[ 61.679983] audit: type=1400 audit(1737665574.047:6): avc: denied { checkpoint_restore } for pid=216 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:1358' (ECDSA) to the list of known hosts. 2025/01/23 20:53:01 fuzzer started 2025/01/23 20:53:01 dialing manager at localhost:45511 syzkaller login: [ 69.490454] cgroup: Unknown subsys name 'net' [ 69.580481] cgroup: Unknown subsys name 'cpuset' [ 69.613497] cgroup: Unknown subsys name 'rlimit' [ 75.537974] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 20:53:18 syscalls: 2217 2025/01/23 20:53:18 code coverage: enabled 2025/01/23 20:53:18 comparison tracing: enabled 2025/01/23 20:53:18 extra coverage: enabled 2025/01/23 20:53:18 setuid sandbox: enabled 2025/01/23 20:53:18 namespace sandbox: enabled 2025/01/23 20:53:18 Android sandbox: enabled 2025/01/23 20:53:18 fault injection: enabled 2025/01/23 20:53:18 leak checking: enabled 2025/01/23 20:53:18 net packet injection: enabled 2025/01/23 20:53:18 net device setup: enabled 2025/01/23 20:53:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 20:53:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 20:53:18 USB emulation: enabled 2025/01/23 20:53:18 hci packet injection: enabled 2025/01/23 20:53:18 wifi device emulation: enabled 2025/01/23 20:53:18 802.15.4 emulation: enabled 2025/01/23 20:53:18 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 20:53:21 starting 8 fuzzer processes 20:53:21 executing program 1: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x900000) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/187, 0xbb}], 0x2, &(0x7f00000011c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001240)=@abs, 0x6e, &(0x7f0000003480)=[{&(0x7f00000012c0)=""/93, 0x5d}, {&(0x7f0000001340)=""/26, 0x1a}, {&(0x7f0000001380)=""/65, 0x41}, {&(0x7f0000001400)=""/17, 0x11}, {&(0x7f0000001440)=""/37, 0x25}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x7, &(0x7f0000003500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x2, 0x0, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000003680), 0x640, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000036c0)={{0x1, 0x1, 0x18, r5, {0x49}}, './file0\x00'}) r6 = syz_open_dev$hidraw(&(0x7f0000003700), 0x2, 0x82000) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000003740)={0x3, "43d725903fdbb03ac287f349afb804e30b74c05f8f606c0194b7ab6fcdd892cca348c955b9e011be8c2852b16c4cb56e87f07d67ebf61d4d614b0493c8c74f98"}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000037c0)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x5310, &(0x7f0000003bc0)={@lba=0x54dd, 0x1, 0x1}) r7 = syz_open_dev$vcsa(&(0x7f0000003c00), 0x100, 0x800) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000003c40)={0x100, @tick=0x100, 0x1, {0x3f, 0x2}, 0x2c, 0x0, 0xff}) r8 = openat2(0xffffffffffffffff, &(0x7f0000003c80)='./file0\x00', &(0x7f0000003cc0)={0x1a1080, 0x100, 0x4}, 0x18) ioctl$TIOCGLCKTRMIOS(r8, 0x5456, &(0x7f0000003d00)={0x7, 0x6, 0x6, 0x5, 0xf, "772603894be3e91d9dc624488c65d803ebffd7"}) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000003d40), &(0x7f0000003d80)) pipe2$9p(&(0x7f0000003dc0)={0xffffffffffffffff}, 0x80000) ioctl$AUTOFS_IOC_SETTIMEOUT(r9, 0x80049367, &(0x7f0000003e00)=0x5) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000003e40)={0x5c2, "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"}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000004440)={0x0, @aes256, 0x0, @desc3}) 20:53:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x14}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000800) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0xc, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x4000004) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x91}, 0x8000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000840)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000880)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0xc000000) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r7, 0x942e, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x345}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3f}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) 20:53:21 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMEJECT(r1, 0x5309) r2 = fspick(r0, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'veth0_to_team\x00', 0x5}) ioctl$SNAPSHOT_FREE(r1, 0x3305) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @private=0xa010102}, 0xc) r3 = socket(0x25, 0x5, 0x401) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000100)={{{@in=@initdev, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000200)=0xe8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, 0x464, 0x8, 0x70bd25, 0x25dfdbff, "c4a11d815835d7bff5be86faa1bd71a5add55f0b8515775df7a7a992dccf29814833e2ca94838a1bf0f59c23b731c26073ce3bcf15bc13ee73b9f2865ed86c53ee980cbf2284eb8fbc485b98f1ce25953063020dec20b46f1ba815fd1f44145c73fdaf9f7d91043f514d49091151367280ec5dc0a75b0791decfdc906f26444b87b2e969789487c504b7839f5f03b3a536f16a174d129642d27040e53e3b90980b8d52babbf7fe67b3096cb05685638cb652b3b36ba390e58ed24fd7a1a071", [""]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004002) r5 = openat(r0, &(0x7f0000000440)='./file0\x00', 0xc0, 0x2) tee(r5, r3, 0x9, 0x2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x40000, 0x0) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000004c0), 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r8, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000006c0)={@mcast1, 0x200, 0x1, 0xff, 0x5, 0x400, 0x100}, 0x20) 20:53:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20044050) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:pinentry_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x3f}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4040}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x70}, 0x1, 0x0, 0x0, 0x24040105}, 0x1000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xae}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, r7, 0xc, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x6a}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'vcan0\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0xc000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000c40)='./file0/file0\x00', &(0x7f0000000c80), &(0x7f0000000cc0)={'U-', 0xc49}, 0x16, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000001200)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d80)={0x414, r9, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x60, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x1a8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x94, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x124, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe02}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0xa0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0xc0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7ff}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x890}, 