last executing test programs:

44.862254186s ago: executing program 1 (id=360):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0xb12}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

44.746999634s ago: executing program 1 (id=364):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc1", 0xc3}, {&(0x7f00000002c0)="9c81", 0x2}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4004894)
sendmmsg$inet(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000f00)="672a55a7116b", 0x6}, {0x0}], 0x2}}, {{&(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000680)=[{&(0x7f0000001000)="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", 0xdb5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x3, 0x801)

43.834085599s ago: executing program 1 (id=397):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

43.727134852s ago: executing program 1 (id=402):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4f342935ef5aebe8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10)

43.493943795s ago: executing program 1 (id=411):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r2}, 0x99)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp=r1, 0x1}, 0x20)

38.343156771s ago: executing program 1 (id=411):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r2}, 0x99)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp=r1, 0x1}, 0x20)

36.714220948s ago: executing program 0 (id=543):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x907, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\xbd\n'}, @typed={0x6, 0x20, 0x0, 0x0, @str='\xbd\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800)

36.582231585s ago: executing program 0 (id=550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84)
readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x2, 0x2)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$alg(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040d5}, 0x0)
recvmsg$unix(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x12060)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x10)
r9 = socket(0x22, 0x2, 0x3)
bind$bt_sco(r9, 0x0, 0x0)

36.48929736s ago: executing program 2 (id=551):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0)

36.486074949s ago: executing program 0 (id=552):
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xd, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000021990000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000485000000ba00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x224eeb85387f3f80, 0x66, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)

36.423238347s ago: executing program 0 (id=553):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20)
sendto$inet(r0, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)

36.422895588s ago: executing program 0 (id=554):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18)
sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r6}, 0x0, 0x0}, 0x20)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff0000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], 0x0, 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x0, &(0x7f0000000980)=[r6, r6, r6, r6, r6, 0xffffffffffffffff, r6, r6, 0x1]}, 0x94)
close(r1)

35.791948705s ago: executing program 2 (id=555):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x578, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x2, 0x1, [0x8, 0xff, 0x10, 0x1, 0x2800, 0xc, 0xfffb, 0xff93, 0x7, 0x0, 0x81, 0x6, 0x0, 0x5, 0x7f, 0x200], 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0)

35.790346269s ago: executing program 2 (id=556):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})

35.718033435s ago: executing program 2 (id=557):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)

35.717680747s ago: executing program 2 (id=558):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)='9', 0x1}], 0x1}}], 0x1, 0xc010)
recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/139, 0x8b}, {0x0}, {&(0x7f0000000540)=""/78, 0x4e}, {&(0x7f0000000300)=""/56, 0x38}], 0x4}, 0xfe}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/217, 0xd9}], 0x1}, 0xff}], 0x2, 0x141, 0x0)

30.648990656s ago: executing program 0 (id=559):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xc9)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

28.891457815s ago: executing program 2 (id=560):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x24, 0x58, 0x4ee4e6a52ff56541}, 0x24}}, 0x0)

