last executing test programs:

410.52813ms ago: executing program 1 (id=525):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x101)

294.268551ms ago: executing program 1 (id=532):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50)

294.1429ms ago: executing program 1 (id=533):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

293.95269ms ago: executing program 2 (id=534):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0)
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052)

238.721698ms ago: executing program 0 (id=535):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000300000000000004000000080002000300"], 0x24}}, 0x0)

238.52328ms ago: executing program 1 (id=536):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4)

238.301587ms ago: executing program 2 (id=537):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltfilter={0x3c, 0x2d, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0x8, 0xb}, {0x3, 0x10}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040)

188.179564ms ago: executing program 0 (id=538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x1100000000000000}, 0x44844)

185.339414ms ago: executing program 2 (id=539):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

184.169936ms ago: executing program 1 (id=540):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1}]}, 0x108)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000240)}, {&(0x7f0000000780)="752b64e2b164b6a57830f2fda290f754347dbc27ae378276d56399634200401315ba5cb8482f9ced868a4c07763cb560906b5b4f520a5c96f79e49c1fe042280bdaf11021458492951f99e5c50714459bd5332eea7b1ea6ff7f209340cac76f81219254f513152e215c10e000000044e80ba8d5d1bbc2b0a894cc735bb5fbf867ea71e79212f5d3657fd311f04b3e0b629f014a1e762b56494ca99d06821d50be5ebd8ccf56d956950dfee62687f020d84ec33f853fa73a6333fb683c0d797f7fa20a0175fd22b27839a480a9c9f24514535", 0xd2}], 0x2, 0x9001, 0x7f)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x18)

119.971849ms ago: executing program 0 (id=541):
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48)

119.874118ms ago: executing program 0 (id=542):
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180))

48.586261ms ago: executing program 0 (id=543):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0)

48.385622ms ago: executing program 2 (id=544):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0xfc, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0xd}]}, 0x10)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x46, &(0x7f0000002040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "94cbc7", 0x10, 0x21, 0xff, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x4e24, 0x4e22, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, "3badf5", 0x0, "a74ae1"}}}}}}}, 0x0)

48.227995ms ago: executing program 1 (id=545):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

48.032636ms ago: executing program 0 (id=546):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001"], 0xf0}}, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=<r2=>0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)
syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

148.573µs ago: executing program 2 (id=547):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, 0x0, &(0x7f0000000840))

