last executing test programs:

1m14.846724209s ago: executing program 2 (id=162):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0x1, 0x2c000011)

1m14.776408936s ago: executing program 2 (id=163):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004)

1m14.776137372s ago: executing program 2 (id=164):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0)

1m14.696376771s ago: executing program 2 (id=165):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='-', @ANYRESOCT=r1], 0x9)

1m14.69597786s ago: executing program 2 (id=166):
r0 = socket$inet6(0xa, 0x4, 0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x35b}]}, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r2, 0x0, 0x6, &(0x7f00000000c0), 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000", 0x48}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40}, {0x6}]}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})

1m13.024379183s ago: executing program 2 (id=169):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x6)
accept4(r0, 0x0, 0x0, 0x80800)
shutdown(r0, 0x0)

1m9.056143736s ago: executing program 0 (id=188):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002e000100000000000000000001"], 0x114}], 0x1}, 0x0)

1m8.927312876s ago: executing program 0 (id=190):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}})
ioctl(r0, 0x8b1b, &(0x7f0000000040))

1m8.804859131s ago: executing program 0 (id=191):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, r0, 0x683b1000)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f00000002c0)={0x24, {{0x29, 0x3, 0x2000000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x81}}}, 0x88)
r2 = socket(0x10, 0x80002, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x12000, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff)
r4 = openat$cgroup(r3, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
mmap(&(0x7f0000492000/0x3000)=nil, 0x3000, 0x100000e, 0x40010, 0xffffffffffffffff, 0xdc18e000)
socket$packet(0x11, 0x2, 0x300)

1m8.699966084s ago: executing program 0 (id=192):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x78}}, 0x0)

1m8.536822114s ago: executing program 0 (id=196):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8)

1m8.453148556s ago: executing program 1 (id=197):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0xa0002006})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x7b7306ca40510a6})
epoll_pwait(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x200, 0x0, 0x0)

1m8.345456611s ago: executing program 1 (id=198):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000000)

1m8.344901146s ago: executing program 1 (id=199):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m8.204370333s ago: executing program 1 (id=200):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000080000000000001000000097000100ffffffff95"], &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94)

1m8.203922245s ago: executing program 0 (id=201):
bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0xbc82, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000006c0)='fsi_master_gpio_cmd_rel_addr\x00', r0, 0x0, 0x40000000}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
unshare(0x2a020400)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464650600696d30000072be3dc7991eefe10dad958b0a161f3cfe31b467ddcb5d561526eac6faf24c40caf2090741918c31460fd43e339777d70139512c71c9aca8e1875953335ceb0e0b488d5b57f086e0f982af1d98ca8510c78d6cacfa69773e6aa07f718424f2b8ad33bedf69540935682bc1c73c71d6488d6bd4d2688c"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1, 0x240000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000180)="89daff443c50cd77d93fc3a4e14a683eaf4cbdf6061224b14088020b2ed898dccec7de54111c4dd0aae70ca686ac08d915771c0d8880750b21b2af5c67527ae6e44bc4bb987ad595ab010339ba8e62a6f3b55e370db22baa0499d5c99bd913530f63004808410afbde79522462c2d128b3ebaf9aacf620d3607bc13c9b892ae2faf1b2d914b4d4e819924cfad2faac71d75b523de1b50ecece41c1333e407178b1cc6bdd9f193ff1", 0xa8}, {&(0x7f0000000440)="f610b8bf3423b7366efffab808e8033507f2d6fdd32c3d8dd27cbf", 0x1b}, {&(0x7f0000000480)="c39910b1af0ffe5a2e912d51fce0df1417b6fa27218c22ecbd504d8997bf6e3c37a6019c6d94bda3", 0x28}, {&(0x7f00000005c0)="7c08d2ded30a88e4c7a627cc28d0b138af6d3082fc08e2ffbfb17618d5aeb38959dca0505337798fd8f7684020e01c35f0aab252240e9fe7286b385bd32523b02c3746416fc2da7d9c6ee8e524190b000d0d718a23a4335bc2c0fb09ee38e84933606008592b07d5b0f5a4f3f8275a83168409c89cab5f71bb6da4dff58f7f2add6c8ca7edfc740b917256a1d59d1641bdafa36eff1641de3df2203dc8599490f7e39184cc6b9fe0a9acfe71c4f2bb66be48e2b7b1b3a5f25db77bead11569a5bbec780bf6007dc873870c441d06f7303d7f040af1a6ea2213adea8eadd53c6f55f4", 0xe2}, {&(0x7f0000000740)="937fc864573bc54ea3b48e20ab50e31bf331e7fffaa876d5f6f6fe8f34ed3918c2ad5f82eb478bbd96f6e437598c1e77a49cb1fe9694988f3f9b2de4815bbbf0b9ec7513b18b4ea4cfea5c00510066dcf33afbbe722d25aedfb1dbffcf8a6178ed459f18d8e83c173dc0f65ed594d343798f6eff1d9e294113905cc2870b39af8d719599bb6984e3ee7c249901d83a471dd0e91f19335340b5", 0x99}, {&(0x7f0000000900)="3b3649509fb78e4a534972a7d4e490462a3d378efaa2fbb8994c6b19f1ab9fc133bbc520ae73a830b8d804888d142c0acc783d85d0a45a6f0c52f2262229c918eaf2e750877c40cc700a8a4dd15e72e7c5e856854825e08b45afbf2fcda0a4275e526485b2e386ac3d90e47f60ae50232adc97d3e58e52c311c81221a0e096442e7a1f24dc27702871735a4240d49517cf260c1033", 0x95}], 0x6)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="6fb5", 0x2}], 0x1}}], 0x1, 0x4000045)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/201, 0xc9, 0x1, 0x0}, &(0x7f0000000180)=0x40)
recvmsg(r5, &(0x7f0000000400)={&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/44, 0x2c}], 0x1}, 0x10000)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={<r7=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c)

