last executing test programs:

4m54.77916714s ago: executing program 2 (id=1283):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m54.777622699s ago: executing program 2 (id=1285):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)

4m54.690726642s ago: executing program 2 (id=1288):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20)

4m54.5590815s ago: executing program 2 (id=1294):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)

4m54.489934888s ago: executing program 2 (id=1297):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="60ed2b121ca7822d63c7aa09adba2dd9f231e3a354830f0b1f83ecec82388facc7abc1583a5435c143f7b24b268c3b8fbedf6fe35844e4c30c72c4db1cc5b2e2cf", 0x41)

4m54.264233358s ago: executing program 2 (id=1302):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x4}]}, 0x10)

4m52.880711566s ago: executing program 1 (id=1315):
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x803, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24044880)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0)

4m52.744140447s ago: executing program 1 (id=1318):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x6}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0)

4m52.660337765s ago: executing program 1 (id=1320):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000840)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6a040000)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = gettid()
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x800)

4m49.723061336s ago: executing program 1 (id=1332):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r1, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47)

4m49.638303268s ago: executing program 1 (id=1333):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})

4m48.460564034s ago: executing program 0 (id=1342):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

4m48.360778177s ago: executing program 0 (id=1343):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x11, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x9}]}, @generic='V']}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

4m48.360541674s ago: executing program 0 (id=1344):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xb}, {0xd}, {0x9, 0xc}}}, 0x24}}, 0x40004)

4m48.301017161s ago: executing program 0 (id=1345):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x1f6, 0x0, 0x0, 0x0, 0x0}, 0x48)

4m48.221067604s ago: executing program 0 (id=1346):
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000006f40)=[{{&(0x7f0000005640)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000007000000860800000003"], 0x18}}], 0x1, 0x0)

4m47.422167689s ago: executing program 0 (id=1347):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000340)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000300)}, 0x20)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d040000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x10, 0x110, 0xb}}], 0x28}, 0x0)
r6 = getpid()
syz_open_procfs$namespace(r6, &(0x7f0000000240)='ns/pid_for_children\x00')
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r9, 0x4, 0x0, 0x1, 0xffffff96, 0x2c, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x80, 0x8000, 0x1, 0x5bee}})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000280)={'veth0_to_hsr\x00', @local})
ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000480)={0x3, &(0x7f00000004c0)=[{0x45, 0xfd, 0x1, 0xfffffe00}, {0x1, 0x2}, {0x6, 0x7}]})

4m45.532513648s ago: executing program 1 (id=1348):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

4m26.56617531s ago: executing program 32 (id=1347):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000340)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000300)}, 0x20)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d040000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x10, 0x110, 0xb}}], 0x28}, 0x0)
r6 = getpid()
syz_open_procfs$namespace(r6, &(0x7f0000000240)='ns/pid_for_children\x00')
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r9, 0x4, 0x0, 0x1, 0xffffff96, 0x2c, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x80, 0x8000, 0x1, 0x5bee}})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000280)={'veth0_to_hsr\x00', @local})
ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000480)={0x3, &(0x7f00000004c0)=[{0x45, 0xfd, 0x1, 0xfffffe00}, {0x1, 0x2}, {0x6, 0x7}]})

4m22.51795492s ago: executing program 33 (id=1348):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

