last executing test programs:

39.322071883s ago: executing program 2 (id=199):
unshare(0x20000400)
socket$inet6(0xa, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

30.422700705s ago: executing program 2 (id=199):
unshare(0x20000400)
socket$inet6(0xa, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

22.228228211s ago: executing program 2 (id=199):
unshare(0x20000400)
socket$inet6(0xa, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

16.559801978s ago: executing program 2 (id=199):
unshare(0x20000400)
socket$inet6(0xa, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

10.790788191s ago: executing program 2 (id=199):
unshare(0x20000400)
socket$inet6(0xa, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

5.145756373s ago: executing program 0 (id=685):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x40}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)

5.086831794s ago: executing program 2 (id=199):
unshare(0x20000400)
socket$inet6(0xa, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

4.163845049s ago: executing program 0 (id=686):
r0 = socket(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40020)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0)

3.870003508s ago: executing program 0 (id=689):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
getgid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
shutdown(r3, 0x0)
recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x2c, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}], 0x20}, 0x1)
syz_open_procfs$namespace(r4, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
r6 = getuid()
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x36}, @in=@private=0xa010101, 0x4e20, 0x7e, 0x4e23, 0x9, 0x2, 0x0, 0x20, 0x2c, 0x0, r6}, {0x400, 0x7fff, 0x5, 0xfffffffffffffff8, 0x5ed, 0xb0a8, 0x4a, 0x8000}, {0x0, 0x7fffffff, 0xfffffffffffffffb, 0x81}, 0x10, 0x6e6bb7, 0x2, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x4d6, 0x33}, 0x2, @in6=@mcast2, 0x3501, 0x1, 0x1, 0xb, 0x8, 0x0, 0x3}}, 0xe8)
sendmmsg$unix(r2, &(0x7f0000003740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x8054}}, {{&(0x7f0000002e00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002e80)="4a1bd07399b7f1915d41519f882d3de4f3ea34aadd9c05a617f1cf", 0x1b}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00', @ANYRES32=r1, @ANYRES32=r5, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x004\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00'], 0xa0}}, {{&(0x7f0000003180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003380)=[{&(0x7f0000003200)="c8d9953486d08ad17e85a85cd58a90c7daa20fbf45d403010cbbc7bf8c586552a27164737b2648f909a10929c742c9a30fe9a8963ed9a11f5ce60a07faee0f3aa042bdb42550bcc10fb4aeb1589d3eb36c0b8954d8b260834c5aafeec376df29a8f1bef34320451fc7fa7608a09417c3593abdfe4ffb87c73a31c711944578d3262903c55399", 0x86}, {0x0}, {&(0x7f0000003300)="f6c5e86bda0e3e2c77d3d9b449efa7b762c6f1a50e0789a2dc0a8f85e93ed05d3ad6fa1c2034db7b28f1bb14cb539ac77a722912f197b90cac0d284dab7d5b2e", 0x40}, {&(0x7f0000005500)="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", 0xffe}], 0x4, &(0x7f0000003640), 0x0, 0x20000000}}], 0x3, 0x0)
r7 = epoll_create1(0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
socket$nl_xfrm(0x10, 0x3, 0x6)
ppoll(&(0x7f0000000140)=[{r0, 0x221}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000040)={0xa0002000})
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000340)="43f0e16aa1a345e96062664699c341e924de9143ac96524c99beb26b1239113d1748cf4773e40722e25346d35b68478511ad277c871f6f8440408a279170a473c179227c002ffd8df50dd91d875d570f4f51c664c92c12", 0x57, 0x80, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2.900120571s ago: executing program 0 (id=699):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x0)
pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x100000000)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x8, &(0x7f00000015c0)=@raw=[@ldst={0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @tail_call], 0x0, 0x7fffffff}, 0x94)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
close(r3)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0)

886.988902ms ago: executing program 0 (id=710):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1})

468.719085ms ago: executing program 1 (id=714):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x40050)

468.48057ms ago: executing program 1 (id=715):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x3, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

369.815483ms ago: executing program 1 (id=716):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4)
bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a)

287.979684ms ago: executing program 1 (id=717):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="b80000001900674c00000000fbdbdf25ac1414bb000000000000000000000000fc010000000000000000000000000001000000044e2300060a00200000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000000000000000000000000000000000000000000feffffffffffffffff00"], 0xb8}}, 0x4000000)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

150.566119ms ago: executing program 1 (id=718):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0)

