last executing test programs:

799.616786ms ago: executing program 0 (id=481):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006b000000660000000000000016000000000000009500800000000000992e5b33961de526f9f9ccc0122eefba0ec0bd98ac30e28f0144d0287eaea2adc8e2d091f40fb9fda345dec00897a901ed0a784ad06c5cd1475d9ee2119314eb81a2b701fe178829b6699fa23f54a48dd1f23a1aaa99e03c653f5db95cb3eb5f4d98038902afaaf30d03f4bf9b0982ad98e18c4498bb5927c734a60db7f1adf846d166c1e7b06711aebc2d60ded9148605558bfc96388a88fa918836c5f0fd9f6085fd"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e}, 0x23)

737.024023ms ago: executing program 0 (id=484):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/5107], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="5620d59bb619dfc227b53d1f52b3", 0x0, 0xf001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

637.257314ms ago: executing program 0 (id=488):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e23, 0x0, 0xa}, {0x4, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, {0xcb29, 0x6, 0x20053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in6=@empty, 0x0, 0x6c}, 0x2, @in6=@remote, 0x1502, 0x4, 0x2, 0x0, 0x0, 0x6}}, 0xe8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840)

580.164491ms ago: executing program 0 (id=490):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r1, 0x6, 0x8, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
listen(0xffffffffffffffff, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa058}]}, 0x1c}, 0x1, 0x0, 0x0, 0x615cc8519f71a54e}, 0x40)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f74696679"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880)

579.685244ms ago: executing program 0 (id=492):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000000001d44000000000000db0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

470.242565ms ago: executing program 0 (id=493):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r2, 0x400}, 0x8)

346.597621ms ago: executing program 2 (id=496):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x2a, @void}}}}}}}}, 0x32)

209.919375ms ago: executing program 2 (id=499):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x6, 0x14e, 0x0, 0x0, @binary="93f7"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)

209.600603ms ago: executing program 1 (id=500):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000af00000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x2040400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)

149.709025ms ago: executing program 1 (id=501):
r0 = gettid()
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$netlink(r1, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000072c0)=[{&(0x7f00000017c0)={0x10, 0x10, 0x100, 0x70bd28, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000007340)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20}, 0x0)

149.507998ms ago: executing program 2 (id=502):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090425bd7000fcdbdf250a948000000000060604010014000100"], 0x30}}, 0x0)

149.241027ms ago: executing program 1 (id=503):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e617400240002800800054000000003080002400000000208000140000000010800064078b9ccd60900010073797a30000000000900020073797a32"], 0xac}}, 0x0)

58.69735ms ago: executing program 2 (id=504):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x810)

58.465243ms ago: executing program 1 (id=505):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="4d60ec4f", 0x4}], 0x1)

58.215343ms ago: executing program 2 (id=506):
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000891214000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94)

323.591µs ago: executing program 1 (id=507):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc, 0x7, {0x0, 0x700}}, {0xc}}}]}]}, 0x48}}, 0x0)

176.765µs ago: executing program 2 (id=508):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

