Warning: Permanently added '[localhost]:29609' (ECDSA) to the list of known hosts. 2025/01/21 00:02:13 fuzzer started 2025/01/21 00:02:14 dialing manager at localhost:44833 syzkaller login: [ 62.412697] cgroup: Unknown subsys name 'net' [ 62.509764] cgroup: Unknown subsys name 'cpuset' [ 62.538441] cgroup: Unknown subsys name 'rlimit' [ 68.601769] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/21 00:02:32 syscalls: 2217 2025/01/21 00:02:32 code coverage: enabled 2025/01/21 00:02:32 comparison tracing: enabled 2025/01/21 00:02:32 extra coverage: enabled 2025/01/21 00:02:32 setuid sandbox: enabled 2025/01/21 00:02:32 namespace sandbox: enabled 2025/01/21 00:02:32 Android sandbox: enabled 2025/01/21 00:02:32 fault injection: enabled 2025/01/21 00:02:32 leak checking: enabled 2025/01/21 00:02:32 net packet injection: enabled 2025/01/21 00:02:32 net device setup: enabled 2025/01/21 00:02:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/21 00:02:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/21 00:02:32 USB emulation: enabled 2025/01/21 00:02:32 hci packet injection: enabled 2025/01/21 00:02:32 wifi device emulation: enabled 2025/01/21 00:02:32 802.15.4 emulation: enabled 2025/01/21 00:02:32 fetching corpus: 1, signal 584/2520 (executing program) 2025/01/21 00:02:32 fetching corpus: 1, signal 584/4456 (executing program) 2025/01/21 00:02:32 fetching corpus: 1, signal 584/6413 (executing program) 2025/01/21 00:02:32 fetching corpus: 1, signal 584/8355 (executing program) 2025/01/21 00:02:32 fetching corpus: 1, signal 584/10298 (executing program) 2025/01/21 00:02:32 fetching corpus: 1, signal 584/12233 (executing program) 2025/01/21 00:02:33 fetching corpus: 1, signal 584/14175 (executing program) 2025/01/21 00:02:33 fetching corpus: 1, signal 584/16120 (executing program) 2025/01/21 00:02:33 fetching corpus: 1, signal 584/18052 (executing program) 2025/01/21 00:02:33 fetching corpus: 1, signal 584/19483 (executing program) 2025/01/21 00:02:33 fetching corpus: 1, signal 584/19483 (executing program) 2025/01/21 00:02:35 starting 8 fuzzer processes 00:02:35 executing program 0: r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000000)={r0}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) fgetxattr(r1, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000080)=""/248, 0xf8) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000180)={{r1}, "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"}) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000001180)={0x7, 0x6d, 0x2}, 0x7) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000011c0)) r2 = signalfd(r0, &(0x7f0000001200)={[0x3]}, 0x8) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000001240)=""/164) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TCSBRKP(r3, 0x5425, 0xffffffff80000001) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000001340)={0x7, 0xf9a, 0x0, 'queue1\x00', 0x3f}) fchdir(r3) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xeb) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000001400)) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000001480)={0x6, &(0x7f0000001440)=[{0x313, 0x7fff}, {0x1}, {0x6, 0x5}, {0x66}, {0x87, 0x80}, {0x200, 0x9}]}) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000014c0)={'raw\x00', 0x10, "d0f5f83fd10ab191438ebad8edcdb50a"}, &(0x7f0000001500)=0x34) openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x202000, 0x0) pipe(&(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_settime(r5, 0x0, &(0x7f00000015c0)={{0x77359400}, {0x77359400}}, &(0x7f0000001600)) 00:02:35 executing program 1: getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0x70, 0x0, 0x6, 0x0, 0xfffffffc}, 0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e20, 0x8001, @private2, 0xffff}, {0xa, 0x4e24, 0x0, @empty, 0xff}, 0x6, [0xff, 0x6, 0x9, 0x1, 0x6, 0xffffffff, 0x20, 0x5]}, 0x5c) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x1, 0x400, 0x7, 0x500, 0x8, 0x1040008}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f00000002c0)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)={0x2c, 0x6, 0x0, 0x6, 0x4, [{0x8, 0xbf5, 0x1, '\x00', 0x2400}, {0x8001, 0xfffffffffffffff9, 