90.051145ms ago: executing program 1 (id=719):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 0 (id=720):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_POLICE={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x8c4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31856' (ED25519) to the list of known hosts.
syzkaller login: [   56.416670][ T5815] cgroup: Unknown subsys name 'net'
[   56.567349][ T5815] cgroup: Unknown subsys name 'cpuset'
[   56.572718][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.323748][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.718833][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.722066][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.725805][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.731798][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.734643][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.743814][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.763822][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.767663][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.773200][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.777465][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.782126][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.784865][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.793982][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.799681][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.803222][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.050956][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   63.140455][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   63.197877][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.200218][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.202733][ T5832] bridge_slave_0: entered allmulticast mode
[   63.207262][ T5832] bridge_slave_0: entered promiscuous mode
[   63.221605][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.224992][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.227317][ T5832] bridge_slave_1: entered allmulticast mode
[   63.230090][ T5832] bridge_slave_1: entered promiscuous mode
[   63.242497][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   63.305089][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.322450][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.326134][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.328880][ T5828] bridge_slave_0: entered allmulticast mode
[   63.331598][ T5828] bridge_slave_0: entered promiscuous mode
[   63.337044][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.358242][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.360499][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.362787][ T5828] bridge_slave_1: entered allmulticast mode
[   63.365862][ T5828] bridge_slave_1: entered promiscuous mode
[   63.380751][ T5832] team0: Port device team_slave_0 added
[   63.401281][ T5832] team0: Port device team_slave_1 added
[   63.443704][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.445894][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.454247][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.459034][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.461850][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.466370][ T5837] bridge_slave_0: entered allmulticast mode
[   63.470212][ T5837] bridge_slave_0: entered promiscuous mode
[   63.476014][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.479664][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.481984][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.492604][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.497870][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.500167][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.502471][ T5837] bridge_slave_1: entered allmulticast mode
[   63.505709][ T5837] bridge_slave_1: entered promiscuous mode
[   63.524610][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.559290][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.583387][ T5828] team0: Port device team_slave_0 added
[   63.588229][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.609582][ T5828] team0: Port device team_slave_1 added
[   63.655059][ T5832] hsr_slave_0: entered promiscuous mode
[   63.658491][ T5832] hsr_slave_1: entered promiscuous mode
[   63.679712][ T5837] team0: Port device team_slave_0 added
[   63.698372][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.701095][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.709712][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.716272][ T5837] team0: Port device team_slave_1 added
[   63.719746][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.721805][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.729698][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.791396][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.794729][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.805181][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.816730][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.819476][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.829575][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.918847][ T5828] hsr_slave_0: entered promiscuous mode
[   63.921945][ T5828] hsr_slave_1: entered promiscuous mode
[   63.925239][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.928472][ T5828] Cannot create hsr debugfs directory
[   63.988927][ T5837] hsr_slave_0: entered promiscuous mode
[   63.992053][ T5837] hsr_slave_1: entered promiscuous mode
[   63.995376][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.998295][ T5837] Cannot create hsr debugfs directory
[   64.216879][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.259394][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.284120][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.292779][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.363311][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.378345][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.398304][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.405335][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.467350][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.476608][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.496079][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.502473][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.612022][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.651453][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.668838][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   64.692413][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   64.699742][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.702751][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.718615][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.721057][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.734882][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.737218][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.747635][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.757184][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.759780][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.786293][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   64.808658][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.811550][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.813433][ T5834] Bluetooth: hci0: command tx timeout
[   64.829656][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.858406][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.861361][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.873334][ T5834] Bluetooth: hci2: command tx timeout
[   64.875566][   T54] Bluetooth: hci1: command tx timeout
[   65.080166][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.098268][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.132262][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.171715][ T5832] veth0_vlan: entered promiscuous mode
[   65.187285][ T5837] veth0_vlan: entered promiscuous mode
[   65.190104][ T5832] veth1_vlan: entered promiscuous mode
[   65.211757][ T5837] veth1_vlan: entered promiscuous mode
[   65.251956][ T5832] veth0_macvtap: entered promiscuous mode
[   65.277133][ T5832] veth1_macvtap: entered promiscuous mode
[   65.289164][ T5837] veth0_macvtap: entered promiscuous mode
[   65.291909][ T5828] veth0_vlan: entered promiscuous mode
[   65.308788][ T5837] veth1_macvtap: entered promiscuous mode
[   65.318295][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.328600][ T5828] veth1_vlan: entered promiscuous mode
[   65.337096][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.341139][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.357294][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.360929][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.365331][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.368836][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.381599][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.390588][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.397008][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.400479][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.403973][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.474511][ T5828] veth0_macvtap: entered promiscuous mode
