764][   T54] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.417088][   T54] Buffer I/O error on dev nbd0, logical block 0, async page read
[   87.425316][ T6513] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.429156][ T6513] Buffer I/O error on dev nbd0, logical block 1, async page read
[   87.431840][ T6513] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.452747][ T6513] Buffer I/O error on dev nbd0, logical block 2, async page read
[   87.457883][ T6513] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.460868][ T6513] Buffer I/O error on dev nbd0, logical block 3, async page read
[   87.463919][ T6513] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.466806][ T6513] Buffer I/O error on dev nbd0, logical block 0, async page read
[   87.469740][ T6513] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.472531][ T6513] Buffer I/O error on dev nbd0, logical block 1, async page read
[   87.475662][ T6513] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.478832][ T6513] Buffer I/O error on dev nbd0, logical block 2, async page read
[   87.481741][ T6513] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.486868][ T6513] Buffer I/O error on dev nbd0, logical block 3, async page read
[   87.490634][ T6513] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.495942][ T6513] Buffer I/O error on dev nbd0, logical block 0, async page read
[   87.498851][ T6513] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.501696][ T6513] Buffer I/O error on dev nbd0, logical block 1, async page read
[   87.505804][ T6513] ldm_validate_partition_table(): Disk read failed.
[   87.509900][ T6513] Dev nbd0: unable to read RDB block 0
[   87.512958][ T6513]  nbd0: unable to read partition table
[   87.525242][ T6513] ldm_validate_partition_table(): Disk read failed.
[   87.528786][ T6513] Dev nbd0: unable to read RDB block 0
[   87.531451][ T6513]  nbd0: unable to read partition table
[   87.665137][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'.
[   87.732123][ T6651] ip6tnl1: entered promiscuous mode
[   87.734426][ T6651] ip6tnl1: entered allmulticast mode
[   87.737724][ T6651] team0: Device ip6tnl1 is of different type
[   88.161943][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'.
[   88.215989][ T6667] xt_TCPMSS: Only works on TCP SYN packets
[   88.387573][ T6683] x_tables: duplicate entry at hook 2
[   88.504472][ T6694] netlink: 276 bytes leftover after parsing attributes in process `syz.0.357'.
[   88.802883][ T6719] netlink: 'syz.1.369': attribute type 21 has an invalid length.
[   88.805753][ T6719] netlink: 'syz.1.369': attribute type 22 has an invalid length.
[   88.808586][ T6719] netlink: 'syz.1.369': attribute type 23 has an invalid length.
[   88.811533][ T6719] netlink: 'syz.1.369': attribute type 25 has an invalid length.
[   88.824841][ T6719] netlink: 'syz.1.369': attribute type 26 has an invalid length.
[   89.248899][ T6758] netlink: 'syz.1.385': attribute type 1 has an invalid length.
Connection to localhost closed by remote host.
[   89.735829][ T5642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   89.739685][ T5642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.831475][ T5642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   89.835606][ T5642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.895748][ T5642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   89.899507][ T5642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.956838][ T5642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   89.960971][ T5642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.088960][ T5642] bridge_slave_1: left allmulticast mode
[   90.091215][ T5642] bridge_slave_1: left promiscuous mode
[   90.094384][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.101492][ T5642] bridge_slave_0: left allmulticast mode
[   90.104751][ T5642] bridge_slave_0: left promiscuous mode
[   90.106968][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.474016][ T5642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.478490][ T5642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.482278][ T5642] bond0 (unregistering): Released all slaves
[   90.716446][ T5642] hsr_slave_0: left promiscuous mode
[   90.718858][ T5642] hsr_slave_1: left promiscuous mode
[   90.720986][ T5642] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.723414][ T5642] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.726318][ T5642] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.728729][ T5642] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.741057][ T5642] veth1_macvtap: left promiscuous mode
[   90.743055][ T5642] veth0_macvtap: left promiscuous mode
[   90.744771][ T5642] veth1_vlan: left promiscuous mode
[   90.746417][ T5642] veth0_vlan: left promiscuous mode
[   91.007824][ T5642] team0 (unregistering): Port device team_slave_1 removed
[   91.032480][ T5642] team0 (unregistering): Port device team_slave_0 removed
[   91.595860][ T5642] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.669742][ T5642] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.735376][ T5642] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.816769][ T5642] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.973834][ T5642] bridge_slave_1: left allmulticast mode
[   91.975965][ T5642] bridge_slave_1: left promiscuous mode
[   91.978152][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.983449][ T5642] bridge_slave_0: left allmulticast mode
[   91.985550][ T5642] bridge_slave_0: left promiscuous mode
[   91.987765][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.108339][ T5642] erspan0 (unregistering): left promiscuous mode
[   92.275799][ T5642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.281277][ T5642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.287085][ T5642] bond0 (unregistering): Released all slaves
[   92.542293][ T5642] veth1: left promiscuous mode
[   92.545813][ T5642] veth0: left promiscuous mode
[   92.549738][ T5642] hsr_slave_0: left promiscuous mode
[   92.552403][ T5642] hsr_slave_1: left promiscuous mode
[   92.557923][ T5642] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.560718][ T5642] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.565251][ T5642] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.567944][ T5642] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.582086][ T5642] veth1_macvtap: left promiscuous mode
[   92.584810][ T5642] veth0_macvtap: left promiscuous mode
[   92.859520][ T5642] team0 (unregistering): Port device team_slave_1 removed
[   92.879260][ T5642] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
00:11:37  Registers:
info registers vcpu 0

CPU#0
RAX=dfc4a3e6719e6900 RBX=ffffffff81967b87 RCX=dfc4a3e6719e6900 RDX=0000000000000001
RSI=ffffffff8d70c20d RDI=ffffffff8bbf0460 RBP=ffffffff8dc07ea8 RSP=ffffffff8dc07d80
R8 =ffff888121232fdb R9 =1ffff110242465fb R10=dffffc0000000000 R11=ffffed10242465fc
R12=ffffffff8f7ccb70 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1b92a40
RIP=ffffffff8b45edd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818eb40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9e99d300e8 CR3=000000000dd38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff 00000000ffffffff
XMM02=00000000ff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=61709d5a264b4400 RBX=ffffffff81967b87 RCX=61709d5a264b4400 RDX=0000000000000001
RSI=ffffffff8d70c20d RDI=ffffffff8bbf0460 RBP=ffffc90000197f10 RSP=ffffc90000197de0
R8 =ffff88823c632fdb R9 =1ffff110478c65fb R10=dffffc0000000000 R11=ffffed10478c65fc
R12=ffffffff8f7ccb70 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102c1d3000
RIP=ffffffff8b45edd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9f40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc6a596ba8 CR3=000000011118a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