1m8.007569272s ago: executing program 1 (id=202):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
write$tun(r1, &(0x7f00000004c0)={@val={0x0, 0x88a8}, @val={0x0, 0x0, 0x19, 0x7, 0x101, 0x3}, @ipv6=@tcp={0x2, 0x6, '4\be', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x2d}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x2, 0x0, 0x3}}}}}, 0x4a)
r2 = socket$netlink(0x10, 0x3, 0xc)
splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf)

40.519280797s ago: executing program 1 (id=203):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000240)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xec}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x80)

39.787204779s ago: executing program 32 (id=201):
bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0xbc82, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000006c0)='fsi_master_gpio_cmd_rel_addr\x00', r0, 0x0, 0x40000000}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
unshare(0x2a020400)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464650600696d30000072be3dc7991eefe10dad958b0a161f3cfe31b467ddcb5d561526eac6faf24c40caf2090741918c31460fd43e339777d70139512c71c9aca8e1875953335ceb0e0b488d5b57f086e0f982af1d98ca8510c78d6cacfa69773e6aa07f718424f2b8ad33bedf69540935682bc1c73c71d6488d6bd4d2688c"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1, 0x240000000}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000180)="89daff443c50cd77d93fc3a4e14a683eaf4cbdf6061224b14088020b2ed898dccec7de54111c4dd0aae70ca686ac08d915771c0d8880750b21b2af5c67527ae6e44bc4bb987ad595ab010339ba8e62a6f3b55e370db22baa0499d5c99bd913530f63004808410afbde79522462c2d128b3ebaf9aacf620d3607bc13c9b892ae2faf1b2d914b4d4e819924cfad2faac71d75b523de1b50ecece41c1333e407178b1cc6bdd9f193ff1", 0xa8}, {&(0x7f0000000440)="f610b8bf3423b7366efffab808e8033507f2d6fdd32c3d8dd27cbf", 0x1b}, {&(0x7f0000000480)="c39910b1af0ffe5a2e912d51fce0df1417b6fa27218c22ecbd504d8997bf6e3c37a6019c6d94bda3", 0x28}, {&(0x7f00000005c0)="7c08d2ded30a88e4c7a627cc28d0b138af6d3082fc08e2ffbfb17618d5aeb38959dca0505337798fd8f7684020e01c35f0aab252240e9fe7286b385bd32523b02c3746416fc2da7d9c6ee8e524190b000d0d718a23a4335bc2c0fb09ee38e84933606008592b07d5b0f5a4f3f8275a83168409c89cab5f71bb6da4dff58f7f2add6c8ca7edfc740b917256a1d59d1641bdafa36eff1641de3df2203dc8599490f7e39184cc6b9fe0a9acfe71c4f2bb66be48e2b7b1b3a5f25db77bead11569a5bbec780bf6007dc873870c441d06f7303d7f040af1a6ea2213adea8eadd53c6f55f4", 0xe2}, {&(0x7f0000000740)="937fc864573bc54ea3b48e20ab50e31bf331e7fffaa876d5f6f6fe8f34ed3918c2ad5f82eb478bbd96f6e437598c1e77a49cb1fe9694988f3f9b2de4815bbbf0b9ec7513b18b4ea4cfea5c00510066dcf33afbbe722d25aedfb1dbffcf8a6178ed459f18d8e83c173dc0f65ed594d343798f6eff1d9e294113905cc2870b39af8d719599bb6984e3ee7c249901d83a471dd0e91f19335340b5", 0x99}, {&(0x7f0000000900)="3b3649509fb78e4a534972a7d4e490462a3d378efaa2fbb8994c6b19f1ab9fc133bbc520ae73a830b8d804888d142c0acc783d85d0a45a6f0c52f2262229c918eaf2e750877c40cc700a8a4dd15e72e7c5e856854825e08b45afbf2fcda0a4275e526485b2e386ac3d90e47f60ae50232adc97d3e58e52c311c81221a0e096442e7a1f24dc27702871735a4240d49517cf260c1033", 0x95}], 0x6)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="6fb5", 0x2}], 0x1}}], 0x1, 0x4000045)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/201, 0xc9, 0x1, 0x0}, &(0x7f0000000180)=0x40)
recvmsg(r5, &(0x7f0000000400)={&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/44, 0x2c}], 0x1}, 0x10000)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={<r7=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c)