[   65.498514][ T5828] veth1_macvtap: entered promiscuous mode
[   65.540830][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.546242][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.560412][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.590088][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.590610][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.604491][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.609548][  T547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.611966][  T547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.618443][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.621862][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.625486][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.628104][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.650910][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.656340][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.701328][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.717083][  T547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.719614][  T547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.768191][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.770673][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.447423][ T5942] Bluetooth: MGMT ver 1.23
[   66.520370][ T5946] netlink: 'syz.0.23': attribute type 14 has an invalid length.
[   66.624785][ T5952] netlink: 248 bytes leftover after parsing attributes in process `syz.0.26'.
[   66.651719][ T5954] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET)
[   66.658711][ T5954] syzkaller1: entered promiscuous mode
[   66.660456][ T5954] syzkaller1: entered allmulticast mode
[   66.873194][ T5834] Bluetooth: hci0: command tx timeout
[   66.963219][ T5834] Bluetooth: hci2: command tx timeout
[   66.965444][ T5834] Bluetooth: hci1: command tx timeout
[   67.212080][ T5979] IPVS: Scheduler module ip_vs_sip not found
[   67.223445][ T5983] IPVS: length: 8 != 446622349272
[   67.317411][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'.
[   67.324186][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'.
[   67.374511][ T5988] Illegal XDP return value 400519201 on prog  (id 6) dev N/A, expect packet loss!
[   67.838422][ T6018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.106927][ T6037] Zero length message leads to an empty skb
[   68.155763][ T6039] netlink: 'syz.1.52': attribute type 9 has an invalid length.
[   68.158712][ T6039] netlink: 'syz.1.52': attribute type 6 has an invalid length.
[   68.161270][ T6039] netlink: 'syz.1.52': attribute type 7 has an invalid length.
[   68.165286][ T6039] netlink: 'syz.1.52': attribute type 8 has an invalid length.
[   68.210674][ T6041] syzkaller1: entered promiscuous mode
[   68.212934][ T6041] syzkaller1: entered allmulticast mode
[   68.408530][ T6043] netlink: 'syz.0.54': attribute type 1 has an invalid length.
[   68.467661][ T6044] gretap1: entered promiscuous mode
[   68.909051][ T6053] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   68.953583][   T54] Bluetooth: hci0: command tx timeout
[   68.967687][ T6056] netlink: 248 bytes leftover after parsing attributes in process `syz.2.59'.
[   69.035031][   T54] Bluetooth: hci1: command tx timeout
[   69.037211][   T54] Bluetooth: hci2: command tx timeout
[   70.159260][ T6117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.76'.
[   70.175375][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.76'.
[   70.184534][ T6117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.76'.
[   70.188680][ T6117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.76'.
[   70.359085][ T6132] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.362416][ T6132] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.365590][ T6132] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.368763][ T6132] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.727512][ T6153] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.91'.
[   70.731654][ T6153] netlink: zone id is out of range
[   70.735183][ T6153] netlink: get zone limit has 8 unknown bytes
[   70.777552][ T6157] netlink: 27 bytes leftover after parsing attributes in process `syz.1.93'.
[   70.958227][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   70.960266][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.034479][ T5834] Bluetooth: hci0: command tx timeout
[   71.116065][ T5834] Bluetooth: hci2: command tx timeout
[   71.116147][   T54] Bluetooth: hci1: command tx timeout
[   71.811330][ T6198] netlink: 'syz.0.111': attribute type 39 has an invalid length.
[   71.828483][ T6198] veth0_macvtap: left promiscuous mode
[   72.505593][ T6227] netlink: 92 bytes leftover after parsing attributes in process `syz.2.126'.
[   72.509092][ T6227] netlink: 32 bytes leftover after parsing attributes in process `syz.2.126'.
[   72.732712][ T6240] netlink: 'syz.1.131': attribute type 1 has an invalid length.
[   72.753388][ T6240] netlink: 784 bytes leftover after parsing attributes in process `syz.1.131'.
[   72.796414][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'.
[   72.873753][ T6252] netlink: 204 bytes leftover after parsing attributes in process `syz.0.136'.
[   72.876704][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'.
[   73.054376][ T6265] netlink: 'syz.2.140': attribute type 1 has an invalid length.
[   73.350995][ T6287] syzkaller0: entered allmulticast mode
[   73.368044][ T6287] syz.2.149 uses old SIOCAX25GETINFO
[   74.126846][ T6296] netlink: 48 bytes leftover after parsing attributes in process `syz.0.152'.
[   74.314118][ T6293] netlink: 'syz.1.151': attribute type 29 has an invalid length.
[   74.547680][ T6313] netlink: 'syz.0.159': attribute type 1 has an invalid length.
[   74.748715][ T6321] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.891709][ T6366] netlink: 'syz.0.178': attribute type 2 has an invalid length.
[   75.967461][ T6370] tipc: Started in network mode
[   75.970342][ T6370] tipc: Node identity 76906b731b19, cluster identity 4711
[   75.976405][ T6370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.979604][ T6370] syzkaller0: entered promiscuous mode
[   75.981400][ T6370] syzkaller0: entered allmulticast mode
[   76.011654][ T6370] tipc: Resetting bearer <eth:syzkaller0>
[   76.026000][ T6369] tipc: Resetting bearer <eth:syzkaller0>
[   76.046581][ T6369] tipc: Disabling bearer <eth:syzkaller0>
[   76.744927][ T5884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.762649][ T5884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.836513][ T5884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.843527][ T5884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.919986][ T5884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.926282][ T5884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.970391][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'.
[   76.987677][ T5884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.991530][ T5884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.028245][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.031997][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.037805][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.041467][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.044369][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.166088][ T2287] IPVS: starting estimator thread 0...
[   77.228406][ T5884] bridge_slave_1: left allmulticast mode
[   77.230485][ T5884] bridge_slave_1: left promiscuous mode
[   77.232587][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.249336][ T5884] bridge_slave_0: left allmulticast mode
[   77.251350][ T5884] bridge_slave_0: left promiscuous mode
[   77.257223][ T6423] IPVS: using max 62 ests per chain, 148800 per kthread
[   77.261522][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.789546][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.797430][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.802706][ T5884] bond0 (unregistering): Released all slaves
[   77.858753][ T6447] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component
[   78.445724][ T5884] hsr_slave_0: left promiscuous mode
[   78.448780][ T5884] hsr_slave_1: left promiscuous mode
[   78.451577][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.456841][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.460815][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.464592][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.500727][ T5884] veth1_macvtap: left promiscuous mode
[   78.503575][ T5884] veth0_macvtap: left promiscuous mode
[   78.506237][ T5884] veth1_vlan: left promiscuous mode
[   78.508523][ T5884] veth0_vlan: left promiscuous mode
[   78.917165][ T5884] team0 (unregistering): Port device team_slave_1 removed
[   78.948342][ T5884] team0 (unregistering): Port device team_slave_0 removed
[   79.113236][ T5834] Bluetooth: hci2: command tx timeout
[   79.310580][ T6480] netlink: 32 bytes leftover after parsing attributes in process `syz.0.221'.
[   79.400552][ T6417] chnl_net:caif_netlink_parms(): no params data found