5.112959755s ago: executing program 32 (id=559):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xc9)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 33 (id=560):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x24, 0x58, 0x4ee4e6a52ff56541}, 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31816' (ED25519) to the list of known hosts.
syzkaller login: [   41.713919][ T5778] cgroup: Unknown subsys name 'net'
[   41.835372][ T5778] cgroup: Unknown subsys name 'cpuset'
[   41.839525][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.090662][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.376932][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.380232][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.383376][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.386077][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.389213][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.468573][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.471586][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.474423][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.477214][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.479777][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.489627][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.499598][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.502823][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.505870][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.508819][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.531278][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   46.624592][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.627247][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.629552][ T5828] bridge_slave_0: entered allmulticast mode
[   46.632254][ T5828] bridge_slave_0: entered promiscuous mode
[   46.640277][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.642483][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.645131][ T5828] bridge_slave_1: entered allmulticast mode
[   46.647829][ T5828] bridge_slave_1: entered promiscuous mode
[   46.672507][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.680100][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.704429][ T5828] team0: Port device team_slave_0 added
[   46.708433][ T5828] team0: Port device team_slave_1 added
[   46.763007][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.765278][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.774096][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.788215][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.790510][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.799400][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.814165][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   46.872657][ T5828] hsr_slave_0: entered promiscuous mode
[   46.875010][ T5828] hsr_slave_1: entered promiscuous mode
[   46.880849][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   46.936857][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.939430][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.941722][ T5835] bridge_slave_0: entered allmulticast mode
[   46.944903][ T5835] bridge_slave_0: entered promiscuous mode
[   46.964445][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.966888][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.969889][ T5835] bridge_slave_1: entered allmulticast mode
[   46.973572][ T5835] bridge_slave_1: entered promiscuous mode
[   47.002111][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.014446][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.016773][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.019139][ T5834] bridge_slave_0: entered allmulticast mode
[   47.021790][ T5834] bridge_slave_0: entered promiscuous mode
[   47.029693][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.041471][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.044235][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.046601][ T5834] bridge_slave_1: entered allmulticast mode
[   47.049359][ T5834] bridge_slave_1: entered promiscuous mode
[   47.080429][ T5835] team0: Port device team_slave_0 added
[   47.101423][ T5835] team0: Port device team_slave_1 added
[   47.113228][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.141227][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.159096][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.161518][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.170802][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.176830][ T5834] team0: Port device team_slave_0 added
[   47.185929][ T5834] team0: Port device team_slave_1 added
[   47.192034][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.194450][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.204729][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.237716][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.240222][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.249602][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.254869][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.257157][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.265776][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.315043][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.333632][ T5835] hsr_slave_0: entered promiscuous mode
[   47.335990][ T5835] hsr_slave_1: entered promiscuous mode
[   47.338208][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.340785][ T5835] Cannot create hsr debugfs directory
[   47.342975][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.349605][ T5834] hsr_slave_0: entered promiscuous mode
[   47.352269][ T5834] hsr_slave_1: entered promiscuous mode
[   47.355497][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.359168][ T5834] Cannot create hsr debugfs directory