0s ago: executing program 33 (id=203):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000240)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xec}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x80)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37824' (ED25519) to the list of known hosts.
syzkaller login: [   48.594458][ T5771] cgroup: Unknown subsys name 'net'
[   48.665343][ T5771] cgroup: Unknown subsys name 'cpuset'
[   48.669703][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.995970][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.225518][ T5879] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.583449][ T5896] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.398834][ T5925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.403945][ T5925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.406750][ T5925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.413974][ T5925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.416793][ T5925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.418173][ T5928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.423385][ T5928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.425982][ T5928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.428700][ T5928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.432359][ T5928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.462594][ T5928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.465803][ T5928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.468691][ T5928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.473989][ T5928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.476662][ T5928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.734655][ T5923] chnl_net:caif_netlink_parms(): no params data found
[   60.768699][ T5926] chnl_net:caif_netlink_parms(): no params data found
[   60.846289][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.849431][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.852214][ T5923] bridge_slave_0: entered allmulticast mode
[   60.855105][ T5923] bridge_slave_0: entered promiscuous mode
[   60.872945][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.875682][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.878737][ T5923] bridge_slave_1: entered allmulticast mode
[   60.884087][ T5923] bridge_slave_1: entered promiscuous mode
[   60.927306][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.931721][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.934084][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.936368][ T5926] bridge_slave_0: entered allmulticast mode
[   60.938985][ T5926] bridge_slave_0: entered promiscuous mode
[   60.942835][ T5930] chnl_net:caif_netlink_parms(): no params data found
[   60.948459][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.963832][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.966224][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.968571][ T5926] bridge_slave_1: entered allmulticast mode
[   60.972167][ T5926] bridge_slave_1: entered promiscuous mode
[   61.010543][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.017841][ T5923] team0: Port device team_slave_0 added
[   61.021396][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.028509][ T5923] team0: Port device team_slave_1 added
[   61.061592][ T5926] team0: Port device team_slave_0 added
[   61.071416][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.073666][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.075900][ T5930] bridge_slave_0: entered allmulticast mode
[   61.078962][ T5930] bridge_slave_0: entered promiscuous mode
[   61.091087][ T5926] team0: Port device team_slave_1 added
[   61.093261][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.095640][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.097946][ T5930] bridge_slave_1: entered allmulticast mode
[   61.101866][ T5930] bridge_slave_1: entered promiscuous mode
[   61.104812][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.107402][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.117134][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.141533][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.144324][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.154577][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.185449][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.191377][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.194166][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.203940][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.209714][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.226799][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.230049][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.240510][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.271169][ T5930] team0: Port device team_slave_0 added
[   61.275850][ T5930] team0: Port device team_slave_1 added
[   61.293942][ T5923] hsr_slave_0: entered promiscuous mode
[   61.296448][ T5923] hsr_slave_1: entered promiscuous mode
[   61.314083][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.316983][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.327578][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.345354][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.347890][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.358229][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.371366][ T5926] hsr_slave_0: entered promiscuous mode
[   61.373848][ T5926] hsr_slave_1: entered promiscuous mode
[   61.376085][ T5926] debugfs: 'hsr0' already exists in 'hsr'
[   61.377947][ T5926] Cannot create hsr debugfs directory