0s ago: executing program 3 (id=1349):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1, @in6=@local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x80}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29860' (ED25519) to the list of known hosts.
syzkaller login: [   49.471812][ T5811] cgroup: Unknown subsys name 'net'
[   49.597434][ T5811] cgroup: Unknown subsys name 'cpuset'
[   49.601941][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.357902][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.200567][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.207546][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.212570][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.212631][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.216458][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.223921][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.224166][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.227853][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.230524][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.234186][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.244072][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.257914][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.281538][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.290712][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.294379][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.598451][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   56.672211][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   56.750282][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   56.782047][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.785875][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.789193][ T5828] bridge_slave_0: entered allmulticast mode
[   56.793121][ T5828] bridge_slave_0: entered promiscuous mode
[   56.824314][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.827577][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.830591][ T5828] bridge_slave_1: entered allmulticast mode
[   56.835901][ T5828] bridge_slave_1: entered promiscuous mode
[   56.907367][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.909982][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.913015][ T5836] bridge_slave_0: entered allmulticast mode
[   56.918823][ T5836] bridge_slave_0: entered promiscuous mode
[   56.925623][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.948795][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.951450][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.954969][ T5836] bridge_slave_1: entered allmulticast mode
[   56.957917][ T5836] bridge_slave_1: entered promiscuous mode
[   56.963329][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.976436][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.979436][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.981991][ T5827] bridge_slave_0: entered allmulticast mode
[   56.985036][ T5827] bridge_slave_0: entered promiscuous mode
[   57.006773][ T5828] team0: Port device team_slave_0 added
[   57.009608][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.012544][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.015185][ T5827] bridge_slave_1: entered allmulticast mode
[   57.017893][ T5827] bridge_slave_1: entered promiscuous mode
[   57.030220][ T5828] team0: Port device team_slave_1 added
[   57.036083][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.057763][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.081096][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.093091][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.096448][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.105834][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.111486][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.130120][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.132437][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.141941][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.159007][ T5827] team0: Port device team_slave_0 added
[   57.163064][ T5836] team0: Port device team_slave_0 added
[   57.167068][ T5827] team0: Port device team_slave_1 added
[   57.178140][ T5836] team0: Port device team_slave_1 added
[   57.197553][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.199870][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.208359][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.239495][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.242458][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.252353][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.272616][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.275773][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.286457][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.309293][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.312324][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.323419][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.334637][ T5828] hsr_slave_0: entered promiscuous mode
[   57.338018][ T5828] hsr_slave_1: entered promiscuous mode
[   57.427781][ T5836] hsr_slave_0: entered promiscuous mode
[   57.430111][ T5836] hsr_slave_1: entered promiscuous mode
[   57.432420][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.436006][ T5836] Cannot create hsr debugfs directory
[   57.440921][ T5827] hsr_slave_0: entered promiscuous mode
[   57.444090][ T5827] hsr_slave_1: entered promiscuous mode
[   57.446381][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.449460][ T5827] Cannot create hsr debugfs directory
[   57.760513][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.768618][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.773853][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.787462][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.828124][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.837917][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.848594][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.857939][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.937696][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.954698][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.963145][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.976570][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.021441][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.062706][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   58.089770][  T994] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.092982][  T994] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.114868][  T994] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.117424][  T994] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.133269][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.178269][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   58.202545][  T994] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.205105][  T994] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.212972][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.225548][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.228731][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.256002][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   58.284142][ T5837] Bluetooth: hci1: command tx timeout
[   58.294317][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.297490][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.319465][ T2248] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.322596][ T2248] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.356062][ T5837] Bluetooth: hci2: command tx timeout
[   58.358649][ T5837] Bluetooth: hci0: command tx timeout
[   58.382864][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   58.386906][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.400013][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.455177][ T5828] veth0_vlan: entered promiscuous mode
[   58.468859][ T5828] veth1_vlan: entered promiscuous mode
[   58.509005][ T5828] veth0_macvtap: entered promiscuous mode
[   58.525637][ T5828] veth1_macvtap: entered promiscuous mode
[   58.540462][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.551576][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.561610][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.570161][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.584325][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.587094][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.589801][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.592512][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.615319][ T5827] veth0_vlan: entered promiscuous mode
[   58.631900][ T5827] veth1_vlan: entered promiscuous mode
[   58.645098][ T5836] veth0_vlan: entered promiscuous mode
[   58.673313][ T5836] veth1_vlan: entered promiscuous mode
[   58.684835][ T5827] veth0_macvtap: entered promiscuous mode
[   58.688972][ T5827] veth1_macvtap: entered promiscuous mode
[   58.712260][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.729545][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.732642][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.738524][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.747385][ T5836] veth0_macvtap: entered promiscuous mode
[   58.758860][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.761792][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.765499][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.768377][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.772686][ T5836] veth1_macvtap: entered promiscuous mode
[   58.794666][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.803429][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.830308][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.850621][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.870485][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.877894][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.881558][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.885971][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.912432][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.974486][  T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.977904][  T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.041293][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.052317][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.090563][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.098692][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.136795][ T2248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.146415][ T2248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.385374][ T5910] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   59.648586][ T5932] netlink: 'syz.0.14': attribute type 1 has an invalid length.