0s ago: executing program 2 (id=548):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:17817' (ED25519) to the list of known hosts.
syzkaller login: [   47.812817][ T5819] cgroup: Unknown subsys name 'net'
[   47.914577][ T5819] cgroup: Unknown subsys name 'cpuset'
[   47.918338][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.559529][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.378248][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.383206][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.385665][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.388299][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.390714][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.405177][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.408137][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.410680][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.431134][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.440413][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.443961][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.447404][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.451917][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.455250][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.458688][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.682197][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   53.719798][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   53.754985][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   53.805780][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.808464][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.810828][ T5834] bridge_slave_0: entered allmulticast mode
[   53.813929][ T5834] bridge_slave_0: entered promiscuous mode
[   53.838705][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.840989][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.843141][ T5834] bridge_slave_1: entered allmulticast mode
[   53.845710][ T5834] bridge_slave_1: entered promiscuous mode
[   53.893224][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.895429][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.897606][ T5829] bridge_slave_0: entered allmulticast mode
[   53.900405][ T5829] bridge_slave_0: entered promiscuous mode
[   53.907230][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.918452][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.920736][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.924402][ T5828] bridge_slave_0: entered allmulticast mode
[   53.927074][ T5828] bridge_slave_0: entered promiscuous mode
[   53.930220][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.932771][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.935017][ T5829] bridge_slave_1: entered allmulticast mode
[   53.937608][ T5829] bridge_slave_1: entered promiscuous mode
[   53.942533][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.953846][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.956058][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.958253][ T5828] bridge_slave_1: entered allmulticast mode
[   53.962217][ T5828] bridge_slave_1: entered promiscuous mode
[   53.991804][ T5834] team0: Port device team_slave_0 added
[   54.004332][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.016991][ T5834] team0: Port device team_slave_1 added
[   54.020213][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.025570][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.056134][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.069631][ T5829] team0: Port device team_slave_0 added
[   54.073314][ T5829] team0: Port device team_slave_1 added
[   54.083977][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.086132][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.094113][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.121465][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.123635][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.131542][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.140534][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.143061][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.150783][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.155620][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.157775][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.165719][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.170999][ T5828] team0: Port device team_slave_0 added
[   54.174556][ T5828] team0: Port device team_slave_1 added
[   54.235518][ T5829] hsr_slave_0: entered promiscuous mode
[   54.237876][ T5829] hsr_slave_1: entered promiscuous mode
[   54.245053][ T5834] hsr_slave_0: entered promiscuous mode
[   54.247220][ T5834] hsr_slave_1: entered promiscuous mode
[   54.249225][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.252140][ T5834] Cannot create hsr debugfs directory
[   54.254226][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.256245][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.264314][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.269828][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.273121][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.280653][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.356916][ T5828] hsr_slave_0: entered promiscuous mode