0s ago: executing program 1 (id=509):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8905, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10150' (ED25519) to the list of known hosts.
syzkaller login: [   50.098419][ T5755] cgroup: Unknown subsys name 'net'
[   50.189090][ T5755] cgroup: Unknown subsys name 'cpuset'
[   50.196193][ T5755] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.123062][ T5755] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.478167][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.482569][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.487400][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.504736][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.514263][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.517690][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.520191][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.520834][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.526792][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.529227][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.556360][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.575118][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.578572][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.582103][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.585269][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.838699][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   56.954076][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   57.046726][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.050211][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.052597][ T5827] bridge_slave_0: entered allmulticast mode
[   57.056544][ T5827] bridge_slave_0: entered promiscuous mode
[   57.060420][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   57.092467][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.094977][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.097290][ T5827] bridge_slave_1: entered allmulticast mode
[   57.100054][ T5827] bridge_slave_1: entered promiscuous mode
[   57.159885][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.167218][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.169658][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.172004][ T5823] bridge_slave_0: entered allmulticast mode
[   57.175817][ T5823] bridge_slave_0: entered promiscuous mode
[   57.180341][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.196143][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.198362][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.200630][ T5823] bridge_slave_1: entered allmulticast mode
[   57.203444][ T5823] bridge_slave_1: entered promiscuous mode
[   57.256504][ T5827] team0: Port device team_slave_0 added
[   57.259222][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.262073][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.265883][ T5831] bridge_slave_0: entered allmulticast mode
[   57.269914][ T5831] bridge_slave_0: entered promiscuous mode
[   57.276528][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.279878][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.282938][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.286955][ T5831] bridge_slave_1: entered allmulticast mode
[   57.291208][ T5831] bridge_slave_1: entered promiscuous mode
[   57.297121][ T5827] team0: Port device team_slave_1 added
[   57.313425][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.381891][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.387139][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.389891][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.399771][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.407339][ T5823] team0: Port device team_slave_0 added
[   57.409906][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.412633][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.422855][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.428605][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.437397][ T5823] team0: Port device team_slave_1 added
[   57.476681][ T5831] team0: Port device team_slave_0 added
[   57.490772][ T5831] team0: Port device team_slave_1 added
[   57.493136][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.495719][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.503634][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.526478][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.528573][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.536029][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.546143][ T5827] hsr_slave_0: entered promiscuous mode
[   57.549217][ T5827] hsr_slave_1: entered promiscuous mode
[   57.575516][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.577735][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.585752][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.590084][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.592638][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.602316][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.661126][ T5823] hsr_slave_0: entered promiscuous mode
[   57.665134][ T5823] hsr_slave_1: entered promiscuous mode
[   57.668087][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.671359][ T5823] Cannot create hsr debugfs directory
[   57.713183][ T5831] hsr_slave_0: entered promiscuous mode
[   57.716080][ T5831] hsr_slave_1: entered promiscuous mode
[   57.720062][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.722801][ T5831] Cannot create hsr debugfs directory