[   59.651671][ T5932] netlink: 204 bytes leftover after parsing attributes in process `syz.0.14'.
[   60.076321][ T5960] netlink: 'syz.1.21': attribute type 1 has an invalid length.
[   60.079222][ T5960] netlink: 224 bytes leftover after parsing attributes in process `syz.1.21'.
[   60.354535][ T5835] Bluetooth: hci1: command tx timeout
[   60.433881][ T5835] Bluetooth: hci0: command tx timeout
[   60.436288][ T5835] Bluetooth: hci2: command tx timeout
[   60.891345][ T5984] netlink: 'syz.2.31': attribute type 4 has an invalid length.
[   60.943224][ T5985] netlink: 'syz.2.31': attribute type 4 has an invalid length.
[   60.970339][ T5986] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.32'.
[   61.691340][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40'.
[   61.696071][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40'.
[   61.790103][ T6020] netlink: 'syz.2.44': attribute type 10 has an invalid length.
[   61.810661][ T6020] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.834115][ T6020] team0: Port device bond0 added
[   61.841548][ T6026] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   61.864769][ T6020] syz.2.44 (6020) used greatest stack depth: 20760 bytes left
[   61.930899][ T6030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.48'.
[   61.935405][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.48'.
[   61.938433][ T6030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.48'.
[   61.941886][ T6030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.48'.
[   62.006981][ T6036] netlink: 136 bytes leftover after parsing attributes in process `syz.0.52'.
[   62.011461][ T6036] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   62.434284][ T5835] Bluetooth: hci1: command tx timeout
[   62.513790][ T5837] Bluetooth: hci0: command tx timeout
[   62.516405][ T5835] Bluetooth: hci2: command tx timeout
[   63.147667][ T6086] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   63.161602][ T6088] netlink: 'syz.0.75': attribute type 1 has an invalid length.
[   63.358878][ T6098] geneve2: entered allmulticast mode
[   63.448938][ T2344] IPVS: starting estimator thread 0...
[   63.564955][ T6103] IPVS: using max 41 ests per chain, 98400 per kthread
[   63.642615][ T6113] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.651606][ T6112] netlink: 'syz.1.84': attribute type 4 has an invalid length.
[   63.680965][   T12] IPVS: stop unused estimator thread 0...
[   63.772644][ T6119] pim6reg9: entered allmulticast mode
[   63.969938][ T6131] tipc: Started in network mode
[   63.982487][ T6131] tipc: Node identity 26930535df39, cluster identity 4711
[   63.994993][ T6131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.006387][ T6131] syzkaller0: entered promiscuous mode
[   64.012394][ T6131] syzkaller0: entered allmulticast mode
[   64.043218][ T6131] tipc: Resetting bearer <eth:syzkaller0>
[   64.048960][ T6130] tipc: Resetting bearer <eth:syzkaller0>
[   64.059520][ T6130] tipc: Disabling bearer <eth:syzkaller0>
[   64.299232][ T6146] warning: `syz.1.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.435934][ T6158] netlink: 'syz.2.106': attribute type 5 has an invalid length.
[   64.516318][ T5835] Bluetooth: hci1: command tx timeout
[   64.518729][ T6164] netlink: 'syz.0.107': attribute type 9 has an invalid length.
[   64.605871][ T5835] Bluetooth: hci2: command tx timeout
[   64.608282][ T5835] Bluetooth: hci0: command tx timeout
[   64.873319][ T6189] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.881369][ T6189] __nla_validate_parse: 6 callbacks suppressed
[   64.881382][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'.
[   64.887613][ T6189] bridge_slave_1: left allmulticast mode
[   64.889712][ T6189] bridge_slave_1: left promiscuous mode
[   64.892414][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.898976][ T6189] bridge_slave_0: left allmulticast mode
[   64.901288][ T6189] bridge_slave_0: left promiscuous mode
[   64.907833][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.440433][ T6210] Illegal XDP return value 4294967274 on prog  (id 18) dev N/A, expect packet loss!
[   65.452167][ T6212] netlink: 84 bytes leftover after parsing attributes in process `syz.1.130'.
[   65.772669][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'.
[   65.919988][ T6248] xt_limit: Overflow, try lower: 262144/524288
[   66.192671][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'.
[   66.199403][ T6279] syz_tun: entered allmulticast mode
[   66.281228][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.168'.
[   66.390226][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'.
[   66.399760][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'.
[   66.403054][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'.
[   66.907232][ T6329] syz.1.186 uses old SIOCAX25GETINFO
[   67.325385][ T6343] syz.1.193 uses obsolete (PF_INET,SOCK_PACKET)
[   67.653295][ T6362] ip6gretap1: entered promiscuous mode
[   67.762512][ T6371] Cannot find add_set index 0 as target
[   67.906782][ T6379] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   67.911033][ T6379] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   68.018393][ T6386] xt_cgroup: xt_cgroup: no path or classid specified
[   68.082038][ T6392] netlink: 'syz.2.215': attribute type 1 has an invalid length.
[   68.140676][ T6392] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   68.155170][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   68.166721][ T6392] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.217678][ T6392] veth3: entered promiscuous mode
[   68.225303][ T6392] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   68.285104][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   68.385017][ T6409] Bluetooth: MGMT ver 1.23
[   68.462880][ T6413] Zero length message leads to an empty skb
[   68.500347][ T6421] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.225'.
[   69.909816][ T6459] netlink: 10 bytes leftover after parsing attributes in process `syz.0.242'.
[   70.336594][   T55] block nbd0: Receive control failed (result -32)
[   70.687535][ T6528] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   71.031163][ T6541] netlink: 48 bytes leftover after parsing attributes in process `syz.1.279'.
[   71.316195][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.320375][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.322715][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'.
[   71.443714][ T6557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.449113][ T6557] netlink: 'syz.0.282': attribute type 4 has an invalid length.
[   71.532048][ T6559] netlink: 'syz.1.285': attribute type 1 has an invalid length.
[   71.542527][ T6559] netlink: 2 bytes leftover after parsing attributes in process `syz.1.285'.
[   71.650502][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'.
[   71.775782][ T6570] bridge0: port 3(gretap0) entered blocking state
[   71.778277][ T6570] bridge0: port 3(gretap0) entered disabled state
[   71.780498][ T6570] gretap0: entered allmulticast mode
[   71.783047][ T6570] gretap0: entered promiscuous mode
[   71.787249][ T6570] bridge0: port 3(gretap0) entered blocking state
[   71.789463][ T6570] bridge0: port 3(gretap0) entered forwarding state
[   71.847856][ T6572] netlink: 'syz.2.291': attribute type 1 has an invalid length.
[   71.857196][ T6572] netlink: 'syz.2.291': attribute type 3 has an invalid length.
[   71.862732][ T6572] netlink: 224 bytes leftover after parsing attributes in process `syz.2.291'.
[   71.902312][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.294'.
[   71.905580][ T6578] netlink: 224 bytes leftover after parsing attributes in process `syz.2.294'.
[   72.110489][ T6597] can: request_module (can-proto-3) failed.
[   72.150469][ T6557] syz.0.282 (6557) used greatest stack depth: 20320 bytes left
[   72.233979][ T6607] syzkaller1: entered promiscuous mode
[   72.236101][ T6607] syzkaller1: entered allmulticast mode
[   72.455512][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'.
[   72.476922][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'.
[   72.659633][ T6637] batadv_slave_1: entered promiscuous mode
[   72.668404][ T6637] batadv_slave_1: left promiscuous mode
[   73.419359][ T6713] smc: net device bond0 applied user defined pnetid SYZ
[   73.570551][ T6721] netlink: 'syz.2.362': attribute type 13 has an invalid length.
[   73.573082][ T6721] netlink: 'syz.2.362': attribute type 17 has an invalid length.
[   73.643849][ T6730] netlink: 'syz.0.364': attribute type 1 has an invalid length.
[   73.698860][ T6734] tipc: Started in network mode
[   73.700534][ T6734] tipc: Node identity 6eb7065db946, cluster identity 4711
[   73.702925][ T6734] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.706582][ T6734] syzkaller0: entered promiscuous mode
[   73.708507][ T6734] syzkaller0: entered allmulticast mode
[   73.737473][ T6734] tipc: Resetting bearer <eth:syzkaller0>
[   73.749253][ T6733] tipc: Resetting bearer <eth:syzkaller0>
[   73.762748][ T6733] tipc: Disabling bearer <eth:syzkaller0>
[   73.897224][ T6742] netlink: 'syz.0.370': attribute type 13 has an invalid length.
[   73.899798][ T6742] netlink: 'syz.0.370': attribute type 17 has an invalid length.
[   74.432327][ T6783] syzkaller1: entered promiscuous mode
[   74.439512][ T6783] syzkaller1: entered allmulticast mode
[   74.944044][ T6828] __nla_validate_parse: 11 callbacks suppressed
[   74.944054][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'.
[   74.949289][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.404'.
[   74.960294][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'.
[   74.974303][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.404'.
[   74.977214][ T6828] netlink: 5 bytes leftover after parsing attributes in process `syz.1.404'.
[   75.203180][ T6852] netlink: 'syz.1.414': attribute type 1 has an invalid length.
[   75.351458][ T6873] netlink: 100 bytes leftover after parsing attributes in process `syz.0.422'.
[   75.626633][ T6903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.434'.
[   75.725775][ T6916] netlink: 'syz.2.437': attribute type 5 has an invalid length.