[   54.359250][ T5828] hsr_slave_1: entered promiscuous mode
[   54.362072][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.364375][ T5828] Cannot create hsr debugfs directory
[   54.548472][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.561842][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.572729][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.587481][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.611546][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.616380][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.629846][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.634420][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.666157][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.668618][ T5829] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.671370][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.673583][ T5829] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.690059][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.693071][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.714896][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.729393][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.734520][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.744716][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.775870][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.802355][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   54.812803][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.814970][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.837640][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.839795][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.852319][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.883616][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   54.905887][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.908061][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.923421][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.926268][ T4567] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.963655][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.995310][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.006104][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   55.027453][ T5023] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.029604][ T5023] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.035603][ T5023] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.037754][ T5023] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.075236][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.106525][ T5829] veth0_vlan: entered promiscuous mode
[   55.133968][ T5829] veth1_vlan: entered promiscuous mode
[   55.182556][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.192272][ T5829] veth0_macvtap: entered promiscuous mode
[   55.199403][ T5829] veth1_macvtap: entered promiscuous mode
[   55.213788][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.226531][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.237428][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.245055][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.248179][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.250758][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.254575][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.277893][ T5834] veth0_vlan: entered promiscuous mode
[   55.279782][ T5828] veth0_vlan: entered promiscuous mode
[   55.303440][ T5834] veth1_vlan: entered promiscuous mode
[   55.308722][ T5828] veth1_vlan: entered promiscuous mode
[   55.356720][ T5834] veth0_macvtap: entered promiscuous mode
[   55.362237][ T5834] veth1_macvtap: entered promiscuous mode
[   55.370196][ T5828] veth0_macvtap: entered promiscuous mode
[   55.377180][ T5828] veth1_macvtap: entered promiscuous mode
[   55.383065][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.385455][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.404076][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.422771][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.428342][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.429042][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.433387][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.437835][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.440555][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.445437][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.448215][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.454707][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.472409][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.475162][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.477829][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.480450][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.484392][ T5838] Bluetooth: hci2: command tx timeout