[   47.362361][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.367391][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.467764][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.470134][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.472877][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.475102][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.536253][ T1884] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.539486][ T1884] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.574930][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.578476][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.585289][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.598726][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.618729][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.624102][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   47.637322][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.643409][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.645679][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.654463][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.659947][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.666045][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.668420][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.671055][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.757454][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.780209][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   47.790582][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.799040][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.801402][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.805669][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.808013][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.829422][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   47.852170][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.854697][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.869076][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.871438][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.896920][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.940012][ T5828] veth0_vlan: entered promiscuous mode
[   47.947540][ T5828] veth1_vlan: entered promiscuous mode
[   47.968417][ T5828] veth0_macvtap: entered promiscuous mode
[   47.976523][ T5828] veth1_macvtap: entered promiscuous mode
[   47.987828][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.992467][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.000476][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.005364][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.008712][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.011557][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.021115][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.058496][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.087114][ T5835] veth0_vlan: entered promiscuous mode
[   48.099007][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.099623][ T5835] veth1_vlan: entered promiscuous mode
[   48.101561][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.140967][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.145454][ T5834] veth0_vlan: entered promiscuous mode
[   48.147395][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.150567][ T5835] veth0_macvtap: entered promiscuous mode
[   48.157374][ T5835] veth1_macvtap: entered promiscuous mode
[   48.169848][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.175961][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.178806][ T5834] veth1_vlan: entered promiscuous mode
[   48.187767][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.190669][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.194836][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.197591][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.217878][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.233976][ T5834] veth0_macvtap: entered promiscuous mode
[   48.266783][ T5834] veth1_macvtap: entered promiscuous mode
[   48.279834][ T1884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.282320][ T1884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.304823][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.313863][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.319324][ T4442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.325672][ T4442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.329349][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.332226][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.337312][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.340138][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.347029][ T5892] Zero length message leads to an empty skb
[   48.395337][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.397794][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.414116][ T5830] Bluetooth: hci0: command tx timeout
[   48.422751][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.425595][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.493451][ T5830] Bluetooth: hci2: command tx timeout
[   48.502178][ T5905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5'.
[   48.573220][ T5830] Bluetooth: hci1: command tx timeout
[   48.942281][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'.
[   48.969515][ T5946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24'.
[   48.984967][ T5946] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   48.988229][ T5946] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   48.991350][ T5946] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   48.994465][ T5946] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   49.033651][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25'.
[   49.060554][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'.
[   49.091222][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.249717][ T5963] dvmrp8: entered allmulticast mode
[   49.282490][ T5961] dvmrp8: left allmulticast mode
[   49.567482][ T5987] warning: `syz.0.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.744416][   T33] audit: type=1800 audit(1752350032.724:2): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.42" name="memory.events" dev="tmpfs" ino=84 res=0 errno=0
[   49.868307][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'.
[   49.976085][ T6006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.50'.
[   50.040501][ T6014] netlink: 'syz.2.54': attribute type 1 has an invalid length.