[   79.657277][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.660198][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.662979][ T6417] bridge_slave_0: entered allmulticast mode
[   79.684668][ T6417] bridge_slave_0: entered promiscuous mode
[   79.696486][ T6497] ip6gre1: entered allmulticast mode
[   79.700520][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.710406][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.714126][ T6417] bridge_slave_1: entered allmulticast mode
[   79.717365][ T6417] bridge_slave_1: entered promiscuous mode
[   79.783477][ T6508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.229'.
[   79.788993][ T6508] netlink: 216 bytes leftover after parsing attributes in process `syz.1.229'.
[   79.798290][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.812227][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.949841][ T6417] team0: Port device team_slave_0 added
[   79.964284][ T6417] team0: Port device team_slave_1 added
[   79.998312][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.001007][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.043163][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.049375][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.056716][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.067553][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.157747][ T6417] hsr_slave_0: entered promiscuous mode
[   80.162639][ T6417] hsr_slave_1: entered promiscuous mode
[   80.173645][ T6417] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.177895][ T6417] Cannot create hsr debugfs directory
[   80.757792][ T6554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.808384][ T6554] syzkaller0: entered promiscuous mode
[   80.810531][ T6554] syzkaller0: entered allmulticast mode
[   80.814457][ T6554] tipc: Resetting bearer <eth:syzkaller0>
[   80.899072][ T6553] tipc: Resetting bearer <eth:syzkaller0>
[   81.193209][ T5834] Bluetooth: hci2: command tx timeout
[   81.208437][   T47] cfg80211: failed to load regulatory.db
[   81.874154][    T9] tipc: Node number set to 1837722483
[   82.063204][ T6553] tipc: Disabling bearer <eth:syzkaller0>
[   82.216178][ T6417] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.231793][ T6417] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.275027][ T6417] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.288308][ T6417] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.371506][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.390976][ T6417] 8021q: adding VLAN 0 to HW filter on device team0
[   82.399615][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.402600][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.439690][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.442012][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.860177][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.927709][ T6417] veth0_vlan: entered promiscuous mode
[   82.959887][ T6417] veth1_vlan: entered promiscuous mode
[   83.012680][ T6417] veth0_macvtap: entered promiscuous mode
[   83.027469][ T6417] veth1_macvtap: entered promiscuous mode
[   83.044202][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.053551][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.063947][ T6417] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.066769][ T6417] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.069770][ T6417] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.072607][ T6417] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.150833][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.153941][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.181732][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.194007][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.494137][ T6625] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   83.960507][ T6648] bridge0: port 3(syz_tun) entered blocking state
[   83.983755][ T6648] bridge0: port 3(syz_tun) entered disabled state
[   83.986608][ T6648] syz_tun: entered allmulticast mode
[   83.990257][ T6648] syz_tun: entered promiscuous mode
[   83.992560][ T6648] bridge0: port 3(syz_tun) entered blocking state
[   83.995106][ T6648] bridge0: port 3(syz_tun) entered forwarding state
[   84.259355][ T6663] netlink: 'syz.0.269': attribute type 8 has an invalid length.
[   84.498578][ T6676] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   84.573671][ T6680] IPv6: NLM_F_REPLACE set, but no existing node found!
[   85.462078][ T6723] netlink: 'syz.1.295': attribute type 49 has an invalid length.
[   85.522045][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'.
[   85.600001][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.638414][ T6729] netlink: 'syz.0.299': attribute type 1 has an invalid length.
[   85.644284][ T6729] netlink: 'syz.0.299': attribute type 2 has an invalid length.
[   85.959991][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.962912][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.968498][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.971897][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.976478][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.127102][ T5279] udevd[5279]: worker [5841] terminated by signal 33 (Unknown signal 33)
[   86.130064][ T5279] udevd[5279]: worker [5841] failed while handling '/devices/virtual/block/loop1'
[   86.200222][ T6748] chnl_net:caif_netlink_parms(): no params data found
[   86.327740][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.330736][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.336387][ T6748] bridge_slave_0: entered allmulticast mode
[   86.340344][ T6748] bridge_slave_0: entered promiscuous mode
[   86.345663][ T6748] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.358931][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.361907][ T6748] bridge_slave_1: entered allmulticast mode
[   86.371506][ T6748] bridge_slave_1: entered promiscuous mode
[   86.375643][ T6778] Cannot find add_set index 2 as target
[   86.466139][ T6748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.471019][ T6748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.537507][ T6748] team0: Port device team_slave_0 added
[   86.542730][ T6748] team0: Port device team_slave_1 added
[   86.617294][ T6748] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.620496][ T6748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.645650][ T6748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.654695][ T6748] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.656782][ T6748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.672826][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'.
[   86.676925][ T6748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.820954][ T6748] hsr_slave_0: entered promiscuous mode
[   86.827247][ T6748] hsr_slave_1: entered promiscuous mode
[   86.829600][ T6748] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.838983][ T6748] Cannot create hsr debugfs directory
[   87.384780][ T6830] netlink: 'syz.1.340': attribute type 5 has an invalid length.
[   87.457444][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.547704][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.610424][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.660041][ T6840] xt_CT: No such helper "syz0"
[   87.815722][   T12] bridge_slave_1: left allmulticast mode
[   87.817519][   T12] bridge_slave_1: left promiscuous mode
[   87.819925][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.849048][   T12] bridge_slave_0: left allmulticast mode
[   87.853135][   T12] bridge_slave_0: left promiscuous mode
[   87.861052][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.993993][ T5834] Bluetooth: hci2: command tx timeout
[   88.400191][ T6883] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   88.413908][ T6883] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   88.422601][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.431679][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.446157][   T12] bond0 (unregistering): Released all slaves
[   88.590487][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   88.615080][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   88.618664][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   88.632570][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   88.638159][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   88.641723][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   88.648461][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   88.651988][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   88.943352][   T12] hsr_slave_0: left promiscuous mode
[   88.958050][   T12] hsr_slave_1: left promiscuous mode
[   88.967950][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.973640][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.982134][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.993184][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.008140][   T12] veth1_macvtap: left promiscuous mode
[   89.010473][   T12] veth0_macvtap: left promiscuous mode
[   89.014017][   T12] veth1_vlan: left promiscuous mode
[   89.016334][   T12] veth0_vlan: left promiscuous mode
[   89.416826][   T12] team0 (unregistering): Port device team_slave_1 removed
