syzkaller login: [ 68.036825] sshd (240) used greatest stack depth: 24480 bytes left Warning: Permanently added '[localhost]:22446' (ECDSA) to the list of known hosts. 2025/01/22 00:46:04 fuzzer started 2025/01/22 00:46:04 dialing manager at localhost:44689 [ 71.147211] cgroup: Unknown subsys name 'net' [ 71.221022] cgroup: Unknown subsys name 'cpuset' [ 71.249898] cgroup: Unknown subsys name 'rlimit' [ 76.422179] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 87.151726] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 00:46:21 syscalls: 2217 2025/01/22 00:46:21 code coverage: enabled 2025/01/22 00:46:21 comparison tracing: enabled 2025/01/22 00:46:21 extra coverage: enabled 2025/01/22 00:46:21 setuid sandbox: enabled 2025/01/22 00:46:21 namespace sandbox: enabled 2025/01/22 00:46:21 Android sandbox: enabled 2025/01/22 00:46:21 fault injection: enabled 2025/01/22 00:46:21 leak checking: enabled 2025/01/22 00:46:21 net packet injection: enabled 2025/01/22 00:46:21 net device setup: enabled 2025/01/22 00:46:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 00:46:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 00:46:21 USB emulation: enabled 2025/01/22 00:46:21 hci packet injection: enabled 2025/01/22 00:46:21 wifi device emulation: enabled 2025/01/22 00:46:21 802.15.4 emulation: enabled 2025/01/22 00:46:21 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/22 00:46:21 fetching corpus: 0, signal 0/3960 (executing program) 2025/01/22 00:46:21 fetching corpus: 0, signal 0/3960 (executing program) 2025/01/22 00:46:23 starting 8 fuzzer processes 00:46:23 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x45808}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x4, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "8bf33f4f78ccfce206f0e6f1509b003b"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2040}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) r5 = syz_io_uring_complete(0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x8804) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffff29}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4028000) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r1, 0x2, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x4000) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, r7, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x2000884) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x84, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1f}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044000}, 0x40000) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000000dbc0), 0xc) 00:46:23 executing program 1: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0x1f63, 0x8001, 0x9d4, 0x9, 0x1, "77b44f3d0e41e329"}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000080)) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x9e) r0 = fsmount(0xffffffffffffffff, 0x1, 0x6) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x30303, 0x0) syz_io_uring_setup(0x3fdd, &(0x7f0000000140)={0x0, 0xb538, 0x8, 0x1, 0x13, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000240)={0xed, "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"}) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000480)) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x124, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x124}, 0x1, 0x0, 0x0, 0x84}, 0x10) r2 = openat$incfs(r1, &(0x7f00000006c0)='.pending_reads\x00', 0x20200, 0xa2) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000700)="8f7ea858b9f67403e8a0c60496655acecfc8c59bbfaaf447fe5fa139eba1cae28ae726a2fbd154eaf8a04cdecec79ef1e774395e83fadf2757ca06b57ab0d6fd4cbaf8d3e6523942e7d64bcbb27fd8b5b3cc970b3818c0a05061dd44d28b62bec4218f642ed14b2f7111597019b90d38628a84a79c6314c3565da3bc5641f51fad7de0edda9919edeebe9c802807a2b9dfbbe9a1b547a8aaba") r3 = openat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x2001, 0x9, 0x14}, 0x18) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000840)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r4 = open(&(0x7f0000000880)='./file0\x00', 0x101000, 0x8) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f00000008c0)={0x1, 0x7, 0xd18, 0x2, 0x9, 0x796c}) r5 = fcntl$dupfd(r2, 0x0, r1) ioctl$CDROMRESUME(r5, 0x5302) 00:46:23 executing program 2: ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "45e8aad209fff84d", "58a248f3049e9e21be726361bbcdbcf3", "6098ca04", "3ff2d20110ca8a19"}, 0x28) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e23, 0xab1a, @remote, 0x6}}, 0x0, 0x0, 0x11, 0x0, "95128bb2213a4e1038195179ed6608b437b534f288018eaf54b945c587ce4652876623aef857d8c7ce5a5e9cac728d5b341c989208965a931d15c810ed97c5078548da2cab9c4f9935e516956e766d9f"}, 