[   61.479602][ T5930] hsr_slave_0: entered promiscuous mode
[   61.482813][ T5930] hsr_slave_1: entered promiscuous mode
[   61.486214][ T5930] debugfs: 'hsr0' already exists in 'hsr'
[   61.488355][ T5930] Cannot create hsr debugfs directory
[   61.684856][ T5926] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.693031][ T5926] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.709279][ T5926] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.719062][ T5926] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.760800][ T5923] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.778289][ T5923] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.799417][ T5923] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.812410][ T5923] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.832463][ T5930] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.838701][ T5930] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.847270][ T5930] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.862651][ T5930] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.949399][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.971663][ T5926] 8021q: adding VLAN 0 to HW filter on device team0
[   61.986755][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.989300][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.998544][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.001558][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.024232][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.054649][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.066115][ T5923] 8021q: adding VLAN 0 to HW filter on device team0
[   62.081675][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.084310][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.098701][ T5926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.106713][ T5930] 8021q: adding VLAN 0 to HW filter on device team0
[   62.111689][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.114497][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.146527][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.149449][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.157019][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.160189][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.209146][ T5923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   62.230736][ T5923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.294281][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.351388][ T5926] veth0_vlan: entered promiscuous mode
[   62.366391][ T5926] veth1_vlan: entered promiscuous mode
[   62.396013][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.414651][ T5926] veth0_macvtap: entered promiscuous mode
[   62.419424][ T5926] veth1_macvtap: entered promiscuous mode
[   62.445953][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.466798][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.483357][ T5928] Bluetooth: hci1: command tx timeout
[   62.486103][ T5928] Bluetooth: hci0: command tx timeout
[   62.505190][ T5923] veth0_vlan: entered promiscuous mode
[   62.519624][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.529658][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.535063][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.539484][ T5923] veth1_vlan: entered promiscuous mode
[   62.547725][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.553176][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.560467][ T5927] Bluetooth: hci2: command tx timeout
[   62.620905][ T5923] veth0_macvtap: entered promiscuous mode
[   62.643675][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.644937][ T5923] veth1_macvtap: entered promiscuous mode
[   62.646797][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.653375][ T5930] veth0_vlan: entered promiscuous mode
[   62.674904][ T5930] veth1_vlan: entered promiscuous mode
[   62.700841][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.704211][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.707349][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.720953][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.736211][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.747610][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.761812][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.766099][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.770344][ T5930] veth0_macvtap: entered promiscuous mode
[   62.802731][ T5930] veth1_macvtap: entered promiscuous mode
[   62.811766][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.44'.
[   62.857846][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.899470][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.915639][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.918867][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.927046][ T5899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.939642][ T5899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.952521][ T5899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.956451][ T5899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.040729][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.043521][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.065639][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.072493][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.096703][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.100679][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.210753][ T5997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.501712][ T6016] netlink: 96 bytes leftover after parsing attributes in process `syz.1.56'.
[   63.511816][ T6016] netlink: 80 bytes leftover after parsing attributes in process `syz.1.56'.