[   76.279713][ T6940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.282245][ T6940] IPv6: NLM_F_CREATE should be set when creating new route
[   76.284797][ T6940] IPv6: NLM_F_CREATE should be set when creating new route
[   76.568374][ T6955] raw_sendmsg: syz.0.454 forgot to set AF_INET. Fix it!
[   76.684842][ T6965] netlink: 'syz.2.459': attribute type 41 has an invalid length.
[   76.835499][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'.
[   76.845632][ T6983] team_slave_0: entered promiscuous mode
[   76.847681][ T6983] team_slave_1: entered promiscuous mode
[   76.849661][ T6983] macvtap1: entered promiscuous mode
[   76.851422][ T6983] team0: entered promiscuous mode
[   76.854269][ T6983] macvtap1: entered allmulticast mode
[   76.856035][ T6983] team0: entered allmulticast mode
[   76.857986][ T6983] team_slave_0: entered allmulticast mode
[   76.860321][ T6983] team_slave_1: entered allmulticast mode
[   76.862868][ T6983] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   76.868282][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'.
[   76.874554][ T6983] team0: left allmulticast mode
[   76.876353][ T6983] team_slave_0: left allmulticast mode
[   76.878709][ T6983] team_slave_1: left allmulticast mode
[   76.880595][ T6983] team0: left promiscuous mode
[   76.882571][ T6983] team_slave_0: left promiscuous mode
[   76.884430][ T6983] team_slave_1: left promiscuous mode
[   76.895728][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.468'.
[   77.091043][   T33] audit: type=1804 audit(1752064790.681:2): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.477" name="/newroot/175/cgroup.controllers" dev="tmpfs" ino=907 res=1 errno=0
[   77.100863][   T33] audit: type=1800 audit(1752064790.681:3): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.477" name="cgroup.controllers" dev="tmpfs" ino=907 res=0 errno=0
[   77.121582][   T33] audit: type=1800 audit(1752064790.681:4): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.477" name="cgroup.controllers" dev="tmpfs" ino=907 res=0 errno=0
[   78.126795][ T7084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.153492][ T7084] syzkaller0: entered promiscuous mode
[   78.155942][ T7084] syzkaller0: entered allmulticast mode
[   78.158714][ T7084] tipc: Resetting bearer <eth:syzkaller0>
[   78.166029][ T7083] tipc: Resetting bearer <eth:syzkaller0>
[   78.930897][ T7083] tipc: Disabling bearer <eth:syzkaller0>
[   78.969632][ T7096] syzkaller0: entered promiscuous mode
[   78.971609][ T7096] syzkaller0: entered allmulticast mode
[   80.043613][ T7131] xt_CT: No such helper "snmp"
[   80.143862][ T7144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.226287][ T7154] __nla_validate_parse: 4 callbacks suppressed
[   80.226305][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'.
[   80.319006][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'.
[   80.582239][ T7194] netlink: zone id is out of range
[   80.690207][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'.
[   80.739980][ T7213] netlink: 'syz.2.571': attribute type 8 has an invalid length.
[   80.796363][ T7223] trusted_key: syz.2.576 sent an empty control message without MSG_MORE.
[   82.094720][ T1263] cfg80211: failed to load regulatory.db
[   82.482938][ T7283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.602'.
[   82.490569][ T7283] netlink: 'syz.0.602': attribute type 6 has an invalid length.
[   82.495651][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.602'.
[   82.601694][ T7290] netlink: 'syz.0.604': attribute type 1 has an invalid length.
[   82.605102][ T7290] netlink: 15 bytes leftover after parsing attributes in process `syz.0.604'.
[   82.799184][ T7300] netlink: 'syz.1.608': attribute type 1 has an invalid length.
[   82.959290][ T7311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.613'.
[   82.973298][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'.
[   82.976435][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'.
[   82.994708][ T7313] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.997916][ T7313] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.000892][ T7313] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.004823][ T7313] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.018440][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'.
[   83.073278][ T7319] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   83.079076][ T7319] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   83.103476][ T7321] netlink: 'syz.1.618': attribute type 2 has an invalid length.
[   83.271813][   T24] IPVS: starting estimator thread 0...
[   83.363531][ T7338] IPVS: using max 80 ests per chain, 192000 per kthread
[   83.415920][ T7350] netlink: 'syz.0.631': attribute type 21 has an invalid length.
[   83.471571][ T7357] netlink: 'syz.0.634': attribute type 4 has an invalid length.
[   83.984525][ T7414] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   84.064773][ T7422] tipc: New replicast peer: 0.0.0.0
[   84.071053][ T7422] tipc: Enabled bearer <udp:syz2>, priority 10
[   84.076707][ T7422] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   85.184249][ T1263] tipc: Node number set to 4188669237
[   85.902976][ T7524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.259003][ T7556] __nla_validate_parse: 7 callbacks suppressed
[   86.259017][ T7556] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.728'.
[   86.871776][ T7579] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   87.055423][ T7589] netlink: 'syz.0.744': attribute type 1 has an invalid length.
[   87.092472][ T7589] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.152633][ T7589] veth5: entered promiscuous mode
[   87.162607][ T7589] bond1: (slave veth5): Enslaving as an active interface with a down link
[   87.191837][ T2248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.195412][ T2248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.681400][ T7633] netlink: 'syz.1.764': attribute type 1 has an invalid length.
[   87.693578][ T7633] netlink: 172 bytes leftover after parsing attributes in process `syz.1.764'.
[   87.937121][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'.
[   88.026289][ T7662] netlink: 'syz.2.776': attribute type 1 has an invalid length.
[   88.348914][ T7686] netlink: 'syz.1.786': attribute type 72 has an invalid length.
[   88.358020][ T7686] netlink: 1016 bytes leftover after parsing attributes in process `syz.1.786'.
[   88.765947][ T7713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.799'.
[   88.877154][ T7727] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   88.923939][ T7713] netlink: 'syz.0.799': attribute type 1 has an invalid length.
[   88.927968][ T7713] nbd: error processing sock list
[   88.931637][ T7713] block nbd1: shutting down sockets
[   89.068382][ T7736] netlink: 'syz.0.811': attribute type 12 has an invalid length.
[   89.103997][ T7738] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[   89.185185][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'.
[   89.241185][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.815'.
[   89.384292][ T7749] nbd1: detected capacity change from 0 to 127
[   89.435676][   T56] block nbd1: Receive control failed (result -104)
[   89.520671][ T7761] "syz.1.822" (7761) uses obsolete ecb(arc4) skcipher
[   90.250273][ T7771] netlink: 164 bytes leftover after parsing attributes in process `syz.1.825'.
[   90.255523][ T7771] netlink: 164 bytes leftover after parsing attributes in process `syz.1.825'.
[   90.259071][ T7771] netlink: 60 bytes leftover after parsing attributes in process `syz.1.825'.
[   90.278444][ T7775] netlink: 'syz.0.827': attribute type 4 has an invalid length.
[   90.280990][ T7775] netlink: 'syz.0.827': attribute type 17 has an invalid length.
[   90.581019][ T7800] can: request_module (can-proto-3) failed.
[   91.435861][ T7877] __nla_validate_parse: 1 callbacks suppressed
[   91.435871][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'.
[   91.437799][ T7879] netlink: 788 bytes leftover after parsing attributes in process `syz.2.873'.
[   91.495563][ T7883] tun0: tun_chr_ioctl cmd 1074025677
[   91.497409][ T7883] tun0: linktype set to 773
[   92.533538][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[   93.411300][ T7897] lo: entered allmulticast mode
[   93.413144][ T7897] lo: left allmulticast mode
[   93.489958][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'.
[   93.633127][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.892'.
[   93.641339][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'.
[   93.975890][ T7938] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   94.071945][ T7945] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.902'.
[   94.268737][ T7962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.910'.
[   94.273203][ T7962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.910'.
[   94.341884][ T7969] netlink: 'syz.0.914': attribute type 1 has an invalid length.
[   94.346248][ T7969] netlink: 172 bytes leftover after parsing attributes in process `syz.0.914'.
[   94.393558][ T7973] netlink: 508 bytes leftover after parsing attributes in process `syz.0.916'.
[   94.965145][ T8006] bridge0: port 1(syz_tun) entered blocking state
[   94.968020][ T8006] bridge0: port 1(syz_tun) entered disabled state
[   94.970767][ T8006] syz_tun: entered allmulticast mode
[   94.975425][ T8006] syz_tun: entered promiscuous mode
[   95.250377][ T8035] netlink: 'syz.2.946': attribute type 9 has an invalid length.
[   95.263648][ T8035] netlink: 'syz.2.946': attribute type 6 has an invalid length.
[   95.283442][ T8035] netlink: 'syz.2.946': attribute type 7 has an invalid length.
[   95.286426][ T8035] netlink: 'syz.2.946': attribute type 8 has an invalid length.
[   95.469420][ T8059] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   95.810721][ T8098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.856822][ T8103] 8021q: adding VLAN 0 to HW filter on device batadv1
[   95.861292][ T8103] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   95.870200][ T8103] team0: Failed to send options change via netlink (err -105)
[   95.873796][ T8103] team0: Port device batadv1 added
[   95.891283][ T8098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.958426][ T8098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.019418][ T8098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.081259][ T8098] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.092173][ T8098] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.105824][ T8098] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.114872][ T8098] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.239866][   T51] IPVS: starting estimator thread 0...