0xd8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000180)={0xfdc, {{0xa, 0x4e22, 0xffffffc0, @remote, 0x800}}, 0x0, 0xa, [{{0xa, 0x4e21, 0x200, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}}, {{0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, {{0xa, 0x4e24, 0xf9d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}}, {{0xa, 0x4e23, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa06}}, {{0xa, 0x4e23, 0x1, @loopback, 0x80}}, {{0xa, 0x4e22, 0x40, @local, 0xfab}}, {{0xa, 0x4e20, 0xf31c, @empty, 0x7fffffff}}, {{0xa, 0x4e24, 0x0, @mcast2, 0x8}}, {{0xa, 0x4e22, 0x15, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc000000}}, {{0xa, 0x4e23, 0xa934, @mcast1, 0x4}}]}, 0x590) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000740)=0x4) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x80001) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x94, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3f}}}}, [@NL80211_ATTR_STA_WME={0x54, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x20}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x81}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xffff}]}, 0x94}, 0x1, 0x0, 0x0, 0x4880c}, 0x40040) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/bus/clockevents', 0x400000, 0x72) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000009c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000a00)=0x2c) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a40)={0x6, {{0x2, 0x4e23, @multicast1}}, 0x0, 0x7, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e24, @private=0xa010101}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e20, @private=0xa010102}}]}, 0x410) getsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000f00)={{r0}, "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"}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x7c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x687d}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) r4 = signalfd(r2, &(0x7f0000002080)={[0x2]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000002140)) 00:46:23 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0xda, @loopback, 0x4e22, 0x2, 'nq\x00', 0x10, 0x117c, 0x58}, 0x2c) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000300)="04559c9e3dcbe76c80429441dab0412af86ae3a4c5ce6f303eaaa9e840ac9b5737c4b5807bb0a5ec6f0593764a6d7f6d21f9d831cc73a48540758f8c47ecd0f742e01a54b8cac841cc9dcecc337ff96b85d464737f246b31374b7601a7c62be5b5cbce8c8c8a61a702c742042adf9e3a2794d0e6c770c02f8494dabfc7dacd89", 0x80}, {&(0x7f0000000380)="122b4ad3c28f2ddc05f5", 0xa}, {&(0x7f00000003c0)="c8f3135275a8acaf82ed1fbe2318fa870cdc51d60e8838a52ec03148ad54969f550356c98cc6b9c7dffa0786c5aa4cae1783753c6d90ba7cbf517f4c7bea00c239784343e8f484b407ba93abbfa181a3b7d329f40e1f64e83fe0f6148360847441c3941440e1bd8a510e04d378b82d4153b2caf0156d944e388f62f0", 0x7c}, {&(0x7f0000000440)="0b08813ca074bdfe51dfa73547774e48563a98a540433b0ee3e916a5c9fc51249bd757d2f80985c4c1e18717d8052a3eb18593870b8b20cb8fc97502e70c", 0x3e}, {&(0x7f0000000480)="5c96009fe3ef5b4e60a646069bceb83bc177bf63ea2f0d0b63d598627963616ebd111bf74e63a0966e2d86f44330bc7d8411e68c38bfd5c0d16f873c7a3e04fe294c479a5d1758dbf5f62bc9c552b656fa9d321ee8b351de55b847ad4a9c4baad1de8afbb567ca185c1a8a31b1bbb5989d264eb952d198c1cd4468132822318f58a3e496e1ebf2ef6adb478acaa3e56e", 0x90}], 0x5, 0x4) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x7f, 0x1}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x84, r2, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0xf}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb9}]}, 0x84}, 0x1, 0x0, 0x0, 0x4400}, 0x4004) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000007c0), 0x40002, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000880)={0x1, &(0x7f0000000840)=[{0x27b2, 0x16, &(0x7f0000000800)="4bea1ee18a24bc0ae30e180616468d88821670225b3d", 0x1, 0x1}]}) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x128, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7085}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x89ca}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5a1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdd3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xc000}, 0x4008000) read(r1, &(0x7f0000000ac0)=""/77, 0x4d) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r1) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x74, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040004}, 0x4040010) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000cc0)={0x7, 0x7f, 0x1}, 