0x5, '\x00', 0x480}, {0x4, 0x7, 0x0, '\x00', 0x880}, {0x400, 0x200, 0x800, '\x00', 0x2004}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000600)) signalfd(0xffffffffffffffff, &(0x7f0000000640)={[0xb7]}, 0x8) splice(r0, &(0x7f0000000680)=0x9, r4, &(0x7f00000006c0)=0xfffffffffffffff8, 0x100000, 0xa) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000700)={0x0, @rand_addr=0x64010102, @remote}, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000ec0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x5580e1009b049555}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xa8, r6, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 00:02:35 executing program 2: prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) 00:02:35 executing program 3: ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000000)={0xffff, 0xedc3, 0x3}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x5) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x2) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000080)) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'gre0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x8, 0x8000, 0x8f87, 0x29, {{0xa, 0x4, 0x3, 0x8, 0x28, 0x67, 0x0, 0x7c, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x13, 0x3, [{0x7, 0x6, "11ce5387"}, {0x1, 0x3, 'i'}, {0x2, 0x4, "63f8"}]}, @noop]}}}}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}], 0x2, &(0x7f0000001680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001780)=""/69, 0x45}], 0x1, &(0x7f0000001840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000001900)=""/251, 0xfb}, {&(0x7f0000001a00)=""/54, 0x36}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/148, 0x94}, {&(0x7f0000002b00)=""/35, 0x23}], 0x5}}, {{&(0x7f0000002bc0), 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/161, 0xa1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002d40)=""/119, 0x77}], 0x1}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/48, 0x30}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}], 0x6, 0x1, &(0x7f00000040c0)={0x0, 0x3938700}) ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f0000004100)={0x0, 0x400, 0x42, 0x4, 0x6}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000004140)={@private2, r0}, 0x14) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000004180)={0x0, 0xfffffffffffffff7, 0x8}) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f00000041c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000004200)={0x0, 0xffffffffffffffff, 0x10001, 0x2, 0x3, 0x2b0}) pidfd_getfd(r3, r2, 0x0) process_mrelease(r1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000004280)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f0000004380)=0xe8) lchown(&(0x7f0000004240)='./file0\x00', r11, r5) flock(r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000043c0)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r12, 0x11, 0x2, &(0x7f0000004400)=""/97, &(0x7f0000004480)=0x61) 00:02:35 executing program 4: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000000)={0x2, 0x6, @status={[0xba, 0x0, 0x80, 0xb022, 0x81, 0x21b0]}, [0x7, 0x80000001, 0x6, 0x9, 0x8, 0x4, 0x3, 0x0, 0x0, 0x100000000, 0x6, 0x2, 0x9, 0x2, 0xfffffffffffff001, 0x3, 0x32, 0xfe5c, 0x1000, 0x7c3, 0x0, 0xfffffffffffffffe, 0x5, 0x5, 0x0, 0x6, 0x0, 0xd7d, 0x8, 0x1000, 0x5, 0x101, 0x7, 0x2000000000000, 0x3, 0x6, 0xffffffffffffffe0, 0x1, 0x4, 0xc1b, 0x6155, 0x3f, 0xfffffffffffffff8, 0xfff, 0x7, 0x7, 0xfffffffffffffffd, 0x8, 0x4, 0x100000001, 0x3, 0xe90, 0x3ff, 0xffffffffffffff80, 0xfffffffffffffffb, 0x4, 0x9, 0x1, 0x40, 0x1f, 0x7, 0x9, 0x34, 0x1000]}) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x40000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x65}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x50, 0x1, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80000000}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048840) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x54, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80c0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', 0x801) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40400c0) sendmsg$AUDIT_SET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x38, 