[   96.334355][ T8124] IPVS: using max 79 ests per chain, 189600 per kthread
[   96.412812][   T12] IPVS: stop unused estimator thread 0...
[   97.031307][ T8131] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   97.110134][ T8138] __nla_validate_parse: 9 callbacks suppressed
[   97.110147][ T8138] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.985'.
[   97.117195][ T8133] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.985'.
[   97.129272][ T5861] IPVS: starting estimator thread 0...
[   97.197498][ T8145] netlink: 'syz.0.989': attribute type 1 has an invalid length.
[   97.225058][ T8140] IPVS: using max 80 ests per chain, 192000 per kthread
[   97.229733][ T8150] tipc: Started in network mode
[   97.231524][ T8150] tipc: Node identity 4, cluster identity 4711
[   97.236922][ T8150] tipc: Node number set to 4
[   97.265298][ T8155] netlink: 'syz.0.992': attribute type 1 has an invalid length.
[   97.267762][ T8155] netlink: 'syz.0.992': attribute type 2 has an invalid length.
[   97.280112][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'.
[   97.292256][ T8157] netlink: 'syz.1.988': attribute type 1 has an invalid length.
[   97.298223][ T8157] netlink: 208 bytes leftover after parsing attributes in process `syz.1.988'.
[   97.328404][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.993'.
[   97.562204][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.996'.
[   97.608410][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'.
[   97.612741][ T8170] netlink: 'syz.0.997': attribute type 2 has an invalid length.
[   97.617068][ T8170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'.
[   97.837388][ T8184] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1003'.
[   98.837148][ T8264] veth0: entered promiscuous mode
[   98.840064][ T8264] batadv_slave_0: entered promiscuous mode
[   98.843207][ T8261] batadv_slave_0: left promiscuous mode
[   98.847293][ T8261] veth0: left promiscuous mode
[   99.099771][ T8279] bridge_slave_0: left allmulticast mode
[   99.104206][ T8279] bridge_slave_0: left promiscuous mode
[   99.106815][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.120990][ T8279] bridge_slave_1: left allmulticast mode
[   99.125804][ T8279] bridge_slave_1: left promiscuous mode
[   99.127939][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.138421][ T8279] bond0: (slave bond_slave_0): Releasing backup interface
[   99.161075][ T8279] bond0: (slave bond_slave_1): Releasing backup interface
[   99.199832][ T8279] team0: Port device team_slave_0 removed
[   99.210310][ T8279] team0: Port device team_slave_1 removed
[   99.212854][ T8279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.218644][ T8279] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.223020][ T8279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.225933][ T8279] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.766950][ T8337] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[   99.771972][ T8337] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   99.888708][ T8343] syzkaller0: entered promiscuous mode
[   99.890677][ T8343] syzkaller0: entered allmulticast mode
[  101.132297][ T8373] xt_hashlimit: size too large, truncated to 1048576
[  101.627165][ T8400] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  101.671111][ T8402] validate_nla: 2 callbacks suppressed
[  101.671127][ T8402] netlink: 'syz.0.1092': attribute type 13 has an invalid length.
[  101.975015][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'.
[  103.216362][ T8506] netlink: 'syz.2.1135': attribute type 1 has an invalid length.
[  103.371152][ T8514] __nla_validate_parse: 1 callbacks suppressed
[  103.371170][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'.
[  103.887881][ T8546] syzkaller0: create flow: hash 1289192556 index 1
[  103.910030][ T8548] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1152'.
[  103.942176][ T8541] syzkaller0: delete flow: hash 1289192556 index 1
[  105.171404][ T8574] xt_TCPMSS: Only works on TCP SYN packets
[  105.430188][ T8600] netlink: 'syz.2.1176': attribute type 1 has an invalid length.
[  105.435829][ T8600] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1176'.
[  105.820240][ T8632] erspan0: entered promiscuous mode
[  105.831499][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1192'.
[  105.834780][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'.
[  105.837748][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1192'.
[  105.955940][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'.
[  106.000535][ T8657] netem: incorrect gi model size
[  106.002382][ T8657] netem: change failed
[  106.126115][ T8666] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[  106.130374][ T8666] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  106.477777][ T8685] syzkaller0: entered promiscuous mode
[  106.480166][ T8685] syzkaller0: entered allmulticast mode
[  107.433062][ T8702] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.436905][ T8702] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.440639][ T8702] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.444434][ T8702] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.747076][ T8728] netem: incorrect gi model size
[  107.749360][ T8728] netem: change failed
[  108.028275][ T8760] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  108.119098][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'.
[  108.123069][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'.
[  108.134319][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'.
[  108.139567][ T8768] xt_hashlimit: max too large, truncated to 1048576
[  108.386110][ T8787] __nla_validate_parse: 51 callbacks suppressed
[  108.386120][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1263'.
[  108.391150][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1263'.
[  108.398804][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1263'.
[  108.402352][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1263'.
[  108.965909][ T8827] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1280'.
[  109.300104][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'.
[  109.378431][ T8859] xt_CT: You must specify a L4 protocol and not use inversions on it
[  109.432726][ T8873] netlink: 'syz.0.1300': attribute type 11 has an invalid length.
[  109.440480][ T8873] netlink: 'syz.0.1300': attribute type 11 has an invalid length.
[  109.447057][ T8873] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1300'.
[  109.706376][ T5860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.826206][ T5860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.890562][ T8899] netlink: 'syz.0.1310': attribute type 4 has an invalid length.
[  109.916646][ T5860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.937512][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  109.942549][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  109.946724][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  109.954705][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  109.958120][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  110.009749][ T5860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.243244][ T5860] gretap0: left allmulticast mode
[  110.246042][ T5860] gretap0: left promiscuous mode
[  110.249232][ T5860] bridge0: port 3(gretap0) entered disabled state
[  110.268074][ T5860] bridge_slave_1: left allmulticast mode
[  110.270571][ T5860] bridge_slave_1: left promiscuous mode
[  110.273076][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.284759][ T5860] bridge_slave_0: left allmulticast mode
[  110.287311][ T5860] bridge_slave_0: left promiscuous mode
[  110.289807][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.375679][ T5860] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  110.380045][ T5860] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  110.384616][ T5860] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 56:db:ff:77:a1:fe - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  110.670222][ T5860] team0: Port device bond0 removed
[  110.675526][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.695342][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.700508][ T5860] bond0 (unregistering): Released all slaves
[  110.778614][ T5860] bond1 (unregistering): (slave veth3): Releasing backup interface
[  110.782465][ T5860] bond1 (unregistering): Released all slaves
[  110.822048][ T8902] chnl_net:caif_netlink_parms(): no params data found
[  110.846100][ T5860] tipc: Left network mode
[  110.909912][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1315'.
[  110.916940][ T8929] vlan2: entered promiscuous mode
[  110.918717][ T8929] dummy0: entered promiscuous mode
[  111.086196][ T8942] netlink: 'syz.1.1318': attribute type 1 has an invalid length.
[  111.089017][ T8942] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1318'.
[  111.147165][ T8902] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.150163][ T8902] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.152777][ T8902] bridge_slave_0: entered allmulticast mode
[  111.157498][ T8902] bridge_slave_0: entered promiscuous mode
[  111.182095][ T8902] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.189107][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.192675][ T8902] bridge_slave_1: entered allmulticast mode
[  111.196783][ T8902] bridge_slave_1: entered promiscuous mode
[  111.275917][ T8902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.280667][ T8902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.366697][ T8902] team0: Port device team_slave_0 added
[  111.388464][ T5860] hsr_slave_0: left promiscuous mode
[  111.396319][ T5860] hsr_slave_1: left promiscuous mode
[  111.400880][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.410771][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.417726][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.420218][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.451865][ T5860] veth1_macvtap: left promiscuous mode
[  111.457773][ T5860] veth0_macvtap: left promiscuous mode
[  111.460400][ T5860] veth1_vlan: left promiscuous mode
[  111.462522][ T5860] veth0_vlan: left promiscuous mode