0x7) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r4, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8d18745edcb25d9f62e0bbd166"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe4}]}, 0x2c}}, 0x408d4) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000f40)) 00:46:23 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x210440, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008800}, 0x4040000) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000180)={{r0}, 0x0, 0x2, @unused=[0x4, 0x7f, 0x7, 0x401], @subvolid=0x20}) mount$9p_fd(0x0, &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), 0x800000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@version_u}, {@cache_mmap}, {@uname={'uname', 0x3d, '\'\'/\xcf\'!::]\\]'}}, {@access_user}, {@access_uid={'access', 0x3d, 0xee00}}, {@cache_loose}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}]}}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000012c0)=0x1, 0x4) ioctl$TIOCSCTTY(r0, 0x540e, 0x8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001300), 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001340), 0x4000, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001380)={{r1}, {@val, @max}}) ioctl$TCSETA(r1, 0x5406, &(0x7f00000013c0)={0x4, 0x6, 0x8001, 0x8, 0x4, "08e2ceb838a4ea01"}) r2 = syz_io_uring_setup(0x6102, &(0x7f0000001400)={0x0, 0xe46a, 0x20, 0x1, 0x1f5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) fchdir(r2) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffff81, 0x4c}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000001600)=""/4096) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000002600)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) dup3(r3, r1, 0x80000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000002640)=0x2) 00:46:23 executing program 5: prctl$PR_GET_THP_DISABLE(0x2a) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0000020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "934039997ae10d81f249570bfd838131"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}]}, 0x48}}, 0x20040811) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x5, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1000}, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x9) semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f00000002c0)=""/96) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc10}, 0x4040) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xd2205053b932fb84}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x28}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x400c810) setxattr$trusted_overlay_opaque(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x2, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9a}}]}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1800a04c}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xc4, 0x2, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x14be}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x312782c0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x800}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xe65b}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8c}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x401}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x200000d5) r2 = openat2(r1, &(0x7f0000000ac0)='./file0/file0\x00', &(0x7f0000000b00)={0x400840, 0x58}, 0x18) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0x100, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffff001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffd}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x890}, 0x40000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r2) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x38, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x80}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xa8, 0x464, 0x101, 0x70bd27, 0x25dfdbfc, "e3ee5dd3313649e9b9364fc11d072f5d31eed881ee6a6c3747a392a82670b9a6e43bc2c70aa0ebf179c526b8000757e7175d116a72490fb23f95d341283a9ce7388db019521d52f2e3ceebf6643339ca778bb3ea5abc0d822c36ffdf32c7b80b0b430aadd93d01f8d7096bccb9c326e983920876091b511384fdf69509a3e4c4a4a755c00661eb2a2554bf473b5c97511bde27887982cedf", ["", "", "", ""]}, 0xa8}}, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r4, 0x0, 0xfa54, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008084}, 0x44) [ 89.582762] audit: type=1400 audit(1737506783.231:7): avc: denied { execmem } for pid=282 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:46:23 executing program 7: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x1, 0x25, 0x3, 0x4, 0x8}, 