[   55.493291][ T5838] Bluetooth: hci1: command tx timeout
[   55.495223][ T5838] Bluetooth: hci0: command tx timeout
[   55.528701][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.597893][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.600285][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.619232][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.625231][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.656682][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.662312][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.680308][ T5900] syz_tun: entered allmulticast mode
[   55.683306][ T5023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.685759][ T5023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.703020][ T5899] syz_tun: left allmulticast mode
[   56.005490][ T5911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.429056][ T5930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.564069][ T5938] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20'.
[   56.567486][ T5938] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20'.
[   56.755364][ T5948] netlink: 68 bytes leftover after parsing attributes in process `syz.2.25'.
[   56.787458][ T5911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.229183][ T5969] netlink: 'syz.1.30': attribute type 1 has an invalid length.
[   57.245446][ T5969] netlink: 224 bytes leftover after parsing attributes in process `syz.1.30'.
[   57.555346][ T5979] netlink: 'syz.2.38': attribute type 21 has an invalid length.
[   57.557848][ T5979] netlink: 'syz.2.38': attribute type 6 has an invalid length.
[   57.560155][ T5979] netlink: 64 bytes leftover after parsing attributes in process `syz.2.38'.
[   57.591668][ T5835] Bluetooth: hci0: command tx timeout
[   57.593433][ T5835] Bluetooth: hci1: command tx timeout
[   57.595073][ T5835] Bluetooth: hci2: command tx timeout
[   57.626971][ T5981] netlink: 'syz.2.39': attribute type 29 has an invalid length.
[   57.630035][ T5981] netlink: 'syz.2.39': attribute type 29 has an invalid length.
[   57.635357][ T5981] netlink: 488 bytes leftover after parsing attributes in process `syz.2.39'.
[   58.161428][ T5911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.339769][ T6018] trusted_key: syz.1.57 sent an empty control message without MSG_MORE.
[   58.375219][ T6022] netlink: 'syz.2.59': attribute type 1 has an invalid length.
[   58.647308][ T6044] xt_CT: No such helper "pptp"
[   58.707776][ T6047] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82
[   58.774706][ T5911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.845463][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.885863][ T5911] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.903581][ T5911] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.935949][ T5911] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.948718][ T5911] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.023743][ T6069] syz.2.76 uses obsolete (PF_INET,SOCK_PACKET)
[   59.642048][ T5835] Bluetooth: hci1: command tx timeout
[   59.644182][   T54] Bluetooth: hci0: command tx timeout
[   59.646038][ T5838] Bluetooth: hci2: command tx timeout
[   60.040123][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.85'.
[   60.195477][ T6102] team0: No ports can be present during mode change
[   60.307318][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'.
[   60.315936][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'.
[   60.775662][ T6131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.102'.
[   61.024396][ T6147] lo speed is unknown, defaulting to 1000
[   61.033862][ T6147] lo speed is unknown, defaulting to 1000
[   61.052327][ T6147] lo speed is unknown, defaulting to 1000
[   61.257115][   T10] lo speed is unknown, defaulting to 1000
[   61.268603][ T6147] infiniband syz0: set active
[   61.272563][ T6147] infiniband syz0: added lo
[   61.324505][ T6147] RDS/IB: syz0: added
[   61.326099][ T6147] smc: adding ib device syz0 with port count 1
[   61.333465][ T6147] smc:    ib device syz0 port 1 has pnetid 
[   61.337462][   T24] lo speed is unknown, defaulting to 1000
[   61.340699][ T6147] lo speed is unknown, defaulting to 1000
[   61.646431][ T6147] lo speed is unknown, defaulting to 1000
[   61.701144][ T6195] __nla_validate_parse: 5 callbacks suppressed
[   61.701156][ T6195] netlink: 60 bytes leftover after parsing attributes in process `syz.0.131'.
[   61.722207][ T5838] Bluetooth: hci2: command tx timeout
[   61.723967][ T5838] Bluetooth: hci1: command tx timeout
[   61.725627][ T5838] Bluetooth: hci0: command tx timeout
[   61.846599][ T6147] lo speed is unknown, defaulting to 1000
[   62.045189][ T6215] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.076470][ T6217] Zero length message leads to an empty skb
[   62.147593][ T6219] syzkaller0: entered promiscuous mode
[   62.149823][ T6219] syzkaller0: entered allmulticast mode
[   62.277199][ T6225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.146'.
[   62.283622][ T6225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.146'.
[   62.286441][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.146'.