[  111.776265][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  111.804010][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  112.035039][ T5835] Bluetooth: hci1: command tx timeout
[  112.104923][ T8902] team0: Port device team_slave_1 added
[  112.235190][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.237850][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.260852][ T8902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.301402][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.308113][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.323473][ T8902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.446437][ T8902] hsr_slave_0: entered promiscuous mode
[  112.449708][ T8902] hsr_slave_1: entered promiscuous mode
[  113.699138][ T8992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.761877][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'.
[  113.830474][ T8998] netlink: 'syz.0.1331': attribute type 39 has an invalid length.
[  113.846998][ T8998] veth0_macvtap: left promiscuous mode
[  114.131109][ T5835] Bluetooth: hci1: command tx timeout
[  114.926750][ T5860] IPVS: stop unused estimator thread 0...
[  115.080345][ T9025] netlink: del zone limit has 4 unknown bytes
[  115.159732][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1338'.
[  115.260643][ T9035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1341'.
[  115.268264][ T9035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1341'.
[  115.272629][ T9035] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  115.402075][ T9039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.253492][ T5835] Bluetooth: hci1: command tx timeout
[  118.302598][ T5837] Bluetooth: hci1: command tx timeout
[  119.679326][ T9048] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1347'.
[  120.343619][   T61] block nbd1: Possible stuck request ffff8880223a0000: control (read@0,1024B). Runtime 30 seconds
[  120.347747][   T61] block nbd1: Possible stuck request ffff8880223a0200: control (read@1024,1024B). Runtime 30 seconds
[  120.351119][   T61] block nbd1: Possible stuck request ffff8880223a0400: control (read@2048,1024B). Runtime 30 seconds
[  120.360774][   T61] block nbd1: Possible stuck request ffff8880223a0600: control (read@3072,1024B). Runtime 30 seconds
[  125.613406][    C0] sched: DL replenish lagged too much
[  133.087130][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  159.743462][   T61] block nbd1: Possible stuck request ffff8880223a0000: control (read@0,1024B). Runtime 60 seconds
[  159.747991][   T61] block nbd1: Possible stuck request ffff8880223a0200: control (read@1024,1024B). Runtime 60 seconds
[  159.766153][   T61] block nbd1: Possible stuck request ffff8880223a0400: control (read@2048,1024B). Runtime 60 seconds
[  159.770503][   T61] block nbd1: Possible stuck request ffff8880223a0600: control (read@3072,1024B). Runtime 60 seconds
[  164.399068][ T5280] udevd[5280]: worker [7157] /devices/virtual/block/nbd1 is taking a long time
[  178.838854][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.534777][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  199.245589][   T25] block nbd1: Possible stuck request ffff8880223a0000: control (read@0,1024B). Runtime 90 seconds
[  199.249057][   T25] block nbd1: Possible stuck request ffff8880223a0200: control (read@1024,1024B). Runtime 90 seconds
[  199.252925][   T25] block nbd1: Possible stuck request ffff8880223a0400: control (read@2048,1024B). Runtime 90 seconds
[  199.263972][   T25] block nbd1: Possible stuck request ffff8880223a0600: control (read@3072,1024B). Runtime 90 seconds
[  229.942862][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  230.391138][   T25] block nbd1: Possible stuck request ffff8880223a0000: control (read@0,1024B). Runtime 120 seconds
[  230.401004][   T25] block nbd1: Possible stuck request ffff8880223a0200: control (read@1024,1024B). Runtime 120 seconds
[  230.417914][   T25] block nbd1: Possible stuck request ffff8880223a0400: control (read@2048,1024B). Runtime 120 seconds
[  230.421511][   T25] block nbd1: Possible stuck request ffff8880223a0600: control (read@3072,1024B). Runtime 120 seconds
[  230.927700][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  230.956009][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  230.958882][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  230.961507][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  230.973041][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  231.066493][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  231.070499][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  231.086491][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  231.089502][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  232.406265][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  233.240056][ T5837] Bluetooth: hci3: command tx timeout
[  233.846479][ T5837] Bluetooth: hci2: command tx timeout
[  235.542812][ T5220] Bluetooth: hci3: command tx timeout
[  235.890974][ T5220] Bluetooth: hci2: command tx timeout
[  238.003996][ T5220] Bluetooth: hci3: command tx timeout
[  238.025033][ T5220] Bluetooth: hci2: command tx timeout
[  240.077123][ T5837] Bluetooth: hci2: command tx timeout
[  240.078910][ T5837] Bluetooth: hci3: command tx timeout
[  253.763203][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  254.095088][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  254.167671][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  254.499550][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  255.459808][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  255.907181][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  263.120978][ T5220] Bluetooth: hci4: command tx timeout
[  269.086382][ T5220] Bluetooth: hci4: command tx timeout
[  271.574700][ T5220] Bluetooth: hci4: command tx timeout
[  273.734429][ T5220] Bluetooth: hci4: command tx timeout
[  277.465637][   T25] block nbd1: Possible stuck request ffff8880223a0000: control (read@0,1024B). Runtime 150 seconds
[  277.469393][   T25] block nbd1: Possible stuck request ffff8880223a0200: control (read@1024,1024B). Runtime 150 seconds
[  277.473099][   T25] block nbd1: Possible stuck request ffff8880223a0400: control (read@2048,1024B). Runtime 150 seconds
[  277.598203][   T25] block nbd1: Possible stuck request ffff8880223a0600: control (read@3072,1024B). Runtime 150 seconds
[  278.057795][ T5280] udevd[5280]: worker [7157] /devices/virtual/block/nbd1 timeout; kill it
[  280.035593][ T5280] udevd[5280]: seq 11217 '/devices/virtual/block/nbd1' killed
[  283.110281][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  283.392258][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  283.415672][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  283.425921][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  283.428942][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  285.661203][ T5837] Bluetooth: hci5: command tx timeout
[  288.976170][ T5837] Bluetooth: hci5: command tx timeout
[  291.007868][ T5837] Bluetooth: hci5: command tx timeout
[  293.178269][ T5837] Bluetooth: hci5: command tx timeout
[  301.136359][ T5220] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  301.672813][ T5220] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  302.414233][ T5220] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  302.877243][ T5220] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  304.718485][ T5220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  306.839552][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.784299][ T5220] Bluetooth: hci6: command tx timeout
[  309.816763][   T25] block nbd1: Possible stuck request ffff8880223a0000: control (read@0,1024B). Runtime 180 seconds
[  309.820105][   T25] block nbd1: Possible stuck request ffff8880223a0200: control (read@1024,1024B). Runtime 180 seconds
[  309.945727][   T25] block nbd1: Possible stuck request ffff8880223a0400: control (read@2048,1024B). Runtime 180 seconds
[  309.949186][   T25] block nbd1: Possible stuck request ffff8880223a0600: control (read@3072,1024B). Runtime 180 seconds
[  312.121921][ T5220] Bluetooth: hci6: command tx timeout
[  314.243736][ T5220] Bluetooth: hci6: command tx timeout
[  316.287499][ T5220] Bluetooth: hci6: command tx timeout
[  317.205889][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  343.080777][   T25] block nbd1: Possible stuck request ffff8880223a0000: control (read@0,1024B). Runtime 210 seconds
[  343.094361][   T25] block nbd1: Possible stuck request ffff8880223a0200: control (read@1024,1024B). Runtime 210 seconds
[  343.098004][   T25] block nbd1: Possible stuck request ffff8880223a0400: control (read@2048,1024B). Runtime 210 seconds
[  343.101557][   T25] block nbd1: Possible stuck request ffff8880223a0600: control (read@3072,1024B). Runtime 210 seconds
[  354.489232][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  354.961854][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  355.154189][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  355.156719][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  355.159595][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  355.191053][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  355.448178][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  357.706654][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  357.715710][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  357.718543][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  357.721159][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  357.737229][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  360.307274][ T5837] Bluetooth: hci6: command tx timeout
[  360.520958][ T5220] Bluetooth: hci7: command tx timeout
[  360.636573][ T5220] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  360.801047][ T5220] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  360.961095][ T5220] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  361.745050][ T5220] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  362.028495][ T5220] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  362.401439][ T5837] Bluetooth: hci6: command tx timeout
[  362.599732][ T5837] Bluetooth: hci7: command tx timeout
[  364.435440][ T5837] Bluetooth: hci6: command tx timeout
[  364.534449][ T5837] Bluetooth: hci8: command tx timeout
[  364.706298][ T5837] Bluetooth: hci7: command tx timeout
[  366.522797][ T5837] Bluetooth: hci6: command tx timeout