0x14) keyctl$assume_authority(0x10, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "2e011db2e9cf65c4fe40f83a077296d68fa23234a1e28f0856302ccf2706158eab609c8ca040832924fdbc2ee6af146881b7bf7f33e0affc8d22c5fd2b3242cd", 0x1f}, 0x48, 0xffffffffffffffff) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000140)={0x200, 0x7ff, 0x2, 0x0, 0x0, [{{}, 0x401}, {{}, 0x4}]}) prctl$PR_SET_UNALIGN(0x6, 0x1) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @broadcast}, &(0x7f0000000200)=0x8) r1 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000240)={0x1, 0x100000001}) r2 = request_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='logon\x00', r0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000340)={0x7, 'bond_slave_0\x00', {0xed}}) r3 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "6dbe919219fc7b41ccd1ec7912834f3531bd78192c4fe036617ae4dc5c72cd57350e00e7c9ea7672b281f3d0581e320a3f29966a0292b5db7892e4b7b7feb9c9", 0x15}, 0x48, r2) keyctl$reject(0x13, r3, 0x1000, 0xbd7, r2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000480)={{0xffffffffffffffff, 0x2, 0x5ac9, 0x2, 0x1000}}) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000004c0)="70c5a50a2d99451547080bb90c265fd3b602da7843acf005c9c0ac747105aa4a343a4a8ebe9f0151c1469f852e7c01d26d02756a0460e6ef96a8f81aa010a8401ef546fe747cc284a229aa225aa86e5ca38ae17b45afe35567c4d6c4a017007207d60d5040687a40c015e8b9f9fb7e6def2d3a9b41b45fb595c8275567b52a1b8b86d8b8a39b4010acd6ed8465775128ef1b0a65d53f4b79947e6ac0b5df615f769f793b236257bd3ab060c2862eff24bffc628816", 0xb5) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8040) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000680)={r2, 0x2f, 0xb9}, &(0x7f00000006c0)={'enc=', 'oaep', ' hash=', {'blake2s-128-generic\x00'}}, &(0x7f0000000740)="c8d158371927642366a70c60d16231ab6e1c6e3a45c4399fbb3ac8546ec159ac245bec93ec86a9a0a34878557f3dd2", &(0x7f0000000780)=""/185) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840), 0x100, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) 00:46:23 executing program 6: r0 = mq_open(&(0x7f0000000000)='{$\x00', 0x8c1, 0x84, &(0x7f0000000040)={0x232, 0x8, 0x3, 0x7}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = dup(r0) r2 = openat$incfs(r1, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x101) fchdir(r2) r3 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x8, 0x2) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x30c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x6}}}}, [@NL80211_ATTR_TID_CONFIG={0x88, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x101}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x24c, 0x11d, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x80, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x2}, {0x7, 0x4}, {0x5, 0x3}, {0x2, 0x9}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x0, 0x60, 0x3, 0x2, 0x48, 0x48, 0xc, 0x30, 0xb, 0x6c, 0x6c, 0x9, 0x36, 0x18, 0x1, 0x65, 0x3, 0x3, 0x36, 0x5, 0x60, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x1, 0x30, 0x51]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x1}, {}, {0x6, 0x8}, {0x4, 0xa}, {0x0, 0xa}, {0x7, 0xa}, {0x3, 0x9}, {0x7, 0x9}, {0x2, 0x8}, {0x0, 0xa}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x9, 0x5, 0x2, 0x30, 0x18, 0xc, 0x48, 0x3, 0x60, 0x5, 0x4, 0x18, 0x6c, 0x2, 0xb, 0x0, 0x10, 0x1b, 0x36, 0x60, 0x70, 0xb, 0x5, 0x2, 0x59, 0x1b, 0x9, 0x5, 0x30]}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x150, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x110, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x2}, {0x5, 0x8}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x5}, {0x1}, {0x2, 0x7}, {0x3, 0x2}, {0x3, 0x2}, {0x2, 0x8}, {0x6, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x3, 0x9}, {0x2, 0x1}, {0x5, 0x9}, {0x1}, {0x4, 0x2}, {0x2}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x1}, {0x6, 0x8}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x4}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x6}, {0x7, 0x3}, {0x2}, {0x7, 0x8}, {0x1, 0x1}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0xa}, {0x5, 0x9}, {0x6, 0x7}, {0x2, 0x4}, {0x1, 0x9}, {0x4, 0x8}, {0x2, 0x7}, {0x4, 0xa}, {0x1}, {0x6, 0x8}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0xa}, {0x7}, {0x7}, {0x2, 0x8}, {0x0, 0x9}, {0x5, 0x7}, {0x6, 0x3}, {}, {0x4, 0x9}, {0x3, 0x8}, {0x2, 0x7}, {0x4, 0x1}, {0x3, 0xa}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x4, 0x36, 0x1b, 0x36]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x6}, {0x6}, {0x5, 0xa}, {0x5, 0x3}, {0x6, 0x9}, {0x1, 0x6}, {0x2, 0x6}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x4, 0x1b, 0x6c, 0x1b, 0x6, 0x9, 0x3, 0x16, 0x4, 0xe, 0x9, 0x48, 0x4, 0x24, 0x3, 0x48, 0x36]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x5, 