[   50.101936][ T6017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.55'.
[   50.110471][ T6014] gretap1: entered promiscuous mode
[   50.166030][ T6019] macvlan2: entered promiscuous mode
[   50.167834][ T6019] macvlan2: entered allmulticast mode
[   50.260700][ T6025] netlink: 'syz.0.57': attribute type 10 has an invalid length.
[   50.279686][ T6025] batman_adv: batadv0: Adding interface: team0
[   50.281747][ T6025] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.296364][ T6025] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   50.301670][ T6025] netlink: 'syz.0.57': attribute type 10 has an invalid length.
[   50.304706][ T6025] netlink: 2 bytes leftover after parsing attributes in process `syz.0.57'.
[   50.314110][ T6025] team0: entered promiscuous mode
[   50.315797][ T6025] team_slave_0: entered promiscuous mode
[   50.320138][ T6025] team_slave_1: entered promiscuous mode
[   50.326470][ T6025] 8021q: adding VLAN 0 to HW filter on device team0
[   50.328929][ T6025] batman_adv: batadv0: Interface activated: team0
[   50.330984][ T6025] batman_adv: batadv0: Interface deactivated: team0
[   50.334162][ T6025] batman_adv: batadv0: Removing interface: team0
[   50.346604][ T6025] bridge0: port 3(team0) entered blocking state
[   50.348655][ T6025] bridge0: port 3(team0) entered disabled state
[   50.350766][ T6025] team0: entered allmulticast mode
[   50.352412][ T6025] team_slave_0: entered allmulticast mode
[   50.354659][ T6025] team_slave_1: entered allmulticast mode
[   50.357870][ T6025] bridge0: port 3(team0) entered blocking state
[   50.360095][ T6025] bridge0: port 3(team0) entered forwarding state
[   50.409459][ T6031] netlink: 'syz.0.60': attribute type 21 has an invalid length.
[   50.412280][ T6031] netlink: 156 bytes leftover after parsing attributes in process `syz.0.60'.
[   50.493219][ T5830] Bluetooth: hci0: command tx timeout
[   50.576583][ T5830] Bluetooth: hci2: command tx timeout
[   50.622372][ T6044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   50.633457][ T6044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   50.653455][ T5830] Bluetooth: hci1: command tx timeout
[   50.715112][ T6054] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   50.717695][ T6054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   50.872818][ T6068] syz.0.77 (6068) used greatest stack depth: 20592 bytes left
[   51.316566][ T6093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   51.320079][ T6093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.426507][ T6093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   51.429722][ T6093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.473312][ T6093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   51.476633][ T6093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.521331][ T6093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   51.525088][ T6093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.609400][ T6093] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   51.612276][ T6093] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.620556][ T6093] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   51.623617][ T6093] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.630332][ T6093] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   51.634169][ T6093] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.653324][ T6093] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   51.659126][ T6093] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.910098][ T6115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.229501][ T6152] netlink: 'syz.2.114': attribute type 1 has an invalid length.
[   52.278615][ T6158] Bluetooth: MGMT ver 1.23
[   52.341324][ T6163] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   52.456004][ T6177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   52.579974][ T5830] Bluetooth: hci0: command tx timeout
[   52.652770][ T5830] Bluetooth: hci2: command tx timeout
[   52.686850][ T6193] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[   52.691027][ T6193] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   52.754537][ T5830] Bluetooth: hci1: command tx timeout
[   53.238399][ T6216] netlink: 'syz.1.145': attribute type 1 has an invalid length.
[   53.243618][ T6215] syz.0.146 uses obsolete (PF_INET,SOCK_PACKET)
[   53.380638][ T6224] netlink: 'syz.1.150': attribute type 3 has an invalid length.
[   54.581116][ T6257] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.669506][ T5830] Bluetooth: hci0: command tx timeout
[   54.742980][ T5830] Bluetooth: hci2: command tx timeout
[   54.825203][ T5830] Bluetooth: hci1: command tx timeout
[   56.019906][ T6274] bridge0: port 3(erspan0) entered blocking state
[   56.022277][ T6274] bridge0: port 3(erspan0) entered disabled state
[   56.025239][ T6274] erspan0: entered allmulticast mode
[   56.028102][ T6274] erspan0: entered promiscuous mode
[   56.030452][ T6274] bridge0: port 3(erspan0) entered blocking state
[   56.032769][ T6274] bridge0: port 3(erspan0) entered forwarding state
[   56.039942][ T6274] erspan0: left allmulticast mode
[   56.041550][ T6274] erspan0: left promiscuous mode
[   56.044385][ T6274] bridge0: port 3(erspan0) entered disabled state
[   56.200610][ T6278] trusted_key: syz.2.172 sent an empty control message without MSG_MORE.
[   56.516981][ T6298] netlink: 'syz.0.181': attribute type 21 has an invalid length.
[   56.819013][ T6317] __nla_validate_parse: 9 callbacks suppressed
[   56.819023][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.190'.
[   56.834488][ T6317] netlink: 'syz.2.190': attribute type 1 has an invalid length.
[   56.850663][ T6319] netlink: 'syz.1.191': attribute type 2 has an invalid length.
[   56.964654][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'.
[   57.021671][ T6327] netlink: 'syz.1.193': attribute type 13 has an invalid length.
[   57.024341][ T6327] netlink: 'syz.1.193': attribute type 17 has an invalid length.
[   57.084654][ T6327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.123044][ T6329] block nbd0: server does not support multiple connections per device.