[  366.612019][ T5837] Bluetooth: hci8: command tx timeout
[  366.894727][ T5837] Bluetooth: hci7: command tx timeout
[  369.257081][ T5220] Bluetooth: hci8: command tx timeout
[  372.473680][ T5220] Bluetooth: hci8: command tx timeout
[  374.034396][   T25] block nbd1: Possible stuck request ffff8880223a0000: control (read@0,1024B). Runtime 240 seconds
[  374.047329][   T25] block nbd1: Possible stuck request ffff8880223a0200: control (read@1024,1024B). Runtime 240 seconds
[  374.050790][   T25] block nbd1: Possible stuck request ffff8880223a0400: control (read@2048,1024B). Runtime 240 seconds
[  374.082811][   T25] block nbd1: Possible stuck request ffff8880223a0600: control (read@3072,1024B). Runtime 240 seconds
[  379.203800][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  397.145807][ T5220] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  398.834853][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  399.238895][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  399.324348][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  399.487529][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  399.731778][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  399.744717][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  400.088838][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  400.796480][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  400.810455][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  400.813156][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  400.908352][ T9112] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  401.565684][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  402.407694][ T5833] Bluetooth: hci2: command tx timeout
[  404.232523][ T5833] Bluetooth: hci3: command tx timeout
[  404.391630][   T25] block nbd1: Possible stuck request ffff8880223a0000: control (read@0,1024B). Runtime 270 seconds
[  404.423234][   T25] block nbd1: Possible stuck request ffff8880223a0200: control (read@1024,1024B). Runtime 270 seconds
[  404.434390][   T25] block nbd1: Possible stuck request ffff8880223a0400: control (read@2048,1024B). Runtime 270 seconds
[  404.438030][   T25] block nbd1: Possible stuck request ffff8880223a0600: control (read@3072,1024B). Runtime 270 seconds
[  404.449326][ T5833] Bluetooth: hci2: command tx timeout
[  406.396813][ T5833] Bluetooth: hci3: command tx timeout
[  406.655998][ T5833] Bluetooth: hci2: command tx timeout
[  408.445626][ T5833] Bluetooth: hci3: command tx timeout
[  408.806242][ T5833] Bluetooth: hci2: command tx timeout
[  410.704428][ T5833] Bluetooth: hci3: command tx timeout
[  422.051488][   T34] INFO: task udevd:7157 blocked for more than 143 seconds.
[  422.065932][   T34]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  422.069129][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  422.072016][   T34] task:udevd           state:D stack:21064 pid:7157  tgid:7157  ppid:5280   task_flags:0x400140 flags:0x00004006
[  422.669223][   T34] Call Trace:
[  422.670380][   T34]  <TASK>
[  422.671530][   T34]  __schedule+0x16f5/0x4d00
[  422.684768][   T34]  ? schedule+0x165/0x360
[  422.686247][   T34]  ? __pfx___schedule+0x10/0x10
[  422.687820][   T34]  ? schedule+0x91/0x360
[  422.689168][   T34]  schedule+0x165/0x360
[  422.690511][   T34]  io_schedule+0x80/0xd0
[  422.691896][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  423.274135][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  423.276139][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  423.277963][   T34]  ? __filemap_get_folio+0x6d0/0xaf0
[  423.279599][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  423.281265][   T34]  do_read_cache_folio+0x1aa/0x590
[  423.282889][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  423.304270][   T34]  read_part_sector+0xb6/0x2b0
[  423.305892][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  423.307621][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  423.309379][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  423.311288][   T34]  bdev_disk_changed+0x75f/0x14b0
[  423.312966][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  426.350026][   T34]  ? wait_on_inode+0xc0/0x230
[  426.351646][   T34]  blkdev_get_whole+0x380/0x510
[  426.353321][   T34]  bdev_open+0x31e/0xd30
[  426.365161][   T34]  blkdev_open+0x3a8/0x510
[  426.366678][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  426.368319][   T34]  do_dentry_open+0xdf3/0x1970
[  426.369921][   T34]  vfs_open+0x3b/0x340
[  426.371265][   T34]  ? path_openat+0x2ecd/0x3830
[  426.372855][   T34]  path_openat+0x2ee5/0x3830
[  427.651170][ T9124] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  427.938232][ T9124] CPU: 0 UID: 0 PID: 9124 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  427.938246][ T9124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  427.938251][ T9124] Call Trace:
[  427.938254][ T9124]  <TASK>
[  427.938259][ T9124]  dump_stack_lvl+0x189/0x250
[  427.938273][ T9124]  ? __pfx_dump_stack_lvl+0x10/0x10
[  427.938282][ T9124]  ? __pfx__printk+0x10/0x10
[  427.938293][ T9124]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  427.938303][ T9124]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  427.938313][ T9124]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  427.938324][ T9124]  warn_alloc+0x214/0x310
[  427.938337][ T9124]  ? __pfx_warn_alloc+0x10/0x10
[  427.938350][ T9124]  ? __get_vm_area_node+0x28f/0x300
[  427.938360][ T9124]  ? kcov_ioctl+0x55/0x640
[  427.938368][ T9124]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  427.938388][ T9124]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  427.938400][ T9124]  ? __pfx_kcov_ioctl+0x10/0x10
[  427.938406][ T9124]  vmalloc_user_noprof+0xad/0xf0
[  427.938416][ T9124]  ? kcov_ioctl+0x55/0x640
[  427.938422][ T9124]  kcov_ioctl+0x55/0x640
[  427.938429][ T9124]  ? bpf_lsm_file_ioctl+0x9/0x20
[  427.938437][ T9124]  ? __pfx_kcov_ioctl+0x10/0x10
[  427.938444][ T9124]  __se_sys_ioctl+0xfc/0x170
[  427.938453][ T9124]  do_syscall_64+0xfa/0x3b0
[  427.938461][ T9124]  ? lockdep_hardirqs_on+0x9c/0x150
[  427.938468][ T9124]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.938475][ T9124]  ? exc_page_fault+0x9f/0xf0
[  427.938486][ T9124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.938493][ T9124] RIP: 0033:0x7f4822d8e52b
[  427.938501][ T9124] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  427.938507][ T9124] RSP: 002b:00007ffc48aa8240 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  427.938516][ T9124] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f4822d8e52b
[  427.938521][ T9124] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9
[  427.938526][ T9124] RBP: 00007f4822fb6118 R08: 00000000000000d8 R09: 0000000000000000
[  427.938530][ T9124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  427.938534][ T9124] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  427.938544][ T9124]  </TASK>
[  427.938547][ T9124] Mem-Info:
[  428.146970][   T34]  ? arch_stack_walk+0xfc/0x150
[  428.148558][   T34]  ? __pfx_path_openat+0x10/0x10
[  428.150371][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.152480][   T34]  do_filp_open+0x1fa/0x410
[  428.298441][   T34]  ? __lock_acquire+0xab9/0xd20
[  428.300108][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  428.301797][   T34]  ? _raw_spin_unlock+0x28/0x50
[  428.315800][   T34]  ? alloc_fd+0x64c/0x6c0
[  428.317209][   T34]  do_sys_openat2+0x121/0x1c0
[  428.318738][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  428.320549][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  428.322261][   T34]  ? rcu_is_watching+0x15/0xb0
[  429.678176][   T34]  __x64_sys_openat+0x138/0x170
[  429.679844][   T34]  do_syscall_64+0xfa/0x3b0
[  429.681290][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  429.682972][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.698387][   T34]  ? exc_page_fault+0x9f/0xf0
[  429.700032][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.701906][   T34] RIP: 0033:0x7f4bdf7169a4
[  429.995837][   T34] RSP: 002b:00007ffc11c7d160 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  429.998546][   T34] RAX: ffffffffffffffda RBX: 0000560d985471a0 RCX: 00007f4bdf7169a4
[  430.010389][   T34] RDX: 00000000000a0800 RSI: 0000560d9852a2d0 RDI: 00000000ffffff9c
[  430.013058][   T34] RBP: 0000560d9852a2d0 R08: 0000000000000001 R09: 7fffffffffffffff
[  430.022187][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  430.547008][   T34] R13: 0000560d98534d60 R14: 0000000000000001 R15: 0000560d98529910
[  430.549587][   T34]  </TASK>
[  430.556730][   T34] 
[  430.556730][   T34] Showing all locks held in the system:
[  430.559255][   T34] 3 locks held by kworker/u9:1/28:
[  430.560920][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  430.575176][   T34]  #1: ffffc9000061fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  430.578644][   T34]  #2: ffffffff8f51c948 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  430.581487][   T34] 1 lock held by khungtaskd/34:
[  430.583078][   T34]  #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  430.624913][ T9124] active_anon:4673 inactive_anon:0 isolated_anon:0
[  430.624913][ T9124]  active_file:978 inactive_file:38316 isolated_file:0
[  430.624913][ T9124]  unevictable:1768 dirty:186 writeback:0
[  430.624913][ T9124]  slab_reclaimable:9227 slab_unreclaimable:75324
[  430.624913][ T9124]  mapped:25642 shmem:2466 pagetables:1383
[  430.624913][ T9124]  sec_pagetables:0 bounce:0
[  430.624913][ T9124]  kernel_misc_reclaimable:0
[  430.624913][ T9124]  free:257588 free_pcp:20894 free_cma:0
[  430.654881][ T9124] Node 0 active_anon:7372kB inactive_anon:0kB active_file:2920kB inactive_file:18852kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:66948kB dirty:728kB writeback:0kB shmem:4836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6876kB pagetables:2728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  431.726150][ T9124] Node 1 active_anon:11308kB inactive_anon:0kB active_file:992kB inactive_file:134412kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35616kB dirty:16kB writeback:0kB shmem:5028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4624kB pagetables:2844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  431.787976][   T34] 1 lock held by dhcpcd/5576:
[  431.789559][   T34]  #0: ffffffff8f51c948 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x20f/0x330
[  431.792634][   T34] 2 locks held by getty/5658:

VM DIAGNOSIS:
12:45:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e13ee60 RBP=ffffffff81729af5 RSP=ffffc90000006618
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900000067d8 R11=ffffffff81acf6a0
R12=0000000000000002 R13=ffffffff8e13ee60 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819e31c8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555852f4500 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2b42eb98ba CR3=0000000124950000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ffff00ff00000000 XMM05=00000000000001c4 0000000037310038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff0000ff00 XMM09=00000000000001f1 0000000037310038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000006 RBX=0000000000000019 RCX=a9107886a5f47e00 RDX=ffffc900001dfd01
RSI=ffffffff8d9aa58a RDI=ffffffff8be28fc0 RBP=ffff8881007c8bb8 RSP=ffffc900001dfb90
R8 =ffffc900001e01f0 R9 =0000000000000000 R10=ffffc900001dfd18 R11=fffff5200003bfa5
R12=0000000000000005 R13=0000000000000005 R14=ffffffff8e13ee60 R15=ffff8881007c8000
RIP=ffffffff819e43bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2b42eb8d5f CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f2b45185d00
XMM02=0000000500000007 82a71c1200000001 XMM03=8f3882ecec831f0b 0f8354a3e331f2d9
XMM04=0000000000000000 00007f2b45185d00 XMM05=000055558c578bd8 000055558c578b50
XMM06=000055558c578d74 000055558c578d70 XMM07=08060a0100000000 b2c51cdbc4720cc3
XMM08=e44458e36fdfbe8f 3b8c264b00000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