0x48, 0x12]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x8}, {0x6, 0x1}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x3f3a, 0x7fff, 0x9, 0x7, 0x1ff, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x200, 0x4, 0x7, 0x3, 0x8, 0x9, 0xff01]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x3, 0x7, 0xdc, 0xfff, 0x8001, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x400, 0x5, 0x29, 0x2, 0x7, 0x1000]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x3, 0x4, 0x6a, 0x12, 0x12, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8e8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x75}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7a}]}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r6 = syz_open_dev$vcsn(&(0x7f0000000680), 0x2, 0x660640) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000006c0)={0x101, {{0xa, 0x4e24, 0x100, @private2, 0x7}}, 0x0, 0x6, [{{0xa, 0x4e23, 0x0, @remote, 0x5}}, {{0xa, 0x4e24, 0x0, @mcast1, 0xfff}}, {{0xa, 0x4e20, 0x0, @local, 0x9}}, {{0xa, 0x4e23, 0x0, @private2, 0x7f}}, {{0xa, 0x4e23, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x9}}, {{0xa, 0x4e21, 0x38f, @local, 0x4e}}]}, 0x390) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f0000000bc0)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c00)='fdinfo/4\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000c40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r4, @out_args}, '.\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002580)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000002680)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x44) [ 91.067599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.071385] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.072626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.080031] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.083841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.085949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.088927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.096363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.102817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.156270] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.163014] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.166985] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.168700] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.173122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.174159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.181245] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.186766] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.187106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.198110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.210307] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.214861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.216801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.219112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.221759] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.246606] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.249222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.262254] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.268124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.269396] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.276416] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.282924] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.284976] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.292177] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.294069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.298988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.307083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.309297] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.316763] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.318017] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.325030] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.326678] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.327555] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.336762] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.338546] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.349806] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.353133] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.353203] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.356185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.186592] Bluetooth: hci1: command tx timeout [ 93.249876] Bluetooth: hci5: command tx timeout [ 