[   89.441193][   T12] team0 (unregistering): Port device team_slave_0 removed
[   89.741066][ T6918] bridge1: entered promiscuous mode
[   89.830741][ T6748] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.878052][ T6748] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.939045][ T6748] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.943680][ T6748] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.073443][   T54] Bluetooth: hci2: command tx timeout
[   90.103543][ T6748] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.155528][ T6748] 8021q: adding VLAN 0 to HW filter on device team0
[   90.172436][  T547] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.174749][  T547] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.184795][  T547] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.187112][  T547] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.205559][ T6748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   90.209637][ T6748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.351321][ T6967] netlink: 'syz.0.382': attribute type 1 has an invalid length.
[   90.496440][ T6748] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.577408][ T6748] veth0_vlan: entered promiscuous mode
[   90.599025][ T6748] veth1_vlan: entered promiscuous mode
[   90.650611][ T6748] veth0_macvtap: entered promiscuous mode
[   90.656426][ T6748] veth1_macvtap: entered promiscuous mode
[   90.667933][ T6748] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.681703][ T6748] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.687679][ T6748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.690579][ T6748] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.695297][ T6748] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.702947][ T6748] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.767731][ T4603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.780560][ T4603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.800657][ T4603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.803476][ T4603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.202796][ T7003] __nla_validate_parse: 46 callbacks suppressed
[   91.202811][ T7003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.396'.
[   91.214172][ T7003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.396'.
[   91.380618][ T7012] netlink: 'syz.0.400': attribute type 6 has an invalid length.
[   92.153314][   T54] Bluetooth: hci2: command 0x040f tx timeout
[   92.729339][ T7043] netlink: 'syz.1.413': attribute type 1 has an invalid length.
[   92.764577][ T7043] bond1: (slave gretap1): making interface the new active one
[   92.768435][ T7043] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   93.171592][ T7061] netlink: 10 bytes leftover after parsing attributes in process `syz.1.420'.
[   93.430889][ T7077] trusted_key: syz.0.428 sent an empty control message without MSG_MORE.
[   93.497914][ T7081] netlink: 'syz.0.430': attribute type 1 has an invalid length.
[   93.527938][ T7083] ipt_ECN: cannot use operation on non-tcp rule
[   93.740257][ T7093] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   93.821240][ T5677] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.012751][ T5677] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.054808][ T5677] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.087107][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.090066][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.092729][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.096180][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.098748][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.134244][ T5677] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.385250][ T5677] bridge_slave_1: left allmulticast mode
[   94.387202][ T5677] bridge_slave_1: left promiscuous mode
[   94.389572][ T5677] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.394406][ T5677] bridge_slave_0: left allmulticast mode
[   94.396356][ T5677] bridge_slave_0: left promiscuous mode
[   94.398467][ T5677] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.648622][ T5677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.656224][ T5677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.660932][ T5677] bond0 (unregistering): Released all slaves
[   94.674316][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.751677][ T7101] chnl_net:caif_netlink_parms(): no params data found
[   94.883640][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'.
[   95.038167][ T7130] macsec1: entered allmulticast mode
[   95.039842][ T7130] macvlan0: entered allmulticast mode
[   95.055951][ T7130] macvlan0: left allmulticast mode
[   95.060308][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'.
[   95.065030][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'.
[   95.162509][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.165285][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.167521][ T7101] bridge_slave_0: entered allmulticast mode
[   95.170245][ T7101] bridge_slave_0: entered promiscuous mode
[   95.199743][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.202088][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.207679][ T7101] bridge_slave_1: entered allmulticast mode
[   95.217731][ T7101] bridge_slave_1: entered promiscuous mode
[   95.241097][ T5677] hsr_slave_0: left promiscuous mode
[   95.247828][ T5677] hsr_slave_1: left promiscuous mode
[   95.249981][ T5677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.252359][ T5677] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.262327][ T5677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.266024][ T5677] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.291365][ T5677] veth1_macvtap: left promiscuous mode
[   95.296213][ T5677] veth0_macvtap: left promiscuous mode
[   95.299337][ T5677] veth1_vlan: left promiscuous mode
[   95.301744][ T5677] veth0_vlan: left promiscuous mode
[   95.637130][ T5677] team0 (unregistering): Port device team_slave_1 removed
[   95.662484][ T5677] team0 (unregistering): Port device team_slave_0 removed
[   95.912552][ T7153] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   95.960891][ T7101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.965699][ T7101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.058647][ T7101] team0: Port device team_slave_0 added
[   96.081260][ T7101] team0: Port device team_slave_1 added
[   96.145765][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.147972][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.153991][   T54] Bluetooth: hci2: command tx timeout
[   96.166534][ T7101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.230209][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.232419][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.246788][ T7101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.305725][ T7101] hsr_slave_0: entered promiscuous mode
[   96.308018][ T7101] hsr_slave_1: entered promiscuous mode
[   96.310173][ T7101] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.312526][ T7101] Cannot create hsr debugfs directory
[   96.744294][ T7199] netlink: 'syz.0.471': attribute type 1 has an invalid length.
[   96.747246][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'.
[   97.007739][ T7101] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   97.017080][ T7101] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   97.024899][ T7101] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   97.030910][ T7101] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   97.350217][ T7101] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.395369][ T7101] 8021q: adding VLAN 0 to HW filter on device team0
[   97.402398][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.404998][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.422824][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.425136][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.689538][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.820792][ T7101] veth0_vlan: entered promiscuous mode
[   97.837824][ T7101] veth1_vlan: entered promiscuous mode
[   97.876451][ T7101] veth0_macvtap: entered promiscuous mode
[   97.886507][ T7101] veth1_macvtap: entered promiscuous mode
[   97.925961][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.937375][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.947247][ T7101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.950181][ T7101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.962394][ T7101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.969352][ T7101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.115699][  T547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.118242][  T547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.165440][  T547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.168008][  T547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.237166][   T54] Bluetooth: hci2: command tx timeout
[   98.485866][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.495'.
[   98.510825][ T7315] warning: `syz.1.494' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   98.880612][ T7329] netlink: 'syz.1.500': attribute type 1 has an invalid length.