0x3e9, 0x200, 0x70bd25, 0x25dfdbff, {0x42, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, 0x9, 0x0, 0x9}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) umount2(&(0x7f0000001200)='./file0\x00', 0x5) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001240), 0x840, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000014c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001480)={&(0x7f0000001300)={0x170, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x103, 0xac, "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"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x6, 0xa000]}]}, 0x170}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000001540)={0x0, @l2={0x1f, 0xbb, @none, 0x9, 0x1}, @ethernet={0x306, @random="8737e7a455a6"}, @vsock={0x28, 0x0, 0x0, @hyper}, 0x1, 0x0, 0x0, 0x0, 0x26cd, &(0x7f0000001500)='geneve1\x00', 0x5, 0x1, 0x3}) r6 = socket$netlink(0x10, 0x3, 0x5) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGSKNS(r7, 0x894c, &(0x7f0000001700)=0x5c) 00:02:35 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x72) ioctl$TIOCEXCL(r0, 0x540c) ioctl$TCFLSH(r0, 0x540b, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x3) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = eventfd(0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) poll(&(0x7f0000000100)=[{r3, 0x80}, {r2, 0x4008}, {r4, 0x40}, {r1, 0x2501}, {r5, 0x100}, {r7, 0xa243}], 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000140)={{0x3, 0x4}, 'port0\x00', 0x0, 0x34, 0x6c5e, 0x3e, 0x2, 0x101, 0x8, 0x0, 0x4, 0x2a}) ioctl$KDADDIO(r2, 0x4b34, 0x8001) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000200)={0x8, "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"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) r9 = getpid() fcntl$setown(r8, 0x8, r9) ioctl$FIONCLEX(r3, 0x5450) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000880)={0x1, 0x1, 0xc, 0x9, 0xf8, &(0x7f0000000480)}) ioctl$KDGETLED(r6, 0x4b31, &(0x7f00000008c0)) ioctl$TIOCGETD(r6, 0x5424, &(0x7f0000000900)) [ 83.411454] audit: type=1400 audit(1737417755.551:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:02:35 executing program 6: ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x6e]}, 0x8) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x14]}, 0x8, 0x80000) fsetxattr$security_capability(r0, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x9, 0x5}, {0x8001, 0x3}]}, 0x18, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040048}, 0x80) fgetxattr(r0, &(0x7f00000002c0)=@random={'user.', '#,,]\\\x00'}, &(0x7f0000000300)=""/76, 0x4c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe8, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9d099968daefc224551dade9fa2b849caf9533f5072ba56f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "65c1f65b56e5396b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="535ee0482952569694d1cdf75f27f7eb"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f8ba29cfb9c6e3fafbbeb8db93c756c0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="67728dc9cb4d8f3abeb3b5bc44abb2082c7da378d387421b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e1bdfad1c600c261ba9bef58bed11640b73926c1d25ef17090c324d13f4173da"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bfb966194b8c0369"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6c09147db863d61a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x59}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2c580a2bdb0aa1a4"}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4008001) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580), 0x2c0, 0x0) r4 = epoll_create1(0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000005c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) r5 = openat$cgroup_ro(r3, &(0x7f0000000680)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x48000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800028}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x41}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = openat$incfs(r6, &(0x7f0000000900)='.pending_reads\x00', 