93.313611] Bluetooth: hci3: command tx timeout [ 93.377584] Bluetooth: hci7: command tx timeout [ 93.377910] Bluetooth: hci0: command tx timeout [ 93.442713] Bluetooth: hci4: command tx timeout [ 93.443007] Bluetooth: hci2: command tx timeout [ 93.443165] Bluetooth: hci6: command tx timeout [ 95.233879] Bluetooth: hci1: command tx timeout [ 95.297545] Bluetooth: hci5: command tx timeout [ 95.362260] Bluetooth: hci3: command tx timeout [ 95.427782] Bluetooth: hci0: command tx timeout [ 95.429552] Bluetooth: hci7: command tx timeout [ 95.489701] Bluetooth: hci4: command tx timeout [ 95.489874] Bluetooth: hci6: command tx timeout [ 95.490038] Bluetooth: hci2: command tx timeout [ 97.281599] Bluetooth: hci1: command tx timeout [ 97.345795] Bluetooth: hci5: command tx timeout [ 97.410117] Bluetooth: hci3: command tx timeout [ 97.474501] Bluetooth: hci7: command tx timeout [ 97.474537] Bluetooth: hci0: command tx timeout [ 97.537644] Bluetooth: hci2: command tx timeout [ 97.537769] Bluetooth: hci6: command tx timeout [ 97.537888] Bluetooth: hci4: command tx timeout [ 99.329577] Bluetooth: hci1: command tx timeout [ 99.393582] Bluetooth: hci5: command tx timeout [ 99.458055] Bluetooth: hci3: command tx timeout [ 99.521873] Bluetooth: hci7: command tx timeout [ 99.522397] Bluetooth: hci0: command tx timeout [ 99.586528] Bluetooth: hci4: command tx timeout [ 99.586733] Bluetooth: hci6: command tx timeout [ 99.586892] Bluetooth: hci2: command tx timeout [ 150.895510] syz-executor.0 (290) used greatest stack depth: 24064 bytes left [ 151.151244] [ 151.151499] ====================================================== [ 151.152104] WARNING: possible circular locking dependency detected [ 151.152708] 6.13.0-next-20250121 #1 Not tainted [ 151.153178] ------------------------------------------------------ [ 151.153788] kworker/u8:0/11 is trying to acquire lock: [ 151.154310] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.155411] [ 151.155411] but task is already holding lock: [ 151.156006] ffff8880371f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 151.163473] [ 151.163473] which lock already depends on the new lock. [ 151.163473] [ 151.168693] [ 151.168693] the existing dependency chain (in reverse order) is: [ 151.170302] [ 151.170302] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 151.171777] __mutex_lock+0x13d/0xb50 [ 151.172796] wiphy_register+0x1b2e/0x25d0 [ 151.173848] ieee80211_register_hw+0x23a4/0x3d60 [ 151.174943] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 151.176261] init_mac80211_hwsim+0x389/0x870 [ 151.177465] do_one_initcall+0xf9/0x640 [ 151.178561] kernel_init_freeable+0x53d/0x7a0 [ 151.179782] kernel_init+0x1e/0x2d0 [ 151.180757] ret_from_fork+0x48/0x80 [ 151.181746] ret_from_fork_asm+0x1a/0x30 [ 151.182863] [ 151.182863] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 151.184310] __lock_acquire+0x29fd/0x4580 [ 151.185418] lock_acquire+0x19b/0x520 [ 151.186439] __mutex_lock+0x13d/0xb50 [ 151.187510] unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.188932] unregister_netdevice_queue+0x224/0x2e0 [ 151.190001] _cfg80211_unregister_wdev+0x57b/0x700 [ 151.191129] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 151.192192] ieee80211_unregister_hw+0x55/0x3a0 [ 151.193270] hwsim_exit_net+0x3a0/0x730 [ 151.194253] ops_exit_list+0xb3/0x180 [ 151.195159] cleanup_net+0x546/0xad0 [ 151.196026] process_one_work+0x8ee/0x1a10 [ 151.196992] worker_thread+0x674/0xe70 [ 151.197900] kthread+0x3ab/0x720 [ 151.198706] ret_from_fork+0x48/0x80 [ 151.199545] ret_from_fork_asm+0x1a/0x30 [ 151.200479] [ 151.200479] other info that might help us debug this: [ 151.200479] [ 151.201897] Possible unsafe locking scenario: [ 151.201897] [ 151.202982] CPU0 CPU1 [ 151.203842] ---- ---- [ 151.204671] lock(&rdev->wiphy.mtx); [ 151.205464] lock(rtnl_mutex); [ 151.206602] lock(&rdev->wiphy.mtx); [ 151.207834] lock(rtnl_mutex); [ 151.208532] [ 151.208532] *** DEADLOCK *** [ 151.208532] [ 151.209654] 4 locks held by kworker/u8:0/11: [ 151.210578] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 151.212609] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 151.214545] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 151.216365] #3: ffff8880371f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 151.218551] [ 151.218551] stack backtrace: [ 151.219466] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250121 #1 [ 151.221004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 151.222594] Workqueue: netns cleanup_net [ 151.223444] Call Trace: [ 151.223949] [ 151.224396] dump_stack_lvl+0xca/0x120 [ 151.225216] print_circular_bug+0x47b/0x750 [ 