[   58.055963][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.069031][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.077627][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.098791][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.140289][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.159707][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.168690][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.189281][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.248363][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.260446][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.274779][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.281440][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.361825][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.396573][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   58.410452][ T3712] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.413363][ T3712] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.428665][ T3712] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.431516][ T3712] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.466631][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.500071][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.506387][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   58.524942][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.527831][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.553835][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.556686][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.575877][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   58.597098][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.599976][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.605791][ T5220] Bluetooth: hci2: command tx timeout
[   58.608270][ T5220] Bluetooth: hci1: command tx timeout
[   58.610591][ T5220] Bluetooth: hci0: command tx timeout
[   58.642215][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.645085][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.735584][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.781108][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.885861][ T5827] veth0_vlan: entered promiscuous mode
[   58.891755][ T5827] veth1_vlan: entered promiscuous mode
[   58.947851][ T5827] veth0_macvtap: entered promiscuous mode
[   58.958218][ T5827] veth1_macvtap: entered promiscuous mode
[   58.990059][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.999775][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.017014][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.030260][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.035048][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.038414][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.041731][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.051819][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.102061][ T5831] veth0_vlan: entered promiscuous mode
[   59.115256][ T5831] veth1_vlan: entered promiscuous mode
[   59.178027][ T5823] veth0_vlan: entered promiscuous mode
[   59.183294][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.193693][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.218813][ T5823] veth1_vlan: entered promiscuous mode
[   59.235981][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.239833][ T5831] veth0_macvtap: entered promiscuous mode
[   59.242296][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.246439][ T5831] veth1_macvtap: entered promiscuous mode
[   59.284837][ T5823] veth0_macvtap: entered promiscuous mode
[   59.299351][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.311420][ T5823] veth1_macvtap: entered promiscuous mode
[   59.345792][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.347088][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.372921][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.406741][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.426334][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.429819][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.436081][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.450410][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.476564][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.479378][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.482404][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.500293][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.562999][ T5896] warning: `syz.1.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.580568][ T5896] netlink: 'syz.1.4': attribute type 10 has an invalid length.
[   59.627600][ T5896] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.651918][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.656669][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.702722][ T5900] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.714912][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.721590][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.771809][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.781299][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.808449][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.811558][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.051275][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'.
[   60.208154][ T5925] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.278418][ T5932] Illegal XDP return value 4294967274 on prog  (id 4) dev N/A, expect packet loss!
[   60.282896][ T5925] netlink: 'syz.2.14': attribute type 13 has an invalid length.