0x200, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) vmsplice(r4, &(0x7f0000000e80)=[{&(0x7f0000000a80)="35f482b7cabd2e6433eebed253d314ee715b9d1925e08987f2eea4cc042827f049ed9c1d0a0f45da95468ccfdb9eedbb99370b54c0e7cf4bc8a76c0915618c24440999d2619741e67d360123e6df8606cd4baa85c12dc9fe9901c8edb7d5e553c1c13ef4860a835acf24a11d2e7f16faaab07d4f37b49b69a0a6d6c39e9806b08561a1d98cd4943e8243483fe3a4f705", 0x90}, {&(0x7f0000000b40)="611d4e39fe6352e753e100957aeb82fb4c70ffd01d05427cc5f998d6e2fb60148ec1e076510c6005895089682c18a30800d0782d1e53324be7dfe771c533271546bed925e70e78e8b21edf109e4d441dadf160c9fb81c64a7cdfd75de9b0835fb53b96dbb05fc4ee6de70426acbab0bfd575b23090cf739b541e43bb958f2c2ac6aeda62d50b53ccaaa2507dca99", 0x8e}, {&(0x7f0000000c00)="ac", 0x1}, {&(0x7f0000000c40)="2711cee50a47271ca029b15508d38c3d405b0f8ed1d40d20db010c38a68305bd1e35a450480074e4e9e164689d3c5d2691d2d17262ba5411986b820b61033a85b031ad996f0e80a798d4a0722fbffc177187c69375415494322ddcda29c02f91c9643f55fc4ee7ced2d87f95f95bb790fe619ca8882cd48e8b505ef1706c63b9f0b9c5ca97b9815bf516f6aee190e3f2ce6f8a64cdd11f760a7b170e1a4a15c0e657cc8ff3f184f8e5ce84940056c8c643236acae2c632b1", 0xb8}, {&(0x7f0000000d00)="6badb4e22f6fba32fcb515a74a8c736bc0d9cd0953bda3a9530eef383f70faa54fe1961b29fc0b2031880c364e330e59c8b2978981f34f3d057c5527b63fcefc65ea63e5d842b2360d510c", 0x4b}, {&(0x7f0000000d80)="1604f81d794b92bb252220b70caff850927c4fad38d383244fd1974b3ae6c6df00d18b90a75af109ee7ce840aa91aad96c992e25cba0901450a4254677a9c5", 0x3f}, {&(0x7f0000000dc0)="a7ecea8b2d7355feb2c296ffc99435f1aa827599915efe56a23263fceecb3d819dc1f80bf838356e54b689722bd76baae02c3a4234c6008483870e33a1d936d5201f396bfdbbb9a67da07d0d421d330b7cb965ebb217708cb9e4e4cbc92788cb4fc3b5b4b667bc1a6a27faa1095986a7116994944b098c624e6fdacc9389400b69bae6b245", 0x85}], 0x7, 0x6) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff, 0x54}}}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 00:02:35 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4084) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x110, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8050}, 0x40002) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xb633}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x401}, {0x5}, {0x6, 0x11, 0x7f}, {0x8, 0xb, 0xffff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x332f}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5d5}, {0x8, 0xb, 0x2}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000800}, 0x22008044) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80024100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xaa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008800}, 0x810) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x20}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x1}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x126}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x14) [ 84.802373] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.807809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.811779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.814318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.815423] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.822450] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.824859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.825756] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.827188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.854959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.857362] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.861072] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.862947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.868184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.872499] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.873266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.877854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.879060] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.880178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.889177] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.917510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.920788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.921773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.923546] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.926057] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.930332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.932196] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.934108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.936102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.940956] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.942389] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.945860] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.949388] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.952484] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.953209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.960961] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.987649] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.990951] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.993238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.013938] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.018924] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.021315] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.026259] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.028276] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.030485] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.035407] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.040243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.042200] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.884079] Bluetooth: hci1: command tx timeout [ 86.946886] Bluetooth: hci2: command tx timeout [ 86.949811] Bluetooth: hci0: command tx timeout [ 87.011845] Bluetooth: hci5: command tx timeout [ 87.012019] Bluetooth: hci3: command tx timeout [ 87.012468] Bluetooth: hci4: command tx timeout [ 87.074793] Bluetooth: hci7: command tx timeout [ 87.075061] Bluetooth: hci6: command tx timeout [ 88.931588] Bluetooth: hci1: command tx timeout [ 88.995628] Bluetooth: hci0: command tx timeout [ 88.996158] Bluetooth: hci2: command tx timeout [ 89.058656] Bluetooth: hci3: command tx timeout [ 89.058751] Bluetooth: hci5: command tx timeout [ 89.059920] Bluetooth: hci4: command tx timeout [ 89.124632] Bluetooth: hci6: command tx timeout [ 89.124735] Bluetooth: hci7: command tx timeout [ 90.978706] Bluetooth: hci1: command tx timeout [ 91.043633] Bluetooth: hci2: command tx timeout [ 91.043664] Bluetooth: hci0: command tx timeout [ 91.108859] Bluetooth: hci4: command tx timeout [ 91.109053] Bluetooth: hci5: command tx timeout [ 91.109160] Bluetooth: hci3: command tx timeout [ 91.173012] Bluetooth: hci7: command tx timeout [ 91.173543] Bluetooth: hci6: command tx timeout [ 93.026665] Bluetooth: hci1: command tx timeout [ 93.090764] Bluetooth: hci2: command tx timeout [ 93.091687] Bluetooth: hci0: command tx timeout [ 93.154742] Bluetooth: hci3: command tx timeout [ 93.154773] Bluetooth: hci5: command tx timeout [ 93.155734] Bluetooth: hci4: command tx timeout [ 93.218705] Bluetooth: hci6: command tx timeout [ 93.218724] Bluetooth: hci7: command tx timeout [ 142.584946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.585076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.881178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.881262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.221398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.221478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.468842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.468920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.918297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.918380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.144489] [ 144.144752] ====================================================== [ 144.145345] WARNING: possible circular locking dependency detected [ 144.145940] 6.13.0-rc7-next-20250120 #1 Not tainted [ 144.146427] ------------------------------------------------------ [ 144.147656] kworker/u8:1/65 is trying to acquire lock: [ 144.148700] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.150455] [ 144.150455] but task is already holding lock: [ 144.151897] ffff88800eee0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 