[   63.235594][ T6263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.165'.
[   63.464568][ T6287] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   63.534963][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'.
[   63.650860][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'.
[   63.695516][ T6306] ieee802154 phy1 wpan1: encryption failed: -22
[   64.206931][ T6345] rdma_rxe: rxe_newlink: failed to add lo
[   64.271736][ T1859] cfg80211: failed to load regulatory.db
[   64.800264][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.227'.
[   64.930398][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'.
[   64.980480][ T6418] netlink: 'syz.1.233': attribute type 1 has an invalid length.
[   65.164694][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'.
[   65.813393][ T6439] netlink: 'syz.1.242': attribute type 7 has an invalid length.
[   65.816181][ T6439] netlink: 'syz.1.242': attribute type 8 has an invalid length.
[   65.819041][ T6439] netlink: 'syz.1.242': attribute type 4 has an invalid length.
[   66.437106][ T6516] siw: device registration error -23
[   66.596895][ T6534] nbd: must specify a size in bytes for the device
[   66.737572][ T6544] netlink: 'syz.1.286': attribute type 21 has an invalid length.
[   66.740094][ T6544] __nla_validate_parse: 1 callbacks suppressed
[   66.740101][ T6544] netlink: 156 bytes leftover after parsing attributes in process `syz.1.286'.
[   67.141111][ T6564] syzkaller0: entered promiscuous mode
[   67.142860][ T6564] syzkaller0: entered allmulticast mode
[   67.165570][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'.
[   67.496371][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.300'.
[   67.556112][ T6576] netlink: 'syz.2.302': attribute type 1 has an invalid length.
[   67.895974][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'.
[   68.565212][ T6591] veth0: entered promiscuous mode
[   68.742108][ T6660] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   69.788876][ T6783] macsec1: entered allmulticast mode
[   70.028183][ T6800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.358'.
[   70.061278][ T6800] netlink: 'syz.1.358': attribute type 1 has an invalid length.
[   70.299383][ T6827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.368'.
[   70.307666][ T6827] netlink: 'syz.1.368': attribute type 7 has an invalid length.
[   70.310046][ T6827] netlink: 'syz.1.368': attribute type 8 has an invalid length.
[   70.319620][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'.
[   70.494734][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'.
[   70.497478][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'.
[   70.548660][ T6843] lo speed is unknown, defaulting to 1000
[   70.732486][ T6858] tipc: Started in network mode
[   70.735082][ T6858] tipc: Node identity ac14140f, cluster identity 4711
[   70.737910][ T6858] tipc: New replicast peer: 255.255.255.255
[   70.753053][ T6858] tipc: Enabled bearer <udp:syz2>, priority 10
[   70.763444][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'.
[   70.967678][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.785469][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'.
[   71.795039][ T6881] netlink: 72 bytes leftover after parsing attributes in process `syz.0.386'.
[   71.813205][ T6874] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   71.816017][ T6874] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   71.873616][ T5875] tipc: Node number set to 2886997007
[   71.909400][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'.
[   71.912203][ T6893] netlink: 'syz.0.393': attribute type 1 has an invalid length.
[   72.004308][ T6903] vxcan1: tx address claim with different name
[   72.040087][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'.
[   72.043487][ T6907] openvswitch: netlink: Missing key (keys=40, expected=100)
[   72.092930][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'.
[   72.256794][ T6925] netlink: 'syz.0.408': attribute type 83 has an invalid length.
[   72.288029][ T6923] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   72.290612][ T5875] IPVS: starting estimator thread 0...
[   72.382223][ T6927] IPVS: using max 62 ests per chain, 148800 per kthread
[   72.391839][ T6934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.571535][ T6942] nbd1: detected capacity change from 0 to 63
[   72.577229][ T6948] block nbd1: NBD_DISCONNECT
[   72.579130][ T6948] block nbd1: Disconnected due to user request.
[   72.584188][ T6948] block nbd1: shutting down sockets
[   72.584735][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.588717][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read
[   72.602678][   T60] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0
[   72.605496][   T60] Buffer I/O error on dev nbd1, logical block 1, async page read
[   72.608011][   T60] Buffer I/O error on dev nbd1, logical block 2, async page read
[   72.610426][   T60] Buffer I/O error on dev nbd1, logical block 3, async page read