[   99.477536][ T5884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.181780][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  100.187848][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  100.191820][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  100.196801][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  100.201705][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  100.241215][ T7374] netlink: 'syz.0.517': attribute type 9 has an invalid length.
[  100.246296][ T7374] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.517'.
[  100.485870][ T7371] chnl_net:caif_netlink_parms(): no params data found
[  100.595970][ T5884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.684639][ T7400] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  100.724935][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.727218][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.729611][ T7371] bridge_slave_0: entered allmulticast mode
[  100.732489][ T7371] bridge_slave_0: entered promiscuous mode
[  100.738297][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.741469][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.744877][ T7371] bridge_slave_1: entered allmulticast mode
[  100.753301][ T7371] bridge_slave_1: entered promiscuous mode
[  100.807929][ T7371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.812769][ T7371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.874780][ T7371] team0: Port device team_slave_0 added
[  100.911691][ T5884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.939791][ T7371] team0: Port device team_slave_1 added
[  100.989909][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.992799][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.005629][ T7371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.025275][ T5884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.043681][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.045874][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.077302][ T7371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.107421][ T7416] netlink: 128 bytes leftover after parsing attributes in process `syz.1.535'.
[  101.111575][ T7416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.535'.
[  101.125314][ T7371] hsr_slave_0: entered promiscuous mode
[  101.127542][ T7371] hsr_slave_1: entered promiscuous mode
[  101.130006][ T7371] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.132447][ T7371] Cannot create hsr debugfs directory
[  101.306445][ T5884] bridge_slave_1: left allmulticast mode
[  101.308293][ T5884] bridge_slave_1: left promiscuous mode
[  101.310187][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.335868][ T5884] bridge_slave_0: left allmulticast mode
[  101.338156][ T5884] bridge_slave_0: left promiscuous mode
[  101.340494][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.627811][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.636067][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.641101][ T5884] bond0 (unregistering): Released all slaves
[  101.672059][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'.
[  101.871354][ T7446] netlink: 48 bytes leftover after parsing attributes in process `syz.0.547'.
[  101.882839][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'.
[  101.889706][ T7447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.548'.
[  102.048722][ T5884] hsr_slave_0: left promiscuous mode
[  102.057842][ T5884] hsr_slave_1: left promiscuous mode
[  102.064936][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.067251][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.071973][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.074856][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.100664][ T5884] veth1_macvtap: left promiscuous mode
[  102.102698][ T5884] veth0_macvtap: left promiscuous mode
[  102.111406][ T5884] veth1_vlan: left promiscuous mode
[  102.114070][ T5884] veth0_vlan: left promiscuous mode
[  102.233321][ T5834] Bluetooth: hci2: command tx timeout
[  102.506928][ T5884] team0 (unregistering): Port device team_slave_1 removed
[  102.531261][ T5884] team0 (unregistering): Port device team_slave_0 removed
[  102.898112][ T7371] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  102.916739][ T7371] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  102.932398][ T7371] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  102.953279][ T7371] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  103.129085][ T7491] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  103.131149][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.131951][ T7491] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  103.142655][ T7371] 8021q: adding VLAN 0 to HW filter on device team0
[  103.148351][  T547] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.150695][  T547] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.160055][  T547] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.162270][  T547] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.270889][   T33] audit: type=1107 audit(1752268851.344:2): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  103.434437][ T7371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.537856][ T7371] veth0_vlan: entered promiscuous mode
[  103.548890][ T7371] veth1_vlan: entered promiscuous mode
[  103.585347][ T7371] veth0_macvtap: entered promiscuous mode
[  103.591207][ T7371] veth1_macvtap: entered promiscuous mode
[  103.620604][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.639260][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.648282][ T7371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.651604][ T7371] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.656261][ T7371] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.659655][ T7371] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.764265][ T4603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.767940][ T4603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.834154][  T547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.838688][  T547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.216920][ T5884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.113333][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  106.116559][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  106.119438][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  106.122627][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  106.126625][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  106.233722][ T7577] chnl_net:caif_netlink_parms(): no params data found
[  106.309841][ T5884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.346790][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.355173][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.358118][ T7577] bridge_slave_0: entered allmulticast mode
[  106.361854][ T7577] bridge_slave_0: entered promiscuous mode
[  106.445545][ T7577] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.453236][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.455606][ T7577] bridge_slave_1: entered allmulticast mode
[  106.458306][ T7577] bridge_slave_1: entered promiscuous mode
[  106.486907][ T7577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.492609][ T7577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.536912][ T7577] team0: Port device team_slave_0 added
[  106.540594][ T7577] team0: Port device team_slave_1 added
[  106.567425][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.570232][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.580122][ T7577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.585210][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.587287][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.597332][ T7577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.638627][ T7577] hsr_slave_0: entered promiscuous mode
[  106.640973][ T7577] hsr_slave_1: entered promiscuous mode
[  106.644307][ T7577] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.646651][ T7577] Cannot create hsr debugfs directory
[  106.765354][ T7618] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.768411][ T7618] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.771955][ T7618] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.775365][ T7618] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.806820][ T7618] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.810100][ T7618] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.833445][ T5884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.877632][ T7618] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.884865][ T7618] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.916542][ T5884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.934980][ T7632] xt_CT: No such helper "snmp_trap"
[  106.970539][ T7618] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.976108][ T7618] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.086500][ T7618] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.089829][ T7618] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.171977][ T5884] bridge_slave_1: left allmulticast mode
[  107.175073][ T5884] bridge_slave_1: left promiscuous mode
[  107.176927][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.181700][ T5884] bridge_slave_0: left allmulticast mode