[   57.126288][ T6329] block nbd0: shutting down sockets
[   57.254418][ T6350] block nbd0: Unsupported socket: shutdown callout must be supported.
[   57.291538][ T6354] netlink: 'syz.2.205': attribute type 7 has an invalid length.
[   57.307718][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'.
[   57.818850][   T33] audit: type=1804 audit(1752350040.794:3): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.227" name="/newroot/91/cgroup.controllers" dev="tmpfs" ino=476 res=1 errno=0
[   57.835349][   T33] audit: type=1800 audit(1752350040.794:4): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.227" name="cgroup.controllers" dev="tmpfs" ino=476 res=0 errno=0
[   57.872704][ T6409] netlink: 164 bytes leftover after parsing attributes in process `syz.1.228'.
[   57.883780][ T6409] netlink: 164 bytes leftover after parsing attributes in process `syz.1.228'.
[   57.886719][ T6409] netlink: 60 bytes leftover after parsing attributes in process `syz.1.228'.
[   57.925189][ T6411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.229'.
[   57.935110][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'.
[   57.981490][ T6411] syz.1.229 (6411) used greatest stack depth: 20064 bytes left
[   58.098967][ T6417] netlink: 'syz.1.232': attribute type 11 has an invalid length.
[   58.186593][ T6421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   58.325545][ T6428] syzkaller1: entered promiscuous mode
[   58.327385][ T6428] syzkaller1: entered allmulticast mode
[   58.467147][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'.
[   58.538308][ T6443] netlink: 96 bytes leftover after parsing attributes in process `syz.0.244'.
[   58.576653][ T6449] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   59.639582][ T6486] netlink: 'syz.1.264': attribute type 2 has an invalid length.
[   59.744491][ T6496] Cannot find set identified by id 0 to match
[   59.784479][ T6498] netlink: 'syz.2.269': attribute type 5 has an invalid length.
[   61.105405][ T6571] netlink: 'syz.2.300': attribute type 3 has an invalid length.
[   61.108526][ T6571] netlink: 'syz.2.300': attribute type 3 has an invalid length.
[   61.381648][ T6601] unsupported nlmsg_type 40
[   61.561438][ T6623] netlink: 'syz.2.326': attribute type 4 has an invalid length.
[   61.998334][ T6673] __nla_validate_parse: 11 callbacks suppressed
[   61.998344][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'.
[   62.004278][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'.
[   62.184162][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'.
[   62.222424][ T6693] tipc: Started in network mode
[   62.226407][ T6693] tipc: Node identity fa03949dae14, cluster identity 4711
[   62.228891][ T6693] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.231989][ T6693] syzkaller0: entered promiscuous mode
[   62.235453][ T6693] syzkaller0: entered allmulticast mode
[   62.266561][ T6693] tipc: Resetting bearer <eth:syzkaller0>
[   62.270518][ T6692] tipc: Resetting bearer <eth:syzkaller0>
[   62.277484][ T6692] tipc: Disabling bearer <eth:syzkaller0>
[   62.373520][ T6702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.365'.
[   63.000600][ T6749] bridge0: port 4(hsr0) entered blocking state
[   63.002869][ T6749] bridge0: port 4(hsr0) entered disabled state
[   63.005677][ T6749] hsr0: entered allmulticast mode
[   63.007379][ T6749] hsr_slave_0: entered allmulticast mode
[   63.009504][ T6749] hsr_slave_1: entered allmulticast mode
[   63.012296][ T6749] hsr0: entered promiscuous mode
[   63.020167][ T6749] bridge0: port 4(hsr0) entered blocking state
[   63.022255][ T6749] bridge0: port 4(hsr0) entered forwarding state
[   63.209803][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'.
[   63.216271][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'.
[   63.228393][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'.
[   63.246312][ T6772] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   63.267824][ T6772] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   63.278658][ T6776] netlink: 136 bytes leftover after parsing attributes in process `syz.0.399'.
[   63.285796][ T6776] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   63.355897][ T6780] Cannot find add_set index 2 as target
[   63.519377][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.408'.
[   63.614355][ T6800] openvswitch: netlink: IPv4 tun info is not correct
[   63.618733][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.682295][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.746165][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.792239][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.832342][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.835825][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.838890][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.841983][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.847592][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.897566][   T13] bridge_slave_1: left allmulticast mode
[   63.899581][   T13] bridge_slave_1: left promiscuous mode
[   63.902007][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.915181][   T13] bridge_slave_0: left allmulticast mode
[   63.918133][   T13] bridge_slave_0: left promiscuous mode
[   63.920335][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.124787][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.129182][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.132782][   T13] bond0 (unregistering): Released all slaves
[   64.187456][   T13] tipc: Left network mode
[   64.275599][ T6806] chnl_net:caif_netlink_parms(): no params data found
[   64.372407][   T13] hsr_slave_0: left promiscuous mode
[   64.379064][   T13] hsr_slave_1: left promiscuous mode
[   64.381175][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.383875][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.394585][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.396883][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.415006][   T13] veth1_macvtap: left promiscuous mode
[   64.416888][   T13] veth0_macvtap: left promiscuous mode
[   64.418703][   T13] veth1_vlan: left promiscuous mode