[   72.613571][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.619904][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read
[   72.629350][ T5833] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.638095][ T5833] Buffer I/O error on dev nbd1, logical block 1, async page read
[   72.642853][ T5833] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.649022][ T5833] Buffer I/O error on dev nbd1, logical block 2, async page read
[   72.656413][ T5833] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.662695][ T5833] Buffer I/O error on dev nbd1, logical block 3, async page read
[   72.667445][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.673853][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read
[   72.676706][ T5833] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.679436][ T5833] Buffer I/O error on dev nbd1, logical block 1, async page read
[   72.683104][ T5833] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.685927][ T5833] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.690867][ T5833] ldm_validate_partition_table(): Disk read failed.
[   72.715048][ T5833] Dev nbd1: unable to read RDB block 0
[   72.719638][ T5833]  nbd1: unable to read partition table
[   72.727246][ T5833] ldm_validate_partition_table(): Disk read failed.
[   72.730223][ T5833] Dev nbd1: unable to read RDB block 0
[   72.735421][ T5833]  nbd1: unable to read partition table
[   72.819965][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'.
[   73.920029][ T7005] netlink: 'syz.2.441': attribute type 1 has an invalid length.
[   73.958848][ T7009] netlink: 288 bytes leftover after parsing attributes in process `syz.1.443'.
[   74.251854][ T7036] tipc: Failed to remove unknown binding: 66,1,1/0:1089750628/1089750630
[   74.254944][ T7036] tipc: Failed to remove unknown binding: 66,1,1/0:1089750628/1089750630
[   74.619982][ T7068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.470'.
[   75.141468][ T7110] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   75.356854][ T7132] sctp: [Deprecated]: syz.2.499 (pid 7132) Use of int in maxseg socket option.
[   75.356854][ T7132] Use struct sctp_assoc_value instead
[   75.407589][ T7136] netlink: 348 bytes leftover after parsing attributes in process `syz.0.501'.
[   75.432532][ T7140] netlink: 'syz.1.502': attribute type 9 has an invalid length.
[   75.529999][ T7150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.651608][ T7165] Driver unsupported XDP return value 0 on prog  (id 97) dev N/A, expect packet loss!
[   75.885812][ T7187] syzkaller1: tun_chr_ioctl cmd 1074025677
[   75.887824][ T7187] syzkaller1: linktype set to 257
[   75.970345][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'.
[   76.061697][ T7210] netlink: 'syz.2.537': attribute type 5 has an invalid length.
[   76.145487][ T7217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.148014][ T7217] IPv6: NLM_F_CREATE should be set when creating new route
[   76.150214][ T7217] IPv6: NLM_F_CREATE should be set when creating new route
[   76.327731][ T4567] 
[   76.328532][ T4567] ======================================================
[   76.330623][ T4567] WARNING: possible circular locking dependency detected
[   76.332682][ T4567] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   76.335838][ T4567] ------------------------------------------------------
[   76.337975][ T4567] kworker/u9:4/4567 is trying to acquire lock:
[   76.339862][ T4567] ffff88802224a358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[   76.342777][ T4567] 
[   76.342777][ T4567] but task is already holding lock:
[   76.345040][ T4567] ffff888022244188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   76.347783][ T4567] 
[   76.347783][ T4567] which lock already depends on the new lock.
[   76.347783][ T4567] 
[   76.350793][ T4567] 
[   76.350793][ T4567] the existing dependency chain (in reverse order) is:
[   76.353401][ T4567] 
[   76.353401][ T4567] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[   76.355869][ T4567]        lock_acquire+0x120/0x360
[   76.357427][ T4567]        down_write+0x96/0x1f0
[   76.358874][ T4567]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   76.360763][ T4567]        nbd_start_device+0x16c/0xac0
[   76.362487][ T4567]        nbd_genl_connect+0x1250/0x1930
[   76.364220][ T4567]        genl_family_rcv_msg_doit+0x215/0x300
[   76.366070][ T4567]        genl_rcv_msg+0x60e/0x790
[   76.367617][ T4567]        netlink_rcv_skb+0x208/0x470
[   76.369233][ T4567]        genl_rcv+0x28/0x40
[   76.370627][ T4567]        netlink_unicast+0x75b/0x8d0
[   76.372242][ T4567]        netlink_sendmsg+0x805/0xb30
[   76.373787][ T4567]        __sock_sendmsg+0x21c/0x270
[   76.375327][ T4567]        ____sys_sendmsg+0x505/0x830
[   76.376867][ T4567]        ___sys_sendmsg+0x21f/0x2a0
[   76.378364][ T4567]        __x64_sys_sendmsg+0x19b/0x260
[   76.379944][ T4567]        do_syscall_64+0xfa/0x3b0
[   76.381457][ T4567]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.383373][ T4567] 
[   76.383373][ T4567] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[   76.385696][ T4567]        lock_acquire+0x120/0x360