[   60.286890][ T5925] netlink: 'syz.2.14': attribute type 17 has an invalid length.
[   60.315262][ T5928] nbd0: detected capacity change from 0 to 127
[   60.380009][ T5925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.389218][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   60.393072][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   60.398766][ T5933] block nbd0: Receive control failed (result -104)
[   60.618114][ T5944] tipc: Started in network mode
[   60.620133][ T5944] tipc: Node identity ac1414aa, cluster identity 4711
[   60.623672][ T5944] tipc: Enabled bearer <udp:syz2>, priority 10
[   60.686882][ T5220] Bluetooth: hci1: command tx timeout
[   60.689143][ T5220] Bluetooth: hci2: command tx timeout
[   60.691419][ T5825] Bluetooth: hci0: command tx timeout
[   60.829133][ T5949] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[   60.844068][ T5963] openvswitch: netlink: IP tunnel dst address not specified
[   60.992860][ T5972] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET)
[   61.114891][ T5982] netlink: 240 bytes leftover after parsing attributes in process `syz.2.36'.
[   61.302202][ T5998] xt_addrtype: ipv6 does not support BROADCAST matching
[   61.450632][ T6009] sit0: entered promiscuous mode
[   61.458399][ T6009] netlink: 'syz.2.46': attribute type 1 has an invalid length.
[   61.461369][ T6009] netlink: 1 bytes leftover after parsing attributes in process `syz.2.46'.
[   61.488490][ T6011] netlink: 'syz.1.47': attribute type 6 has an invalid length.
[   61.755309][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'.
[   61.874734][ T2286] tipc: Node number set to 2886997162
[   61.886405][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'.
[   62.066373][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'.
[   62.210480][ T6046] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.59'.
[   62.575058][ T6072] Zero length message leads to an empty skb
[   62.579982][ T6075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73'.
[   62.608473][ T6075] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.611796][ T6075] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.615274][ T6075] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.618226][ T6075] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   62.764471][ T5825] Bluetooth: hci0: command tx timeout
[   62.766801][ T5830] Bluetooth: hci2: command tx timeout
[   62.769345][ T5825] Bluetooth: hci1: command tx timeout
[   62.979414][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.987604][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.993345][ T6099] bond0 (unregistering): Released all slaves
[   63.403718][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.687108][ T6137] netlink: 'syz.1.101': attribute type 11 has an invalid length.
[   64.130832][ T6159] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   64.147214][ T6159] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   64.150467][ T6159] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   64.844973][ T5825] Bluetooth: hci1: command tx timeout
[   64.847156][ T5825] Bluetooth: hci2: command tx timeout
[   64.849010][ T5830] Bluetooth: hci0: command tx timeout
[   65.118006][ T6216] dvmrp1: tun_chr_ioctl cmd 1074025677
[   65.119928][ T6216] dvmrp1: linktype set to 805
[   65.230343][ T6222] __nla_validate_parse: 7 callbacks suppressed
[   65.230356][ T6222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.142'.
[   65.317059][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.144'.
[   65.378255][ T6234] netlink: 'syz.0.145': attribute type 10 has an invalid length.
[   65.396939][ T6234] veth0_vlan: left promiscuous mode
[   65.402690][ T6234] veth0_vlan: entered promiscuous mode
[   65.411051][ T6234] team0: Device veth0_vlan failed to register rx_handler
[   65.436867][ T6234] syz.0.145 (6234) used greatest stack depth: 19544 bytes left
[   65.622567][ T6248] netlink: 'syz.2.149': attribute type 4 has an invalid length.
[   65.637082][ T6248] netlink: 'syz.2.149': attribute type 4 has an invalid length.
[   66.183344][ T6263] netlink: 'syz.2.154': attribute type 1 has an invalid length.
[   66.187715][ T6263] netlink: 784 bytes leftover after parsing attributes in process `syz.2.154'.
[   66.501505][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.160'.
[   66.531624][ T6281] netlink: 'syz.0.161': attribute type 1 has an invalid length.
[   66.601755][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.164'.
[   66.627720][ T6287] netlink: 92 bytes leftover after parsing attributes in process `syz.1.164'.
[   66.814848][ T6304] macsec1: entered promiscuous mode
[   66.816702][ T6304] macsec1: entered allmulticast mode
[   66.852573][ T6307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.174'.
[   66.935056][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'.
[   67.110493][ T6338] netlink: 240 bytes leftover after parsing attributes in process `syz.2.188'.
[   67.116188][ T6338] netlink: 48 bytes leftover after parsing attributes in process `syz.2.188'.
[   67.599151][ T6382] ieee802154 phy0 wpan0: encryption failed: -22
[   68.999736][ T6427] netlink: 'syz.2.227': attribute type 11 has an invalid length.
[   69.215557][ T6447] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   69.398993][ T6460] policy can only be matched on NF_INET_PRE_ROUTING
[   69.399015][ T6460] unable to load match
[   69.659873][ T6481] syzkaller1: entered promiscuous mode
[   69.662267][ T6481] syzkaller1: entered allmulticast mode
[   70.865929][ T6576] __nla_validate_parse: 5 callbacks suppressed