144.153576] [ 144.153576] which lock already depends on the new lock. [ 144.153576] [ 144.155369] [ 144.155369] the existing dependency chain (in reverse order) is: [ 144.156068] [ 144.156068] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 144.156712] __mutex_lock+0x13d/0xb50 [ 144.157164] wiphy_register+0x1b2e/0x25d0 [ 144.157655] ieee80211_register_hw+0x23a4/0x3d60 [ 144.158183] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 144.158748] init_mac80211_hwsim+0x389/0x870 [ 144.159262] do_one_initcall+0xf9/0x640 [ 144.159736] kernel_init_freeable+0x53d/0x7a0 [ 144.160256] kernel_init+0x1e/0x2d0 [ 144.160676] ret_from_fork+0x48/0x80 [ 144.161097] ret_from_fork_asm+0x1a/0x30 [ 144.161576] [ 144.161576] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 144.162192] __lock_acquire+0x29fd/0x4580 [ 144.162692] lock_acquire+0x19b/0x520 [ 144.163147] __mutex_lock+0x13d/0xb50 [ 144.163607] unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.164230] unregister_netdevice_queue+0x224/0x2e0 [ 144.164785] _cfg80211_unregister_wdev+0x57b/0x700 [ 144.165340] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 144.165898] ieee80211_unregister_hw+0x55/0x3a0 [ 144.166421] hwsim_exit_net+0x3a0/0x730 [ 144.166908] ops_exit_list+0xb3/0x180 [ 144.167363] cleanup_net+0x546/0xad0 [ 144.167807] process_one_work+0x8ee/0x1a10 [ 144.168311] worker_thread+0x674/0xe70 [ 144.168785] kthread+0x3ab/0x720 [ 144.169211] ret_from_fork+0x48/0x80 [ 144.169651] ret_from_fork_asm+0x1a/0x30 [ 144.170144] [ 144.170144] other info that might help us debug this: [ 144.170144] [ 144.170911] Possible unsafe locking scenario: [ 144.170911] [ 144.171478] CPU0 CPU1 [ 144.171927] ---- ---- [ 144.172380] lock(&rdev->wiphy.mtx); [ 144.172782] lock(rtnl_mutex); [ 144.173366] lock(&rdev->wiphy.mtx); [ 144.173994] lock(rtnl_mutex); [ 144.174349] [ 144.174349] *** DEADLOCK *** [ 144.174349] [ 144.174926] 4 locks held by kworker/u8:1/65: [ 144.175365] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 144.176390] #1: ffff88800eb8fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 144.177377] #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 144.178296] #3: ffff88800eee0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 144.179336] [ 144.179336] stack backtrace: [ 144.179774] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250120 #1 [ 144.180578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 144.181351] Workqueue: netns cleanup_net [ 144.181773] Call Trace: [ 144.182029] [ 144.182256] dump_stack_lvl+0xca/0x120 [ 144.182687] print_circular_bug+0x47b/0x750 [ 144.183126] check_noncircular+0x2e9/0x3c0 [ 144.183555] ? __pfx_check_noncircular+0x10/0x10 [ 144.184037] ? hlock_class+0x4e/0x130 [ 144.184417] ? mark_lock+0xac/0xed0 [ 144.184798] ? srso_return_thunk+0x5/0x5f [ 144.185239] ? sched_clock+0x37/0x60 [ 144.185644] ? lockdep_lock+0xba/0x1b0 [ 144.186068] ? __pfx_lockdep_lock+0x10/0x10 [ 144.186534] __lock_acquire+0x29fd/0x4580 [ 144.186980] ? __pfx___lock_acquire+0x10/0x10 [ 144.187441] ? lock_release+0x20f/0x6f0 [ 144.187854] ? __pfx_lock_release+0x10/0x10 [ 144.188298] lock_acquire+0x19b/0x520 [ 144.188697] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.189282] ? __pfx_lock_acquire+0x10/0x10 [ 144.189725] ? srso_return_thunk+0x5/0x5f [ 144.190161] ? lock_release+0x20f/0x6f0 [ 144.190570] ? srso_return_thunk+0x5/0x5f [ 144.191020] ? lock_is_held_type+0x9e/0x120 [ 144.191477] ? srso_return_thunk+0x5/0x5f [ 144.191914] __mutex_lock+0x13d/0xb50 [ 144.192322] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.192907] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.193491] ? srso_return_thunk+0x5/0x5f [ 144.193930] ? synchronize_rcu_expedited+0x38a/0x420 [ 144.194437] ? __pfx___mutex_lock+0x10/0x10 [ 144.194903] ? __pfx_autoremove_wake_function+0x10/0x10 [ 144.195446] ? srso_return_thunk+0x5/0x5f [ 144.195889] ? kasan_quarantine_put+0x84/0x1e0 [ 144.196375] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 144.196835] ? srso_return_thunk+0x5/0x5f [ 144.197280] unregister_netdevice_many_notify+0x1612/0x1c80 [ 144.197842] ? __virt_addr_valid+0x2e8/0x5d0 [ 144.198299] ? __pfx_lock_release+0x10/0x10 [ 144.198751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 144.199353] ? find_held_lock+0x2c/0x110 [ 144.199785] ? srso_return_thunk+0x5/0x5f [ 144.200223] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 144.200736] ? srso_return_thunk+0x5/0x5f [ 144.201172] ? lock_release+0x20f/0x6f0 [ 144.201590] ? __pfx_lock_release+0x10/0x10 [ 144.202024] ? srso_return_thunk+0x5/0x5f [ 144.202465] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 144.203005] ? srso_return_thunk+0x5/0x5f [ 144.203455] unregister_netdevice_queue+0x224/0x2e0 [ 144.203961] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 144.204515] ? up_write+0x195/0x520 [ 144.204906] _cfg80211_unregister_wdev+0x57b/0x700 [ 144.205412] ? srso_return_thunk+0x5/0x5f [ 144.205860] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 144.206370] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 144.206929] ? srso_return_thunk+0x5/0x5f [ 144.207374] ? srso_return_thunk+0x5/0x5f [ 144.207829] ? synchronize_rcu+0x1ff/0x260 [ 144.208272] ieee80211_unregister_hw+0x55/0x3a0 [ 144.208755] hwsim_exit_net+0x3a0/0x730 [ 144.209177] ? __pfx_hwsim_exit_net+0x10/0x10 [ 144.209640] ? srso_return_thunk+0x5/0x5f [ 144.210085] ? netdev_run_todo+0x788/0x1040 [ 144.210546] ? __pfx_hwsim_exit_net+0x10/0x10 [ 144.211067] ops_exit_list+0xb3/0x180 [ 144.211486] cleanup_net+0x546/0xad0 [ 144.211883] ? __pfx_cleanup_net+0x10/0x10 [ 144.212335] process_one_work+0x8ee/0x1a10 [ 144.212804] ? __pfx_lock_acquire+0x10/0x10 [ 144.213252] ? __pfx_process_one_work+0x10/0x10 [ 144.213750] ? srso_return_thunk+0x5/0x5f [ 144.214197] ? move_linked_works+0x172/0x270 [ 144.214671] ? srso_return_thunk+0x5/0x5f [ 144.215118] ? assign_work+0x196/0x240 [ 144.215542] worker_thread+0x674/0xe70 [ 144.215965] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 144.216509] ? srso_return_thunk+0x5/0x5f [ 144.216954] ? __pfx_worker_thread+0x10/0x10 [ 144.217432] kthread+0x3ab/0x720 [ 144.217814] ? __pfx_kthread+0x10/0x10 [ 144.218236] ? srso_return_thunk+0x5/0x5f [ 144.218694] ? finish_task_switch.isra.0+0x206/0x840 [ 144.219216] ? __pfx_kthread+0x10/0x10 [ 144.219632] ret_from_fork+0x48/0x80 [ 144.220014] ? __pfx_kthread+0x10/0x10 [ 144.220433] ret_from_fork_asm+0x1a/0x30 [ 144.220878] [ 144.267405] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 146.817277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.819897] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.822380] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.827099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.832503] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.833768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.898728] Bluetooth: hci1: command tx timeout [ 150.946807] Bluetooth: hci1: command tx timeout [ 152.994756] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 00:03:36 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff85c70920 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c18d00 RBP=00007f83956454bb RSP=ffff88800ef9f590 R8 =0000000000000000 R9 =0000000000000000 R10=00007f8395645000 R11=0000000000000003 R12=00007f83956454bb R13=0000000000000000 R14=ffff8880131d9bc0 R15=0000000000000cc0 RIP=ffffffff81502c30 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f83951b98c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6cb7ad1700 CR3=0000000015c48000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff0000000000ff0000000000000000 XMM02=00007f5c0000000000007ffe5b536a90 XMM03=00007f5c6fac320035316c6c696b6672 XMM04=3020202020202020093a736567615062 XMM05=00000000000000000000000000000000 XMM06=2020092020202020093a0a4267203836 XMM07=00000000000000000000000000000000 XMM08=722f6c6c696b66722f6372732f2e2e00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e2e5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88800eb8ebb8 R8 =0000000000000001 R9 =ffffed1001d71d67 R10=0000000000000037 R11=6f6c206863696877 R12=0000000000000037 R13=0000000000000001 R14=ffff888008fea057 R15=ffff88800eb8eeb8 RIP=ffffffff8283e33d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005599b5d164c8 CR3=00000000165fc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000