151.226091] check_noncircular+0x2e9/0x3c0 [ 151.227008] ? __pfx_check_noncircular+0x10/0x10 [ 151.228011] ? hlock_class+0x4e/0x130 [ 151.228794] ? mark_lock+0xac/0xed0 [ 151.229570] ? srso_return_thunk+0x5/0x5f [ 151.230407] ? timerqueue_del+0x83/0x150 [ 151.231329] ? lockdep_lock+0xba/0x1b0 [ 151.232273] ? __pfx_lockdep_lock+0x10/0x10 [ 151.233398] __lock_acquire+0x29fd/0x4580 [ 151.234368] ? __pfx___lock_acquire+0x10/0x10 [ 151.235424] ? lock_release+0x20f/0x6f0 [ 151.236349] ? __pfx_lock_release+0x10/0x10 [ 151.237349] lock_acquire+0x19b/0x520 [ 151.238237] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.239666] ? __pfx_lock_acquire+0x10/0x10 [ 151.240648] ? srso_return_thunk+0x5/0x5f [ 151.241591] ? lock_release+0x20f/0x6f0 [ 151.242455] ? srso_return_thunk+0x5/0x5f [ 151.243387] ? lock_is_held_type+0x9e/0x120 [ 151.244365] ? srso_return_thunk+0x5/0x5f [ 151.245307] __mutex_lock+0x13d/0xb50 [ 151.246217] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.247533] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.248817] ? srso_return_thunk+0x5/0x5f [ 151.249743] ? synchronize_rcu_expedited+0x38a/0x420 [ 151.250752] ? __pfx___mutex_lock+0x10/0x10 [ 151.251617] ? __pfx_autoremove_wake_function+0x10/0x10 [ 151.252611] ? srso_return_thunk+0x5/0x5f [ 151.253428] ? kasan_quarantine_put+0x84/0x1e0 [ 151.254317] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 151.255162] ? srso_return_thunk+0x5/0x5f [ 151.255976] unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.257180] ? __virt_addr_valid+0x2e8/0x5d0 [ 151.258256] ? __pfx_lock_release+0x10/0x10 [ 151.259301] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 151.260723] ? find_held_lock+0x2c/0x110 [ 151.261679] ? srso_return_thunk+0x5/0x5f [ 151.262633] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 151.263772] ? srso_return_thunk+0x5/0x5f [ 151.264718] ? lock_release+0x20f/0x6f0 [ 151.265498] ? __pfx_lock_release+0x10/0x10 [ 151.266506] ? srso_return_thunk+0x5/0x5f [ 151.267462] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 151.268657] ? srso_return_thunk+0x5/0x5f [ 151.269677] unregister_netdevice_queue+0x224/0x2e0 [ 151.270811] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 151.272072] ? up_write+0x195/0x520 [ 151.272979] _cfg80211_unregister_wdev+0x57b/0x700 [ 151.274137] ? srso_return_thunk+0x5/0x5f [ 151.275180] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 151.276357] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 151.277637] ? srso_return_thunk+0x5/0x5f [ 151.278631] ? srso_return_thunk+0x5/0x5f [ 151.279634] ? synchronize_rcu+0x1ff/0x260 [ 151.280613] ieee80211_unregister_hw+0x55/0x3a0 [ 151.281683] hwsim_exit_net+0x3a0/0x730 [ 151.282611] ? __pfx_hwsim_exit_net+0x10/0x10 [ 151.283691] ? srso_return_thunk+0x5/0x5f [ 151.284708] ? netdev_run_todo+0x788/0x1040 [ 151.285731] ? srso_return_thunk+0x5/0x5f [ 151.286770] ? __pfx_hwsim_exit_net+0x10/0x10 [ 151.287835] ops_exit_list+0xb3/0x180 [ 151.288747] cleanup_net+0x546/0xad0 [ 151.289671] ? __pfx_cleanup_net+0x10/0x10 [ 151.290728] process_one_work+0x8ee/0x1a10 [ 151.291822] ? __pfx_lock_acquire+0x10/0x10 [ 151.292814] ? __pfx_process_one_work+0x10/0x10 [ 151.293917] ? srso_return_thunk+0x5/0x5f [ 151.294923] ? move_linked_works+0x172/0x270 [ 151.295968] ? srso_return_thunk+0x5/0x5f [ 151.296980] ? assign_work+0x196/0x240 [ 151.297940] worker_thread+0x674/0xe70 [ 151.298903] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 151.300139] ? __pfx_worker_thread+0x10/0x10 [ 151.301206] kthread+0x3ab/0x720 [ 151.302062] ? __pfx_kthread+0x10/0x10 [ 151.303023] ? srso_return_thunk+0x5/0x5f [ 151.304038] ? finish_task_switch.isra.0+0x206/0x840 [ 151.305292] ? __pfx_kthread+0x10/0x10 [ 151.306284] ret_from_fork+0x48/0x80 [ 151.307192] ? __pfx_kthread+0x10/0x10 [ 151.308181] ret_from_fork_asm+0x1a/0x30 [ 151.309239] [ 153.245192] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.246174] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.249123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.254826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.257577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.258359] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.260174] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.268655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.269756] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.272703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.273256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.274099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.309137] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.310150