[   63.918440][ T6040] tipc: Started in network mode
[   63.922813][ T6040] tipc: Node identity 5a46c8485ff4, cluster identity 4711
[   63.926889][ T6040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.940518][ T6040] syzkaller0: entered promiscuous mode
[   63.942768][ T6040] syzkaller0: entered allmulticast mode
[   64.005379][ T6040] tipc: Resetting bearer <eth:syzkaller0>
[   64.018851][ T6039] tipc: Resetting bearer <eth:syzkaller0>
[   64.045378][ T6039] tipc: Disabling bearer <eth:syzkaller0>
[   64.389556][ T6067] syz.1.76 uses obsolete (PF_INET,SOCK_PACKET)
[   64.550835][ T5927] Bluetooth: hci0: command tx timeout
[   64.553194][ T5927] Bluetooth: hci1: command tx timeout
[   64.591489][ T6077] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   64.633474][ T5928] Bluetooth: hci2: command tx timeout
[   64.818469][ T6089] batadv0: entered promiscuous mode
[   64.821089][ T6089] vlan2: entered promiscuous mode
[   65.173732][ T6107] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.269385][ T6114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.469703][ T6114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.553825][ T6114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.628473][ T6114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.796027][ T5983] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.800081][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.817418][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.825960][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.906354][ T6151] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.002015][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'.
[   66.019695][ T6158] veth0: entered promiscuous mode
[   66.025051][ T6158] veth0: left promiscuous mode
[   66.370444][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'.
[   66.413960][ T6198] netlink: 64 bytes leftover after parsing attributes in process `syz.2.136'.
[   66.631072][ T5928] Bluetooth: hci1: command tx timeout
[   66.633544][ T5928] Bluetooth: hci0: command tx timeout
[   66.733260][ T5927] Bluetooth: hci2: command tx timeout
[   67.918377][ T5930] cgroup: fork rejected by pids controller in /syz2
[   68.723856][ T5927] Bluetooth: hci0: command tx timeout
[   68.723923][ T5928] Bluetooth: hci1: command tx timeout
[   70.122182][ T5934] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.460718][ T5927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.464415][ T5927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.467621][ T5927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.473355][ T5927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.476605][ T5927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.067038][ T6283] chnl_net:caif_netlink_parms(): no params data found
[   71.277407][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.283613][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.395738][ T6300] netlink: 36 bytes leftover after parsing attributes in process `syz.0.178'.
[   71.423376][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.427088][ T6300] netlink: 36 bytes leftover after parsing attributes in process `syz.0.178'.
[   71.432470][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.435565][ T6283] bridge_slave_0: entered allmulticast mode
[   71.445190][ T6300] netlink: 36 bytes leftover after parsing attributes in process `syz.0.178'.
[   71.454699][ T6283] bridge_slave_0: entered promiscuous mode
[   71.463388][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.468072][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.488277][ T6283] bridge_slave_1: entered allmulticast mode
[   71.502786][ T6283] bridge_slave_1: entered promiscuous mode
[   71.686429][ T6283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.810763][ T5934] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.863193][ T6283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.014960][ T6283] team0: Port device team_slave_0 added
[   72.028048][ T6283] team0: Port device team_slave_1 added
[   72.104591][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.107810][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.122241][ T6283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.132136][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.135305][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.148819][ T6283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.288761][ T6283] hsr_slave_0: entered promiscuous mode
[   72.296751][ T6283] hsr_slave_1: entered promiscuous mode
[   72.301159][ T6283] debugfs: 'hsr0' already exists in 'hsr'
[   72.303788][ T6283] Cannot create hsr debugfs directory
[   72.560586][ T5927] Bluetooth: hci2: command tx timeout
[   72.693567][ T6314] syzkaller1: entered promiscuous mode
[   72.696166][ T6314] syzkaller1: entered allmulticast mode
[   72.895080][ T5934] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.505450][ T6318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.186'.
[   73.608919][ T6322] netlink: 256 bytes leftover after parsing attributes in process `syz.0.188'.
[   73.722496][ T6326] warning: `syz.0.190' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.175727][ T5934] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.833394][ T5927] Bluetooth: hci2: command tx timeout
[   76.897778][ T5927] Bluetooth: hci2: command tx timeout
[   78.968192][ T5927] Bluetooth: hci2: command tx timeout
[   83.485235][   T15] sched: DL replenish lagged too much
[   91.749437][  T794] cfg80211: failed to load regulatory.db
[  134.256132][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  134.265964][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  188.250208][ T5928] Bluetooth: hci1: command 0x0406 tx timeout