[   64.420418][   T13] veth0_vlan: left promiscuous mode
[   64.664189][   T13] team0 (unregistering): Port device team_slave_1 removed
[   64.684276][   T13] team0 (unregistering): Port device team_slave_0 removed
[   65.117854][ T6806] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.120126][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.122379][ T6806] bridge_slave_0: entered allmulticast mode
[   65.132462][ T6806] bridge_slave_0: entered promiscuous mode
[   65.138651][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.141021][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.145416][ T6806] bridge_slave_1: entered allmulticast mode
[   65.148121][ T6806] bridge_slave_1: entered promiscuous mode
[   65.158398][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.416'.
[   65.220704][ T6806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.260241][ T6806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.361491][ T6806] team0: Port device team_slave_0 added
[   65.393854][ T6806] team0: Port device team_slave_1 added
[   65.449208][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.464762][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.496151][ T6806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.552698][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.554911][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.594169][ T6806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.710529][ T6806] hsr_slave_0: entered promiscuous mode
[   65.718944][ T6806] hsr_slave_1: entered promiscuous mode
[   65.726582][ T6806] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.728999][ T6806] Cannot create hsr debugfs directory
[   65.839239][ T6949] tipc: Started in network mode
[   65.840899][ T6949] tipc: Node identity 560563d49831, cluster identity 4711
[   65.844763][ T6949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.854325][ T6949] syzkaller0: entered promiscuous mode
[   65.856183][ T6949] syzkaller0: entered allmulticast mode
[   65.876982][ T6949] tipc: Resetting bearer <eth:syzkaller0>
[   65.899605][ T6948] tipc: Resetting bearer <eth:syzkaller0>
[   65.907551][ T6948] tipc: Disabling bearer <eth:syzkaller0>
[   65.932925][ T5830] Bluetooth: hci1: command tx timeout
[   66.393471][ T6806] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.398442][ T6806] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.420663][ T6806] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.430493][ T6806] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.511043][ T6806] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.520998][ T6806] 8021q: adding VLAN 0 to HW filter on device team0
[   66.545017][ T6915] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.547261][ T6915] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.559820][ T6915] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.562019][ T6915] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.684524][ T6806] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.722208][ T6806] veth0_vlan: entered promiscuous mode
[   66.727199][ T6806] veth1_vlan: entered promiscuous mode
[   66.763750][ T6806] veth0_macvtap: entered promiscuous mode
[   66.769585][ T6806] veth1_macvtap: entered promiscuous mode
[   66.794816][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.805808][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.813911][ T6806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.816638][ T6806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.819360][ T6806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.832751][ T6806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.928757][ T6915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.931215][ T6915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.973837][ T6924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.976583][ T6924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.302799][ T7114] __nla_validate_parse: 8 callbacks suppressed
[   67.302809][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.480'.
[   67.307502][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'.
[   67.704961][ T7168] netlink: 'syz.2.498': attribute type 21 has an invalid length.
[   67.707503][ T7168] netlink: 156 bytes leftover after parsing attributes in process `syz.2.498'.
[   67.710354][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'.
[   68.587760][ T7177] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   68.650344][ T7185] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[   68.704591][ T7191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.512'.
[   68.796797][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.010991][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.014469][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.017322][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.020322][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.024084][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.113193][ T7198] chnl_net:caif_netlink_parms(): no params data found
[   69.297028][ T7198] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.302936][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.305314][ T7198] bridge_slave_0: entered allmulticast mode
[   69.308448][ T7198] bridge_slave_0: entered promiscuous mode
[   69.311735][ T7198] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.314855][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.317202][ T7198] bridge_slave_1: entered allmulticast mode
[   69.319785][ T7198] bridge_slave_1: entered promiscuous mode
[   69.339429][ T7198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.344379][ T7198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.364375][ T7198] team0: Port device team_slave_0 added
[   69.368458][ T7198] team0: Port device team_slave_1 added
[   69.387311][ T7198] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.389560][ T7198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.398027][ T7198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.402342][ T7198] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.405309][ T7198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.414255][ T7198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.439732][ T7198] hsr_slave_0: entered promiscuous mode