[  107.185408][ T5884] bridge_slave_0: left promiscuous mode
[  107.187253][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.460971][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.466739][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.471569][ T5884] bond0 (unregistering): Released all slaves
[  107.544108][ T7648] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  107.547253][ T7618] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.549783][ T7618] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.609381][ T7618] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.612055][ T7618] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.621889][ T7618] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.626077][ T7618] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.642045][ T7618] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.645799][ T7618] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.816057][ T5884] hsr_slave_0: left promiscuous mode
[  107.818955][ T5884] hsr_slave_1: left promiscuous mode
[  107.824013][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.828172][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.832960][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.839863][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.872410][ T5884] veth1_macvtap: left promiscuous mode
[  107.877548][ T5884] veth0_macvtap: left promiscuous mode
[  107.882249][ T5884] veth1_vlan: left promiscuous mode
[  107.885507][ T5884] veth0_vlan: left promiscuous mode
[  108.128917][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'.
[  108.153975][   T54] Bluetooth: hci2: command tx timeout
[  108.266707][ T5884] team0 (unregistering): Port device team_slave_1 removed
[  108.288969][ T5884] team0 (unregistering): Port device team_slave_0 removed
[  108.594208][ T7577] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  108.599975][ T7577] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  108.612752][ T7577] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  108.618542][ T7577] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  108.646767][ T7684] bridge: RTM_NEWNEIGH with invalid ether address
[  108.741113][ T7577] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.770439][ T7577] 8021q: adding VLAN 0 to HW filter on device team0
[  108.780184][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.782770][ T4603] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.799577][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.801898][ T4603] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.080009][ T7577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.150178][ T7577] veth0_vlan: entered promiscuous mode
[  109.160526][ T7577] veth1_vlan: entered promiscuous mode
[  109.201025][ T7577] veth0_macvtap: entered promiscuous mode
[  109.209102][ T7577] veth1_macvtap: entered promiscuous mode
[  109.229634][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.239307][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.246455][ T7577] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.249592][ T7577] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.252266][ T7577] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.258355][ T7577] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.323156][ T2268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.325632][ T2268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.348737][ T7725] netlink: 148 bytes leftover after parsing attributes in process `syz.0.648'.
[  109.351562][ T7725] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  109.360656][ T7724] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  109.369305][ T2268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.371776][ T2268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.955588][ T7757] netlink: 'syz.0.662': attribute type 2 has an invalid length.
[  109.967844][ T7757] : entered promiscuous mode
[  110.171480][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'.
[  110.400254][ T7784] netlink: 272 bytes leftover after parsing attributes in process `syz.0.675'.
[  110.535347][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'.
[  111.166160][ T5677] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.919647][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'.
[  112.180541][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.185593][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.188362][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.191453][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.195405][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.329584][ T7891] chnl_net:caif_netlink_parms(): no params data found
[  112.342210][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  112.393349][ T7891] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.395782][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.398205][ T7891] bridge_slave_0: entered allmulticast mode
[  112.401223][ T7891] bridge_slave_0: entered promiscuous mode
[  112.407244][ T7891] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.409649][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.411976][ T7891] bridge_slave_1: entered allmulticast mode
[  112.415936][ T7891] bridge_slave_1: entered promiscuous mode
[  112.441611][ T7891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.448842][ T7891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.486190][ T7891] team0: Port device team_slave_0 added
[  112.491567][ T7891] team0: Port device team_slave_1 added
[  112.547737][ T5677] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.562429][ T7891] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.570164][ T7891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.579511][ T7891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.584315][ T7891] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.588886][ T7891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.598612][ T7891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.622405][ T5677] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.667636][ T7891] hsr_slave_0: entered promiscuous mode
[  112.670263][ T7891] hsr_slave_1: entered promiscuous mode
[  112.672671][ T7891] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.678605][ T7891] Cannot create hsr debugfs directory
[  112.724362][ T5677] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.899072][ T5677] bridge_slave_1: left allmulticast mode
[  112.901359][ T5677] bridge_slave_1: left promiscuous mode
[  112.904592][ T5677] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.909853][ T7926] syz.1.698 (7926) used obsolete PPPIOCDETACH ioctl
[  112.915045][ T5677] bridge_slave_0: left allmulticast mode
[  112.917327][ T5677] bridge_slave_0: left promiscuous mode
[  112.919790][ T5677] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.289941][ T5677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.299713][ T5677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.310305][ T5677] bond0 (unregistering): Released all slaves
[  113.800916][ T5677] hsr_slave_0: left promiscuous mode
[  113.816604][ T5677] hsr_slave_1: left promiscuous mode
[  113.819534][ T5677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.825906][ T5677] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.830188][ T5677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.835547][ T5677] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.868380][ T5677] veth1_macvtap: left promiscuous mode
[  113.870846][ T5677] veth0_macvtap: left promiscuous mode
[  113.876001][ T5677] veth1_vlan: left promiscuous mode
[  113.878341][ T5677] veth0_vlan: left promiscuous mode
[  114.237113][   T54] Bluetooth: hci2: command tx timeout
[  114.417497][ T5677] team0 (unregistering): Port device team_slave_1 removed
[  114.451947][ T5677] team0 (unregistering): Port device team_slave_0 removed
[  114.911200][ T7891] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  114.930529][ T7891] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  114.953346][ T7891] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  114.966006][ T7891] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  114.992468][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.708'.
[  115.144653][ T7971] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  115.152678][ T7891] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.191410][ T7891] 8021q: adding VLAN 0 to HW filter on device team0
[  115.212440][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.215463][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.236171][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.238960][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.514423][ T7891] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.578993][ T7891] veth0_vlan: entered promiscuous mode
[  115.598935][ T7891] veth1_vlan: entered promiscuous mode
[  115.628864][ T7891] veth0_macvtap: entered promiscuous mode
[  115.637781][ T7891] veth1_macvtap: entered promiscuous mode