[  197.454055][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  197.469100][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  199.468120][ T5927] Bluetooth: hci2: command 0x0406 tx timeout
[  227.994122][ T6357] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  232.453136][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz-executor Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  232.453152][ T6357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.453157][ T6357] Call Trace:
[  232.453161][ T6357]  <TASK>
[  232.453165][ T6357]  dump_stack_lvl+0x189/0x250
[  232.453181][ T6357]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.453190][ T6357]  ? __pfx__printk+0x10/0x10
[  232.453201][ T6357]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  232.453211][ T6357]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  232.453219][ T6357]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  232.453228][ T6357]  warn_alloc+0x214/0x310
[  232.453243][ T6357]  ? __pfx_warn_alloc+0x10/0x10
[  232.453256][ T6357]  ? __get_vm_area_node+0x28f/0x300
[  232.453266][ T6357]  ? kcov_ioctl+0x55/0x640
[  232.453277][ T6357]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  232.453298][ T6357]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  232.453310][ T6357]  ? __pfx_kcov_ioctl+0x10/0x10
[  232.453319][ T6357]  vmalloc_user_noprof+0xad/0xf0
[  232.453329][ T6357]  ? kcov_ioctl+0x55/0x640
[  232.453347][ T6357]  kcov_ioctl+0x55/0x640
[  232.453357][ T6357]  ? bpf_lsm_file_ioctl+0x9/0x20
[  232.453366][ T6357]  ? __pfx_kcov_ioctl+0x10/0x10
[  232.453375][ T6357]  __se_sys_ioctl+0xfc/0x170
[  232.453386][ T6357]  do_syscall_64+0xfa/0x3b0
[  232.453396][ T6357]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.453405][ T6357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.453412][ T6357]  ? exc_page_fault+0x9f/0xf0
[  232.453421][ T6357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.453427][ T6357] RIP: 0033:0x7f996cd8e7eb
[  232.453436][ T6357] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  232.453442][ T6357] RSP: 002b:00007fff96774e50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  232.453452][ T6357] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f996cd8e7eb
[  232.453457][ T6357] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9
[  232.453462][ T6357] RBP: 00007f996cfb6128 R08: 00000000000000d8 R09: 0000000000000000
[  232.453466][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.453470][ T6357] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  232.453480][ T6357]  </TASK>
[  232.453483][ T6357] Mem-Info:
[  233.219201][   T34] INFO: task syz-executor:6283 blocked for more than 143 seconds.
[  233.232301][   T34]       Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0
[  233.235653][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.239299][   T34] task:syz-executor    state:D stack:21072 pid:6283  tgid:6283  ppid:1      task_flags:0x400140 flags:0x00004004
[  236.122271][   T34] Call Trace:
[  236.123678][   T34]  <TASK>
[  236.124708][   T34]  __schedule+0x1798/0x4cc0
[  236.126335][   T34]  ? __lock_acquire+0xab9/0xd20
[  236.128027][   T34]  ? __lock_acquire+0xab9/0xd20
[  239.113225][ T6357] active_anon:5039 inactive_anon:0 isolated_anon:0
[  239.113225][ T6357]  active_file:1036 inactive_file:38258 isolated_file:0
[  239.113225][ T6357]  unevictable:1768 dirty:269 writeback:0
[  239.113225][ T6357]  slab_reclaimable:9250 slab_unreclaimable:218329
[  239.113225][ T6357]  mapped:8884 shmem:2432 pagetables:749
[  239.113225][ T6357]  sec_pagetables:0 bounce:0
[  239.113225][ T6357]  kernel_misc_reclaimable:0
[  239.113225][ T6357]  free:158329 free_pcp:18519 free_cma:0
[  239.763839][   T34]  ? __pfx___schedule+0x10/0x10
[  239.765750][   T34]  ? schedule+0x91/0x360
[  239.767224][   T34]  schedule+0x165/0x360
[  239.768651][   T34]  schedule_preempt_disabled+0x13/0x30
[  240.064717][   T34]  __mutex_lock+0x7e6/0x1360
[  240.066379][   T34]  ? __mutex_lock+0x5b6/0x1360
[  240.068005][   T34]  ? device_del+0xa9/0x8e0
[  240.069530][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  242.034145][   T34]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  242.036403][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  242.038940][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  242.405956][ T6357] Node 0 active_anon:12808kB inactive_anon:0kB active_file:3112kB inactive_file:18188kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30152kB dirty:984kB writeback:0kB shmem:4828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5008kB pagetables:1584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB

VM DIAGNOSIS:
23:12:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff81c75448 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8fa34730 RBP=ffffc900000070e0 RSP=ffffc90000007020
R8 =ffffffff8fa34737 R9 =1ffffffff1f468e6 R10=dffffc0000000000 R11=fffffbfff1f468e7
R12=dffffc0000000000 R13=ffff888034092b70 R14=ffffffff99ca7610 R15=1ffff92000000e0c
RIP=ffffffff81a65d90 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcfb05806e0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff2068bea RBX=ffffffff8fb7fe9c RCX=ffffffff8fb7fea0 RDX=ffffffff90345f4e
RSI=ffffffff90345f52 RDI=ffffffff8be32620 RBP=dffffc0000000000 RSP=ffffc900001dfd38
R8 =0000000000000001 R9 =ffffffff8172c195 R10=ffffc900001dfe58 R11=ffffffff81ac3890
R12=ffffffff90345f53 R13=ffffc900001dfe58 R14=ffffc900001dfe08 R15=ffffffff8172c195
RIP=ffffffff8172c5be RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcfb024d6a0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