[   76.387330][ T4567]        __mutex_lock+0x182/0xe80
[   76.388846][ T4567]        refcount_dec_and_mutex_lock+0x30/0xa0
[   76.390674][ T4567]        nbd_config_put+0x2c/0x790
[   76.392193][ T4567]        nbd_release+0xfe/0x140
[   76.393630][ T4567]        bdev_release+0x536/0x650
[   76.395139][ T4567]        blkdev_release+0x15/0x20
[   76.396611][ T4567]        __fput+0x44c/0xa70
[   76.397945][ T4567]        fput_close_sync+0x119/0x200
[   76.399509][ T4567]        __x64_sys_close+0x7f/0x110
[   76.401098][ T4567]        do_syscall_64+0xfa/0x3b0
[   76.402604][ T4567]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.404539][ T4567] 
[   76.404539][ T4567] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[   76.406816][ T4567]        validate_chain+0xb9b/0x2140
[   76.408382][ T4567]        __lock_acquire+0xab9/0xd20
[   76.409908][ T4567]        lock_acquire+0x120/0x360
[   76.411488][ T4567]        __mutex_lock+0x182/0xe80
[   76.412995][ T4567]        __del_gendisk+0x129/0x9e0
[   76.414511][ T4567]        del_gendisk+0xe8/0x160
[   76.415984][ T4567]        nbd_dev_remove_work+0x47/0xe0
[   76.417602][ T4567]        process_scheduled_works+0xae1/0x17b0
[   76.419421][ T4567]        worker_thread+0x8a0/0xda0
[   76.420969][ T4567]        kthread+0x711/0x8a0
[   76.422425][ T4567]        ret_from_fork+0x3fc/0x770
[   76.423937][ T4567]        ret_from_fork_asm+0x1a/0x30
[   76.425505][ T4567] 
[   76.425505][ T4567] other info that might help us debug this:
[   76.425505][ T4567] 
[   76.428442][ T4567] Chain exists of:
[   76.428442][ T4567]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[   76.428442][ T4567] 
[   76.432600][ T4567]  Possible unsafe locking scenario:
[   76.432600][ T4567] 
[   76.434746][ T4567]        CPU0                    CPU1
[   76.436322][ T4567]        ----                    ----
[   76.437859][ T4567]   rlock(&set->update_nr_hwq_lock);
[   76.439376][ T4567]                                lock(&nbd->config_lock);
[   76.441423][ T4567]                                lock(&set->update_nr_hwq_lock);
[   76.443663][ T4567]   lock(&disk->open_mutex);
[   76.445010][ T4567] 
[   76.445010][ T4567]  *** DEADLOCK ***
[   76.445010][ T4567] 
[   76.447343][ T4567] 3 locks held by kworker/u9:4/4567:
[   76.448926][ T4567]  #0: ffff888022243948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   76.452173][ T4567]  #1: ffffc90007c97bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   76.455688][ T4567]  #2: ffff888022244188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   76.458632][ T4567] 
[   76.458632][ T4567] stack backtrace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   76.460387][ T4567] CPU: 0 UID: 0 PID: 4567 Comm: kworker/u9:4 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   76.460398][ T4567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.460406][ T4567] Workqueue: nbd-del nbd_dev_remove_work
[   76.460418][ T4567] Call Trace:
[   76.460425][ T4567]  <TASK>
[   76.460451][ T4567]  dump_stack_lvl+0x189/0x250
[   76.460462][ T4567]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.460471][ T4567]  ? __pfx__printk+0x10/0x10
[   76.460482][ T4567]  ? print_lock_name+0xde/0x100
[   76.460492][ T4567]  print_circular_bug+0x2ee/0x310
[   76.460504][ T4567]  check_noncircular+0x134/0x160
[   76.460515][ T4567]  validate_chain+0xb9b/0x2140
[   76.460525][ T4567]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   76.460537][ T4567]  ? arch_stack_walk+0x11c/0x150
[   76.460549][ T4567]  __lock_acquire+0xab9/0xd20
[   76.460558][ T4567]  ? __del_gendisk+0x129/0x9e0
[   76.460567][ T4567]  lock_acquire+0x120/0x360
[   76.460574][ T4567]  ? __del_gendisk+0x129/0x9e0
[   76.460584][ T4567]  ? check_path+0x21/0x40
[   76.460593][ T4567]  __mutex_lock+0x182/0xe80
[   76.460603][ T4567]  ? __del_gendisk+0x129/0x9e0
[   76.460612][ T4567]  ? __del_gendisk+0x129/0x9e0
[   76.460620][ T4567]  ? __pfx___mutex_lock+0x10/0x10
[   76.460627][ T4567]  ? __pfx___might_resched+0x10/0x10
[   76.460638][ T4567]  ? __lock_acquire+0xab9/0xd20
[   76.460645][ T4567]  ? disk_del_events+0xb5/0x210
[   76.460654][ T4567]  ? __del_gendisk+0xc1/0x9e0
[   76.460663][ T4567]  __del_gendisk+0x129/0x9e0
[   76.460671][ T4567]  ? del_gendisk+0xe0/0x160
[   76.460679][ T4567]  ? __pfx___del_gendisk+0x10/0x10
[   76.460688][ T4567]  ? down_read+0x1ad/0x2e0
[   76.460696][ T4567]  del_gendisk+0xe8/0x160
[   76.460704][ T4567]  nbd_dev_remove_work+0x47/0xe0
[   76.460712][ T4567]  ? process_scheduled_works+0x9ef/0x17b0
[   76.460720][ T4567]  process_scheduled_works+0xae1/0x17b0
[   76.460733][ T4567]  ? __pfx_process_scheduled_works+0x10/0x10
[   76.460744][ T4567]  worker_thread+0x8a0/0xda0
[   76.460753][ T4567]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   76.460766][ T4567]  ? __kthread_parkme+0x7b/0x200
[   76.460777][ T4567]  kthread+0x711/0x8a0
[   76.460787][ T4567]  ? __pfx_worker_thread+0x10/0x10
[   76.460795][ T4567]  ? __pfx_kthread+0x10/0x10
[   76.460805][ T4567]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.460815][ T4567]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.460821][ T4567]  ? __pfx_kthread+0x10/0x10