[   70.865947][ T6576] netlink: 44 bytes leftover after parsing attributes in process `syz.0.299'.
[   70.966598][ T6581] tipc: Started in network mode
[   70.968612][ T6581] tipc: Node identity ac14140f, cluster identity 4711
[   70.994518][ T6581] tipc: New replicast peer: 255.255.255.255
[   71.005276][ T6581] tipc: Enabled bearer <udp:syz2>, priority 6
[   71.020152][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'.
[   71.169608][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.172477][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.990376][ T6601] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   72.126671][   T10] tipc: Node number set to 2886997007
[   72.249895][ T6621] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   72.252830][ T6621] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   72.320847][ T6626] netlink: 120 bytes leftover after parsing attributes in process `syz.1.318'.
[   72.406749][ T6629] xt_SECMARK: invalid mode: 0
[   72.722144][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.732380][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.962993][ T6672] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   72.978780][ T6669] xt_hashlimit: size too large, truncated to 1048576
[   74.194183][ T6698] Bluetooth: MGMT ver 1.23
[   74.337592][ T6706] xt_CT: You must specify a L4 protocol and not use inversions on it
[   74.757795][ T6700] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   74.768405][ T6700] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   74.898892][ T6721] bridge0: entered allmulticast mode
[   74.904920][ T6721] pim6reg: entered allmulticast mode
[   74.909108][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'.
[   74.911931][ T6721] bridge_slave_1: left allmulticast mode
[   74.915390][ T6721] bridge_slave_1: left promiscuous mode
[   74.917657][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.923089][ T6721] bridge_slave_0: left allmulticast mode
[   74.928121][ T6721] bridge_slave_0: left promiscuous mode
[   74.930186][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.951436][ T6721] bridge0 (unregistering): left allmulticast mode
[   75.141359][ T6737] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   75.464845][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'.
[   75.467928][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'.
[   75.737312][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.391'.
[   75.740931][ T6789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.391'.
[   76.069980][ T6811] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   76.096814][ T6815] mac80211_hwsim hwsim5 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   76.284630][ T5220] Bluetooth: hci0: command 0x0401 tx timeout
[   76.287061][ T5825] Bluetooth: hci0: Opcode 0x0401 failed: -110
[   76.625590][ T6851] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   76.667349][ T6853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.419'.
[   76.691672][ T6853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.419'.
[   76.941191][ T6874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.424'.
[   76.946783][ T6874] netlink: 216 bytes leftover after parsing attributes in process `syz.2.424'.
[   77.159175][ T6887] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.428'.
[   77.258831][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[   77.291930][ T6892] gtp0: entered promiscuous mode
[   78.154250][ T6959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.461'.
[   78.227942][ T6965] netlink: 'syz.0.464': attribute type 11 has an invalid length.
[   78.238257][ T6965] netlink: 'syz.0.464': attribute type 4 has an invalid length.
[   78.242913][ T6965] netlink: 224 bytes leftover after parsing attributes in process `syz.0.464'.
[   78.301482][ T6973] netlink: 36 bytes leftover after parsing attributes in process `syz.1.468'.
[   78.606429][  T740] wlan0: Trigger new scan to find an IBSS to join
[   78.641653][ T7012] tun0: tun_chr_ioctl cmd 2147767507
[   78.683505][ T7019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.490'.
[   78.849252][ T7017] batman_adv: batadv0: Adding interface: ip6gretap1
[   78.852000][ T7017] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.863109][ T7017] batman_adv: batadv0: Interface activated: ip6gretap1
[   79.320305][   T26] 
[   79.321371][   T26] ======================================================
[   79.324217][   T26] WARNING: possible circular locking dependency detected
[   79.327095][   T26] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[   79.331179][   T26] ------------------------------------------------------
[   79.333776][   T26] kworker/u9:0/26 is trying to acquire lock:
[   79.336010][   T26] ffff888030fbe358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[   79.339315][   T26] 
[   79.339315][   T26] but task is already holding lock:
[   79.342148][   T26] ffff8880310e0988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   79.345642][   T26] 
[   79.345642][   T26] which lock already depends on the new lock.
[   79.345642][   T26] 
[   79.349693][   T26] 
[   79.349693][   T26] the existing dependency chain (in reverse order) is:
[   79.353220][   T26] 
[   79.353220][   T26] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[   79.356425][   T26]        lock_acquire+0x120/0x360
[   79.358380][   T26]        down_write+0x96/0x1f0
[   79.360091][   T26]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   79.362487][   T26]        nbd_start_device+0x16c/0xac0