[  115.665775][ T7891] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.678520][ T7891] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.695726][ T7891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.699186][ T7891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.702614][ T7891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.707740][ T7891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.810909][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.820262][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.860357][ T7864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.863903][ T7864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.998229][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'.
[  116.313246][   T54] Bluetooth: hci2: command tx timeout
[  116.791505][ T7891] 
[  116.792336][ T7891] ======================================================
[  116.794488][ T7891] WARNING: possible circular locking dependency detected
[  116.796596][ T7891] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  116.800228][ T7891] ------------------------------------------------------
[  116.802385][ T7891] syz-executor/7891 is trying to acquire lock:
[  116.804303][ T7891] ffff888039ebc040 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0
[  116.807885][ T7891] 
[  116.807885][ T7891] but task is already holding lock:
[  116.810151][ T7891] ffff888039ebc338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  116.812915][ T7891] 
[  116.812915][ T7891] which lock already depends on the new lock.
[  116.812915][ T7891] 
[  116.816439][ T7891] 
[  116.816439][ T7891] the existing dependency chain (in reverse order) is:
[  116.819533][ T7891] 
[  116.819533][ T7891] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[  116.822053][ T7891]        lock_acquire+0x120/0x360
[  116.823550][ T7891]        __mutex_lock+0x182/0xe80
[  116.825075][ T7891]        l2cap_info_timeout+0x60/0xa0
[  116.826665][ T7891]        process_scheduled_works+0xae1/0x17b0
[  116.828458][ T7891]        worker_thread+0x8a0/0xda0
[  116.830043][ T7891]        kthread+0x711/0x8a0
[  116.831503][ T7891]        ret_from_fork+0x3fc/0x770
[  116.833091][ T7891]        ret_from_fork_asm+0x1a/0x30
[  116.834740][ T7891] 
[  116.834740][ T7891] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[  116.837827][ T7891]        validate_chain+0xb9b/0x2140
[  116.839406][ T7891]        __lock_acquire+0xab9/0xd20
[  116.840960][ T7891]        lock_acquire+0x120/0x360
[  116.842420][ T7891]        __flush_work+0x6b8/0xbc0
[  116.843988][ T7891]        __cancel_work_sync+0xbe/0x110
[  116.845693][ T7891]        l2cap_conn_del+0x4f0/0x680
[  116.847318][ T7891]        hci_conn_hash_flush+0x10d/0x230
[  116.849423][ T7891]        hci_dev_close_sync+0xaef/0x1330
[  116.851323][ T7891]        hci_unregister_dev+0x21a/0x510
[  116.853030][ T7891]        vhci_release+0x80/0xd0
[  116.854587][ T7891]        __fput+0x44c/0xa70
[  116.856000][ T7891]        task_work_run+0x1d4/0x260
[  116.857597][ T7891]        do_exit+0x6b5/0x22e0
[  116.859069][ T7891]        do_group_exit+0x21c/0x2d0
[  116.860757][ T7891]        __x64_sys_exit_group+0x3f/0x40
[  116.862390][ T7891]        x64_sys_call+0x21ba/0x21c0
[  116.863968][ T7891]        do_syscall_64+0xfa/0x3b0
[  116.865481][ T7891]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.867395][ T7891] 
[  116.867395][ T7891] other info that might help us debug this:
[  116.867395][ T7891] 
[  116.870482][ T7891]  Possible unsafe locking scenario:
[  116.870482][ T7891] 
[  116.872670][ T7891]        CPU0                    CPU1
[  116.874268][ T7891]        ----                    ----
[  116.875930][ T7891]   lock(&conn->lock#2);
[  116.877248][ T7891]                                lock((work_completion)(&(&conn->info_timer)->work));
[  116.880163][ T7891]                                lock(&conn->lock#2);
[  116.882219][ T7891]   lock((work_completion)(&(&conn->info_timer)->work));
[  116.884421][ T7891] 
[  116.884421][ T7891]  *** DEADLOCK ***
[  116.884421][ T7891] 
[  116.886874][ T7891] 5 locks held by syz-executor/7891:
[  116.888504][ T7891]  #0: ffff888100ef0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  116.891546][ T7891]  #1: ffff888100ef00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  116.894385][ T7891]  #2: ffffffff8f685a88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  116.897283][ T7891]  #3: ffff888039ebc338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  116.900293][ T7891]  #4: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0
[  116.903043][ T7891] 
[  116.903043][ T7891] stack backtrace:
[  116.904905][ T7891] CPU: 1 UID: 0 PID: 7891 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  116.904916][ T7891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.904921][ T7891] Call Trace:
[  116.904926][ T7891]  <TASK>
[  116.904931][ T7891]  dump_stack_lvl+0x189/0x250
[  116.904943][ T7891]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.904951][ T7891]  ? __pfx__printk+0x10/0x10
[  116.904962][ T7891]  ? print_lock_name+0xde/0x100
[  116.904972][ T7891]  print_circular_bug+0x2ee/0x310
[  116.904983][ T7891]  check_noncircular+0x134/0x160
[  116.904994][ T7891]  validate_chain+0xb9b/0x2140
[  116.905003][ T7891]  ? do_raw_spin_lock+0x121/0x290
[  116.905014][ T7891]  ? look_up_lock_class+0x74/0x170
[  116.905027][ T7891]  ? register_lock_class+0x51/0x320
[  116.905035][ T7891]  __lock_acquire+0xab9/0xd20
[  116.905044][ T7891]  ? __flush_work+0xd2/0xbc0
[  116.905053][ T7891]  lock_acquire+0x120/0x360
[  116.905060][ T7891]  ? __flush_work+0xd2/0xbc0
[  116.905071][ T7891]  ? _raw_spin_unlock_irq+0x23/0x50
[  116.905082][ T7891]  ? __flush_work+0xd2/0xbc0
[  116.905090][ T7891]  __flush_work+0x6b8/0xbc0
[  116.905099][ T7891]  ? __flush_work+0xd2/0xbc0
[  116.905109][ T7891]  ? __flush_work+0xd2/0xbc0
[  116.905118][ T7891]  ? __pfx___flush_work+0x10/0x10
[  116.905127][ T7891]  ? __pfx_wq_barrier_func+0x10/0x10
[  116.905138][ T7891]  ? __pfx___cancel_work+0x10/0x10
[  116.905148][ T7891]  ? hci_conn_drop+0x14d/0x280
[  116.905161][ T7891]  __cancel_work_sync+0xbe/0x110
[  116.905170][ T7891]  l2cap_conn_del+0x4f0/0x680
[  116.905181][ T7891]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  116.905190][ T7891]  hci_conn_hash_flush+0x10d/0x230
[  116.905201][ T7891]  hci_dev_close_sync+0xaef/0x1330
[  116.905211][ T7891]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  116.905219][ T7891]  ? up_write+0x1c4/0x420
[  116.905232][ T7891]  hci_unregister_dev+0x21a/0x510
[  116.905240][ T7891]  vhci_release+0x80/0xd0
[  116.905248][ T7891]  ? __pfx_vhci_release+0x10/0x10
[  116.905254][ T7891]  __fput+0x44c/0xa70
[  116.905268][ T7891]  task_work_run+0x1d4/0x260
[  116.905279][ T7891]  ? __pfx_task_work_run+0x10/0x10
[  116.905290][ T7891]  ? kmem_cache_free+0x18f/0x400
[  116.905302][ T7891]  do_exit+0x6b5/0x22e0
[  116.905314][ T7891]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  116.905324][ T7891]  ? __pfx_do_exit+0x10/0x10
[  116.905336][ T7891]  ? _raw_spin_unlock_irq+0x23/0x50
[  116.905345][ T7891]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.905356][ T7891]  do_group_exit+0x21c/0x2d0
[  116.905368][ T7891]  __x64_sys_exit_group+0x3f/0x40
[  116.905378][ T7891]  x64_sys_call+0x21ba/0x21c0
[  116.905388][ T7891]  do_syscall_64+0xfa/0x3b0
[  116.905396][ T7891]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.905406][ T7891]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.905413][ T7891]  ? exc_page_fault+0x9f/0xf0
[  116.905424][ T7891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.905431][ T7891] RIP: 0033:0x7fb1ae58e929
[  116.905462][ T7891] Code: Unable to access opcode bytes at 0x7fb1ae58e8ff.
[  116.905466][ T7891] RSP: 002b:00007ffe74c1e7f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  116.905474][ T7891] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb1ae58e929
[  116.905480][ T7891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  116.905484][ T7891] RBP: 00007fb1ae5ee8f0 R08: 00007ffe74c1c597 R09: 0000000000000003
[  116.905489][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.905493][ T7891] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffe74c1e9b0
[  116.905501][ T7891]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  117.039389][ T8016] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  117.042598][ T8016] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.

VM DIAGNOSIS:
21:21:05  Registers:
info registers vcpu 0

CPU#0
RAX=4015af92161c4000 RBX=ffffffff81976c78 RCX=4015af92161c4000 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000280 CR3=00000000266f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe097411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900043aee30
R8 =ffff88801ff50237 R9 =1ffff11003fea046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98d4 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555588e58500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fed08397fc8 CR3=000000011a6b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fed07785478 00007fed07785450 XMM03=00007fed07785488 00007fed07785480
XMM04=00007fed082ed100 00007fed07785440 XMM05=00007fed07785458 00007fed077854a0
XMM06=00007fed07785498 00007fed07785490 XMM07=00007fed07785488 00007fed07785480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fed07611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