[   76.460831][ T4567]  ret_from_fork+0x3fc/0x770
[   76.460841][ T4567]  ? __pfx_ret_from_fork+0x10/0x10
[   76.460853][ T4567]  ? __switch_to_asm+0x39/0x70
[   76.460863][ T4567]  ? __switch_to_asm+0x33/0x70
[   76.460871][ T4567]  ? __pfx_kthread+0x10/0x10
[   76.460881][ T4567]  ret_from_fork_asm+0x1a/0x30
[   76.460893][ T4567]  </TASK>
[   76.916460][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.963806][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.015885][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.074688][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.166210][   T13] bridge_slave_1: left allmulticast mode
[   77.167992][   T13] bridge_slave_1: left promiscuous mode
[   77.169855][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.173292][   T13] bridge_slave_0: left allmulticast mode
[   77.175078][   T13] bridge_slave_0: left promiscuous mode
[   77.176877][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.281894][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.285595][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.288861][   T13] bond0 (unregistering): Released all slaves
[   77.333621][   T13] tipc: Disabling bearer <udp:syz2>
[   77.335368][   T13] tipc: Left network mode
[   77.599463][   T13] hsr_slave_0: left promiscuous mode
[   77.602238][   T13] hsr_slave_1: left promiscuous mode
[   77.604117][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.606314][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.608766][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.611677][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.615614][   T13] veth1_macvtap: left promiscuous mode
[   77.617285][   T13] veth0_macvtap: left promiscuous mode
[   77.618968][   T13] veth1_vlan: left promiscuous mode
[   77.620520][   T13] veth0_vlan: left promiscuous mode
[   77.718224][   T13] team0 (unregistering): Port device team_slave_1 removed
[   77.729634][   T13] team0 (unregistering): Port device team_slave_0 removed
[   78.012957][   T13] IPVS: stop unused estimator thread 0...
[   78.054542][   T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.084141][   T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.125428][   T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.164433][   T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.231071][   T13] bridge_slave_1: left allmulticast mode
[   78.232825][   T13] bridge_slave_1: left promiscuous mode
[   78.235071][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.238133][   T13] bridge_slave_0: left allmulticast mode
[   78.239819][   T13] bridge_slave_0: left promiscuous mode
[   78.242116][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.325273][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.328811][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.332268][   T13] bond0 (unregistering): Released all slaves
[   78.336327][   T13] bond1 (unregistering): Released all slaves
[   78.590717][   T13] hsr_slave_0: left promiscuous mode
[   78.607876][   T13] hsr_slave_1: left promiscuous mode
[   78.609801][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.612327][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.614798][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.617088][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.625820][   T13] veth1_macvtap: left promiscuous mode
[   78.627536][   T13] veth0_macvtap: left promiscuous mode
[   78.629246][   T13] veth1_vlan: left promiscuous mode
[   78.630851][   T13] veth0_vlan: left promiscuous mode
[   78.729805][   T13] team0 (unregistering): Port device team_slave_1 removed
[   78.742482][   T13] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
23:23:37  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007c96e10
R8 =ffff888021178237 R9 =1ffff1100422f046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78ec R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3041dff8 CR3=000000002796c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ff00 XMM01=2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
XMM02=0000000000000000 00ff00000000ff00 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=0000000000000219 0000000000003431
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=0000000000000251 0000000000003431
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4e920 RBX=ffff88813663b1c0 RCX=ffff88801edf5640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000310f700 RSP=ffffc9000310f5a0
R8 =ffffffff8fa1def7 R9 =1ffffffff1f43bde R10=dffffc0000000000 R11=fffffbfff1f43bdf
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4e909 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9f9bae7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f9f9af856a3 00007f9f9af856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=030008000a90030f ffffffffffff040a
XMM06=0800048003048004 0180030180040aa0 XMM07=90d4f60400048c03 2004000488030188
XMM08=0104808010000a80 0401000000080606 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