[   79.364358][   T26]        nbd_genl_connect+0x1250/0x1930
[   79.366439][   T26]        genl_family_rcv_msg_doit+0x215/0x300
[   79.368776][   T26]        genl_rcv_msg+0x60e/0x790
[   79.370728][   T26]        netlink_rcv_skb+0x208/0x470
[   79.372308][   T26]        genl_rcv+0x28/0x40
[   79.373756][   T26]        netlink_unicast+0x75c/0x8e0
[   79.375777][   T26]        netlink_sendmsg+0x805/0xb30
[   79.377320][   T26]        __sock_sendmsg+0x21c/0x270
[   79.378819][   T26]        ____sys_sendmsg+0x505/0x830
[   79.380496][   T26]        ___sys_sendmsg+0x21f/0x2a0
[   79.382404][   T26]        __x64_sys_sendmsg+0x19b/0x260
[   79.384038][   T26]        do_syscall_64+0xfa/0x3b0
[   79.385546][   T26]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.387405][   T26] 
[   79.387405][   T26] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[   79.389699][   T26]        lock_acquire+0x120/0x360
[   79.391420][   T26]        __mutex_lock+0x182/0xe80
[   79.392924][   T26]        refcount_dec_and_mutex_lock+0x30/0xa0
[   79.394723][   T26]        nbd_config_put+0x2c/0x790
[   79.396241][   T26]        nbd_release+0xfe/0x140
[   79.397685][   T26]        bdev_release+0x536/0x650
[   79.399183][   T26]        blkdev_release+0x15/0x20
[   79.400691][   T26]        __fput+0x44c/0xa70
[   79.402037][   T26]        fput_close_sync+0x119/0x200
[   79.403609][   T26]        __x64_sys_close+0x7f/0x110
[   79.405151][   T26]        do_syscall_64+0xfa/0x3b0
[   79.406613][   T26]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.408548][   T26] 
[   79.408548][   T26] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[   79.411365][   T26]        validate_chain+0xb9b/0x2140
[   79.413118][   T26]        __lock_acquire+0xab9/0xd20
[   79.414871][   T26]        lock_acquire+0x120/0x360
[   79.416377][   T26]        __mutex_lock+0x182/0xe80
[   79.417998][   T26]        __del_gendisk+0x129/0x9e0
[   79.419820][   T26]        del_gendisk+0xe8/0x160
[   79.421244][   T26]        nbd_dev_remove_work+0x47/0xe0
[   79.422863][   T26]        process_scheduled_works+0xae1/0x17b0
[   79.424644][   T26]        worker_thread+0x8a0/0xda0
[   79.426141][   T26]        kthread+0x711/0x8a0
[   79.427478][   T26]        ret_from_fork+0x3fc/0x770
[   79.428984][   T26]        ret_from_fork_asm+0x1a/0x30
[   79.430501][   T26] 
[   79.430501][   T26] other info that might help us debug this:
[   79.430501][   T26] 
[   79.433450][   T26] Chain exists of:
[   79.433450][   T26]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[   79.433450][   T26] 
[   79.437564][   T26]  Possible unsafe locking scenario:
[   79.437564][   T26] 
[   79.439740][   T26]        CPU0                    CPU1
[   79.441310][   T26]        ----                    ----
[   79.442873][   T26]   rlock(&set->update_nr_hwq_lock);
[   79.444423][   T26]                                lock(&nbd->config_lock);
[   79.446485][   T26]                                lock(&set->update_nr_hwq_lock);
[   79.448729][   T26]   lock(&disk->open_mutex);
[   79.450072][   T26] 
[   79.450072][   T26]  *** DEADLOCK ***
[   79.450072][   T26] 
[   79.452404][   T26] 3 locks held by kworker/u9:0/26:
[   79.453884][   T26]  #0: ffff888105768148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   79.457083][   T26]  #1: ffffc900001efbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   79.460576][   T26]  #2: ffff8880310e0988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   79.463476][   T26] 
[   79.463476][   T26] stack backtrace:
[   79.465220][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   79.465231][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.465238][   T26] Workqueue: nbd-del nbd_dev_remove_work
[   79.465252][   T26] Call Trace:
[   79.465259][   T26]  <TASK>
[   79.465265][   T26]  dump_stack_lvl+0x189/0x250
[   79.465277][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.465286][   T26]  ? __pfx__printk+0x10/0x10
[   79.465297][   T26]  ? print_lock_name+0xde/0x100
[   79.465307][   T26]  print_circular_bug+0x2ee/0x310
[   79.465319][   T26]  check_noncircular+0x134/0x160
[   79.465330][   T26]  validate_chain+0xb9b/0x2140
[   79.465340][   T26]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   79.465352][   T26]  ? arch_stack_walk+0x11c/0x150
[   79.465364][   T26]  __lock_acquire+0xab9/0xd20
[   79.465372][   T26]  ? __del_gendisk+0x129/0x9e0
[   79.465380][   T26]  lock_acquire+0x120/0x360
[   79.465387][   T26]  ? __del_gendisk+0x129/0x9e0
[   79.465395][   T26]  ? check_path+0x21/0x40
[   79.465405][   T26]  __mutex_lock+0x182/0xe80
[   79.465414][   T26]  ? __del_gendisk+0x129/0x9e0
[   79.465423][   T26]  ? __del_gendisk+0x129/0x9e0
[   79.465431][   T26]  ? __pfx___mutex_lock+0x10/0x10
[   79.465438][   T26]  ? __pfx___might_resched+0x10/0x10
[   79.465449][   T26]  ? __lock_acquire+0xab9/0xd20
[   79.465456][   T26]  ? disk_del_events+0xb5/0x210
[   79.465465][   T26]  ? __del_gendisk+0xc1/0x9e0
[   79.465472][   T26]  __del_gendisk+0x129/0x9e0
[   79.465480][   T26]  ? del_gendisk+0xe0/0x160
[   79.465488][   T26]  ? __pfx___del_gendisk+0x10/0x10
[   79.465497][   T26]  ? down_read+0x1ad/0x2e0
[   79.465505][   T26]  del_gendisk+0xe8/0x160
[   79.465513][   T26]  nbd_dev_remove_work+0x47/0xe0
[   79.465520][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   79.465529][   T26]  process_scheduled_works+0xae1/0x17b0
[   79.465543][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[   79.465559][   T26]  worker_thread+0x8a0/0xda0
[   79.465578][   T26]  kthread+0x711/0x8a0