[   69.441981][ T7198] hsr_slave_1: entered promiscuous mode
[   69.445068][ T7198] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.447467][ T7198] Cannot create hsr debugfs directory
[   69.648760][ T7219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.683477][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'.
[   69.815883][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'.
[   69.818681][ T7239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.532'.
[   69.946872][ T7248] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   70.406878][ T7270] netlink: del zone limit has 4 unknown bytes
[   70.469025][ T7276] netlink: 100 bytes leftover after parsing attributes in process `syz.2.547'.
[   70.508937][ T7279] netlink: 788 bytes leftover after parsing attributes in process `syz.0.550'.
[   70.820282][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   70.822524][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.058467][ T5830] Bluetooth: hci1: command tx timeout
[   71.345970][ T7294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.142928][ T5830] Bluetooth: hci1: command tx timeout
[   75.227333][ T5830] Bluetooth: hci1: command tx timeout
[   77.311163][ T5830] Bluetooth: hci1: command tx timeout
[   81.174246][   T47] cfg80211: failed to load regulatory.db
[   81.277987][ T6915] sched: DL replenish lagged too much
[   98.286549][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.794228][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  132.804889][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  137.696311][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.228359][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  172.019521][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  178.856776][ T7311] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  193.944176][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  193.954984][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  194.534823][ T5830] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  196.580541][ T5830] Bluetooth: hci1: command 0x0406 tx timeout
[  199.199355][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  201.356684][ T7314] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  212.753892][ T7310] syz-executor: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  212.759424][ T7310] CPU: 1 UID: 0 PID: 7310 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  212.759436][ T7310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.759441][ T7310] Call Trace:
[  212.759445][ T7310]  <TASK>
[  212.759449][ T7310]  dump_stack_lvl+0x189/0x250
[  212.759464][ T7310]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.759473][ T7310]  ? __pfx__printk+0x10/0x10
[  212.759483][ T7310]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  212.759494][ T7310]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  212.759504][ T7310]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  212.759514][ T7310]  warn_alloc+0x214/0x310
[  212.759531][ T7310]  ? __pfx_warn_alloc+0x10/0x10
[  212.759544][ T7310]  ? __get_vm_area_node+0x28f/0x300
[  212.759553][ T7310]  ? kcov_ioctl+0x55/0x640
[  212.759565][ T7310]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  212.759585][ T7310]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  212.759596][ T7310]  ? __pfx_kcov_ioctl+0x10/0x10
[  212.759606][ T7310]  vmalloc_user_noprof+0xad/0xf0
[  212.759615][ T7310]  ? kcov_ioctl+0x55/0x640
[  212.759626][ T7310]  kcov_ioctl+0x55/0x640
[  212.759637][ T7310]  ? bpf_lsm_file_ioctl+0x9/0x20
[  212.759645][ T7310]  ? __pfx_kcov_ioctl+0x10/0x10
[  212.759655][ T7310]  __se_sys_ioctl+0xfc/0x170
[  212.759664][ T7310]  do_syscall_64+0xfa/0x3b0
[  212.759672][ T7310]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.759683][ T7310]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.759689][ T7310]  ? exc_page_fault+0x9f/0xf0
[  212.759720][ T7310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.759728][ T7310] RIP: 0033:0x7fc6d018e52b
[  212.759736][ T7310] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  212.759742][ T7310] RSP: 002b:00007ffd86d909c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  212.759751][ T7310] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fc6d018e52b
[  212.759756][ T7310] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7
[  212.759760][ T7310] RBP: 00007fc6d03b5f40 R08: 00000000000000da R09: 0000000000000000
[  212.759765][ T7310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.759769][ T7310] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  212.759779][ T7310]  </TASK>
[  212.759782][ T7310] Mem-Info:
[  215.237573][ T7310] active_anon:5390 inactive_anon:0 isolated_anon:0
[  215.237573][ T7310]  active_file:882 inactive_file:38248 isolated_file:0
[  215.237573][ T7310]  unevictable:1768 dirty:15 writeback:0
[  215.237573][ T7310]  slab_reclaimable:9078 slab_unreclaimable:285780
[  215.237573][ T7310]  mapped:10791 shmem:2445 pagetables:759
[  215.237573][ T7310]  sec_pagetables:0 bounce:0
[  215.237573][ T7310]  kernel_misc_reclaimable:0
[  215.237573][ T7310]  free:82764 free_pcp:17726 free_cma:0
[  215.945054][ T7310] Node 0 active_anon:16816kB inactive_anon:0kB active_file:3128kB inactive_file:135328kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36040kB dirty:44kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5340kB pagetables:1872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  218.665219][ T7310] Node 1 active_anon:4728kB inactive_anon:0kB active_file:400kB inactive_file:17668kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:7124kB dirty:16kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6468kB pagetables:1160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  218.812787][ T7310] Node 0 DMA free:4044kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:376kB free_cma:0kB
[  218.821631][ T7310] lowmem_reserve[]: 0 812 812 812 812