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.315602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.316548] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.321716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.333044] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.342599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.347630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.348681] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.349704] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.350931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.352052] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.353650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.356040] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.357599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.358859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.360227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.362115] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.363236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.364872] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.366875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.367189] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.368586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.371637] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.375000] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.375981] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.395714] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.398867] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.399669] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.422775] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.429741] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.432033] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.436724] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.480739] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.523337] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.530332] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.329603] Bluetooth: hci1: command tx timeout [ 155.329681] Bluetooth: hci0: command tx timeout [ 155.393519] Bluetooth: hci3: command tx timeout [ 155.457547] Bluetooth: hci2: command tx timeout [ 155.523506] Bluetooth: hci6: command tx timeout [ 155.524076] Bluetooth: hci5: command tx timeout [ 155.524151] Bluetooth: hci4: command tx timeout [ 155.649507] Bluetooth: hci7: command tx timeout [ 157.378497] Bluetooth: hci1: command tx timeout [ 157.378573] Bluetooth: hci0: command tx timeout [ 157.441504] Bluetooth: hci3: command tx timeout [ 157.505584] Bluetooth: hci2: command tx timeout [ 157.569540] Bluetooth: hci6: command tx timeout [ 157.570111] Bluetooth: hci4: command tx timeout [ 157.570180] Bluetooth: hci5: command tx timeout [ 157.697694] Bluetooth: hci7: command tx timeout [ 159.425558] Bluetooth: hci0: command tx timeout [ 159.425651] Bluetooth: hci1: command tx timeout [ 159.489518] Bluetooth: hci3: command tx timeout [ 159.553680] Bluetooth: hci2: command tx timeout [ 159.618566] Bluetooth: hci6: command tx timeout [ 159.618702] Bluetooth: hci5: command tx timeout [ 159.619142] Bluetooth: hci4: command tx timeout [ 159.745546] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:47:25 Registers: info registers vcpu 0 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283eba5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095deb28 R8 =0000000000000001 R9 =ffffed10012bbd55 R10=0000000000000069 R11=3038383866666666 R12=0000000000000069 R13=0000000000000001 R14=ffff888008fea056 R15=ffff8880095dee28 RIP=ffffffff8283ebfd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c0078f9010 CR3=000000000ca72000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000001000000070000563cacc9f8d0 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000563cacc9f8d00000563cacca2c10 XMM06=0000563cacc9f8900000000200000003 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800eb33780 RCX=ffffffff81429a0f RDX=ffff88800eb33780 RSI=ffffffff81429a18 RDI=0000000000000005 RBP=0000000000200000 RSP=ffff88800ee0fda8 R8 =0000000000000000 R9 =ffffed1001d70d80 R10=0000000000200000 R11=0000000000000001 R12=ffff88807a70dff9 R13=ffffffff886539a8 R14=ffff88800eb33780 R15=0000000000000086 RIP=ffffffff84ab2f40 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f938764d3a0 CR3=0000000009802000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=000055eb92cd6b00000055eb92cac180 XMM05=00000000000000000000000000000000 XMM06=000000000000006563697665642e3269 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000