[   79.465594][   T26]  ? __pfx_worker_thread+0x10/0x10
[   79.465606][   T26]  ? __pfx_kthread+0x10/0x10
[   79.465654][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[   79.465669][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.465685][   T26]  ? __pfx_kthread+0x10/0x10
[   79.465699][   T26]  ret_from_fork+0x3fc/0x770
[   79.465712][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[   79.465724][   T26]  ? __switch_to_asm+0x39/0x70
[   79.465739][   T26]  ? __switch_to_asm+0x33/0x70
[   79.465751][   T26]  ? __pfx_kthread+0x10/0x10
[   79.465761][   T26]  ret_from_fork_asm+0x1a/0x30
[   79.465774][   T26]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   79.906387][ T5897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.910140][ T5897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.972141][ T5897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.977552][ T5897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.028809][ T5897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.031827][ T5897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.086218][ T5897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.089647][ T5897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.179842][ T5897] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   80.216179][ T5897] batman_adv: batadv0: Removing interface: ip6gretap1
[   80.330468][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.336218][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.341085][ T5897] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   80.348424][ T5897] bond0 (unregistering): Released all slaves
[   80.398369][ T5897] tipc: Disabling bearer <udp:syz2>
[   80.405801][ T5897] tipc: Left network mode
[   80.528669][ T5897] hsr_slave_0: left promiscuous mode
[   80.530983][ T5897] hsr_slave_1: left promiscuous mode
[   80.533084][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.537986][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.541376][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.546442][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.552318][ T5897] veth1_macvtap: left promiscuous mode
[   80.556068][ T5897] veth0_macvtap: left promiscuous mode
[   80.612301][ T5897] pim6reg (unregistering): left allmulticast mode
[   80.682905][ T5897] team0 (unregistering): Port device team_slave_1 removed
[   80.701088][ T5897] team0 (unregistering): Port device team_slave_0 removed
[   81.082029][ T5897] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.136082][ T5897] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.180108][ T5897] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.231728][ T5897] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.331959][ T5897] bridge_slave_1: left allmulticast mode
[   81.334359][ T5897] bridge_slave_1: left promiscuous mode
[   81.336150][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.339358][ T5897] bridge_slave_0: left allmulticast mode
[   81.341114][ T5897] bridge_slave_0: left promiscuous mode
[   81.342824][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.415172][   T95] cfg80211: failed to load regulatory.db
[   81.590304][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.595430][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.599807][ T5897] bond0 (unregistering): Released all slaves
[   81.607396][ T5897] bond1 (unregistering): Released all slaves
[   81.612894][ T5897] bond2 (unregistering): Released all slaves
[   81.644295][  T740] wlan0: Trigger new scan to find an IBSS to join
[   81.666823][ T5897] tipc: Disabling bearer <udp:syz2>
[   81.669033][ T5897] tipc: Disabling bearer <eth:veth0_macvtap>
[   81.672014][ T5897] tipc: Left network mode
[   81.828890][ T5897] hsr_slave_0: left promiscuous mode
[   81.831428][ T5897] hsr_slave_1: left promiscuous mode
[   81.835128][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.838027][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.841330][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.849002][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.864109][ T5897] veth1_macvtap: left promiscuous mode
[   81.866056][ T5897] veth0_macvtap: left promiscuous mode
[   81.867914][ T5897] veth1_vlan: left promiscuous mode
[   81.869562][ T5897] veth0_vlan: left promiscuous mode
[   81.992104][ T5897] team0 (unregistering): Port device team_slave_1 removed
[   82.008383][ T5897] team0 (unregistering): Port device team_slave_0 removed
[   84.614128][  T740] wlan0: Trigger new scan to find an IBSS to join
[   85.494071][   T26] wlan0: Creating new IBSS network, BSSID 1a:c7:81:19:53:3d

VM DIAGNOSIS:
15:26:58  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001eee10
R8 =ffff888108390237 R9 =1ffff11021072046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98ac R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055cb09b0eed0 CR3=0000000028a52000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa283211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=c3ed14ad99261e00 RBX=ffffffff81976c78 RCX=c3ed14ad99261e00 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f3f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000004038 CR3=000000010805c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4a77d85478 00007f4a77d85450 XMM03=00007f4a77d85488 00007f4a77d85480
XMM04=00007f4a788ed100 00007f4a77d85440 XMM05=00007f4a77d85458 00007f4a77d854a0
XMM06=00007f4a77d85498 00007f4a77d85490 XMM07=00007f4a77d85488 00007f4a77d85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4a77c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