[  219.258023][ T7310] Node 0 DMA32 free:47436kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16816kB inactive_anon:0kB active_file:3128kB inactive_file:135328kB unevictable:3536kB writepending:44kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:37792kB local_pcp:18448kB free_cma:0kB
[  219.383927][ T7310] lowmem_reserve[]: 0 0 0 0 0
[  219.385494][ T7310] Node 1 DMA32 free:222744kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:972kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:4kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:22976kB local_pcp:12852kB free_cma:0kB
[  221.564250][ T7310] lowmem_reserve[]: 0 0 854 854 854
[  221.565916][ T7310] Node 1 Normal free:45576kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4720kB inactive_anon:0kB active_file:400kB inactive_file:17660kB unevictable:3536kB writepending:12kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:30428kB local_pcp:20788kB free_cma:0kB
[  222.134587][ T7310] lowmem_reserve[]: 0 0 0 0 0
[  222.136196][ T7310] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 4044kB
[  222.140843][ T7310] Node 0 DMA32: 1021*4kB (UM) 301*8kB (UME) 404*16kB (UME) 109*32kB (UME) 125*64kB (UME) 45*128kB (UM) 29*256kB (UME) 14*512kB (UM) 8*1024kB (M) 4*2048kB (M) 0*4096kB = 61180kB
[  223.055506][ T7310] Node 1 DMA32: 64*4kB (UM) 131*8kB (UM) 300*16kB (U) 221*32kB (UM) 124*64kB (UM) 49*128kB (UM) 21*256kB (U) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 45*4096kB (M) = 227832kB
[  223.061013][ T7310] Node 1 Normal: 944*4kB (UME) 358*8kB (UME) 381*16kB (UME) 67*32kB (UME) 26*64kB (UME) 16*128kB (UME) 19*256kB (ME) 3*512kB (UM) 0*1024kB 2*2048kB (UM) 6*4096kB (M) = 53664kB
[  223.676465][ T7310] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  223.679527][ T7310] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  224.159694][ T7310] 41580 total pagecache pages
[  224.161207][ T7310] 0 pages in swap cache
[  224.162555][ T7310] Free swap  = 124996kB
[  224.196349][ T7310] Total swap = 124996kB
[  224.197882][ T7310] 786301 pages RAM
[  224.199139][ T7310] 0 pages HighMem/MovableOnly
[  224.200693][ T7310] 241085 pages reserved
[  224.202065][ T7310] 0 pages cma reserved
[  226.977141][   T34] INFO: task syz-executor:7198 blocked for more than 144 seconds.
[  226.979595][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  227.007747][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  227.010412][   T34] task:syz-executor    state:D stack:21888 pid:7198  tgid:7198  ppid:1      task_flags:0x400140 flags:0x00004004
[  227.445593][   T34] Call Trace:
[  227.446759][   T34]  <TASK>
[  227.447757][   T34]  __schedule+0x16f5/0x4d00
[  227.449261][   T34]  ? __lock_acquire+0xab9/0xd20
[  227.450874][   T34]  ? schedule+0x165/0x360
[  227.452302][   T34]  ? __pfx___schedule+0x10/0x10
[  228.185232][   T34]  ? schedule+0x91/0x360
[  228.193211][   T34]  schedule+0x165/0x360
[  228.194569][   T34]  schedule_preempt_disabled+0x13/0x30
[  228.196272][   T34]  __mutex_lock+0x724/0xe80
[  228.197726][   T34]  ? __mutex_lock+0x51b/0xe80
[  228.199240][   T34]  ? device_del+0xa9/0x8e0
[  228.200638][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  228.202243][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  228.919022][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  228.920950][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  228.932772][   T34]  device_del+0xa9/0x8e0
[  228.934200][   T34]  ? ida_free+0x2ba/0x310
[  228.935628][   T34]  ? __lock_acquire+0xab9/0xd20
[  228.937250][   T34]  ? __pfx_ida_free+0x10/0x10
[  228.938820][   T34]  ? __pfx_device_del+0x10/0x10
[  228.940367][   T34]  device_unregister+0x20/0xc0
[  228.941882][   T34]  del_device_store+0x2aa/0x360
[  231.703815][   T34]  ? __pfx_del_device_store+0x10/0x10
[  231.705519][   T34]  ? sysfs_file_kobj+0x1e4/0x230
[  231.707101][   T34]  ? sysfs_kf_write+0x166/0x260
[  231.708586][   T34]  ? __pfx_sysfs_kf_write+0x10/0x10
[  231.710203][   T34]  kernfs_fop_write_iter+0x378/0x4f0
[  231.711833][   T34]  vfs_write+0x54b/0xa90
[  233.303774][   T34]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  233.305719][   T34]  ? __pfx_vfs_write+0x10/0x10
[  233.313821][   T34]  ? do_sys_openat2+0x154/0x1c0
[  233.315392][   T34]  ? kmem_cache_free+0x18f/0x400
[  233.316980][   T34]  ksys_write+0x145/0x250
[  233.318420][   T34]  ? __pfx_ksys_write+0x10/0x10
[  233.320059][   T34]  ? do_syscall_64+0xbe/0x3b0
[  233.321591][   T34]  do_syscall_64+0xfa/0x3b0
[  235.478559][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.480254][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.482175][   T34]  ? exc_page_fault+0x9f/0xf0
[  235.493784][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.495625][   T34] RIP: 0033:0x7f5e6178d3df
[  235.497038][   T34] RSP: 002b:00007ffd686ce190 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  235.499654][   T34] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5e6178d3df
[  235.502025][   T34] RDX: 0000000000000001 RSI: 00007ffd686ce1e0 RDI: 0000000000000005
[  236.507048][   T34] RBP: 00007f5e61811d8d R08: 0000000000000000 R09: 00007ffd686cdfe7
[  236.509505][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  236.511969][   T34] R13: 00007ffd686ce1e0 R14: 00007f5e624e4620 R15: 0000000000000003
[  236.806212][   T34]  </TASK>
[  236.807270][   T34] 
[  236.807270][   T34] Showing all locks held in the system:
[  236.809612][   T34] 3 locks held by kworker/u8:0/12:
[  236.811213][   T34]  #0: ffff8880219d1148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0

VM DIAGNOSIS:
19:56:50  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888020b28237 R9 =1ffff11004165046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98b7 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffce581d728 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=6f65b39d0afeff00 RDX=ffff88810fa49cc0
RSI=ffffffff8e13f160 RDI=ffff88810fa4a7d8 RBP=00000000ffffffff RSP=ffffc900001dfc70
R8 =ffffc900001dfeaf R9 =0000000000000000 R10=ffffc900001dfe80 R11=fffff5200003bfd6
R12=0000000000000246 R13=ffff88810fa49cc0 R14=ffffffff8e13f160 R15=0000000000000001
RIP=ffffffff8b6f3f6a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffce581cf88 CR3=00000000236bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