0x40004) [ 89.056952] audit: type=1400 audit(1737665601.425:7): avc: denied { execmem } for pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:53:21 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000000)={0x1000, 0x2, 0x0, 'queue1\x00', 0x7}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x453, 0x8, 0x70bd27, 0x25dfdbfc, "07428f8d0f12183df992362ad436bae66317e76b5326e552b94561dd3a59332855b4c8eecfb267f25fd3e531", ["", "", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8001) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20004034) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x50a00, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x160, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x160}, 0x1, 0x0, 0x0, 0x14}, 0x40000) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff}, 0x80800) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000600)={0x81, 0x2475}) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000640), 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x1f, 0x4, 0x20, @dev={0xfe, 0x80, '\x00', 0x17}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa0, 0x7, 0x2, 0x401}}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000024}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffff17}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x94d6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4008050) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0xcfca, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x746, 0x3}}, @NFULA_CFG_MODE={0xa, 0x2, {0x1000}}]}, 0x48}, 0x1, 0x0, 0x0, 0x41c0}, 0x8081) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x7f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40850}, 0x8000) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000b00)={[0x80000001]}, 0x8, 0x80800) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r3) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x100, r9, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0xea, 0x3, "d8087d4d992fa22a8872a9bc94db0b861ed53ab9f2082d27faa40c4ed8d390a59d88103a73eab2d7e3504e845c990206007a8e27a655003f4442dd513eebfacd93c881a4b06d09c7541790d2dfb49ee8146f490bc9fb83492786b0e5aba76605a033728d4b67c330524924c01b78a475ca70cb2bf45bf2f64cf195134ea684270cbd35c2abdb37b9a341a1bed1d4e6013a3bff81d26abbacf855612f03a1be4753e78386614b8b38edd5e49394c33cf7787ea9208f58c3569b231aa1e606455c227db4d916750a7d793c0941bb64e63216839a23e0ad6e73ac7d21d61d3c33eb6b881a09f12b"}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090) 20:53:21 executing program 5: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x800, 0x1, 0x6, 0x6, 0x7}, 0xc) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000040)={0x3, 0x2, "8ede"}) fdatasync(0xffffffffffffffff) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x10080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x504, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000005) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xffff, 0x4a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c084}, 0x2404c054) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000048}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044821}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000400)=0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000440), 0x0, 0x200d40) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f0000000480)={r0, r0, 0x400}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000500)={0x0, @multicast2, @local}, &(0x7f0000000540)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000640)={&(0x7f00000004c0), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x68}}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x7c, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4040840) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000900)) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000980), r3) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x49b, 0x81, 0x81, 0x3, 0x1f]}]}, 0x2c}}, 0x50) 20:53:21 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000000)={0x4, 0x9, 0x9, 0xc0}) r1 = dup(r0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @sack_perm, @window={0x3, 0xfffa, 0x1}, @timestamp, @mss={0x2, 0x80000000}, @window={0x3, 0x4, 0x98e}, @mss={0x2, 0x40}], 0x7) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x1, 0x0, 0x8}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x0, @can, @qipcrtr={0x2a, 0x4, 0xffff}, @rc={0x1f, @any, 0x20}, 0x40, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000240)='veth0_vlan\x00', 0x6, 0x5, 0x9}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x7de19b32cf51e33d}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xc0, r4, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4938127eb7f961d6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4eacfbb3dcd0a51e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ca863421a43ff78f80814cc0470410b1"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="706b3f51870a6f51df4019b116170ee4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ac2cf3171c9dd47c5503586b01c8dd9d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6949029e7f83954974e64f3ab07eaa8cbeea73ed7762b450cd47e12cd5e8e863"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="43d3faff6fdb66bcb4e337dcf0935bbe"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000540)={0x3, 0x3, 0x23, &(0x7f0000000500)=""/35}) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3fb, 0x100, 0x70bd29, 0x25dfdbfd, "", ["", "", ""]}, 0x10}}, 0x20000011) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000680)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x8, 0x1f, 0x72, 0x8, 0x4bc8, 0x4b}, {0x200, 0x6, 0x401, 0x43f1, 0x1, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r6 = openat$incfs(r1, &(0x7f00000008c0)='.log\x00', 0x220202, 0x80) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfff, 0xff}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c007}, 0x8050) write$binfmt_aout(r1, &(0x7f0000000a40)={{0x107, 0x1, 0xd7, 0x34, 0x1b1, 0x3f, 0x3b6, 0x1}, "f7ffa5e8f7760624f5d7332003ba5f1f22c87be42ecf17287d3614c9bae06eac1fdd9df14797edfdb2d231d33b6769a68caa7ffe0595938afc030db30fc6162550e4b75f20edf942f8e4e4e17c8ad1a1a9701b300f3b30ed80784f808fb554f2ed1788a4b8fc9916ab81f6d48fdbcbc51ea76572cc836c282e1a0c8050892650ed27a49e5117c3b967121e12fb981bf718385ae4fd1eb3fe354b3ab7e4f71d1e93ec55353909263db102aa9699656727ef3de84b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad4) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0x94, r4, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3f, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x41) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f00000016c0)={'batadv_slave_0\x00', 0x374b}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0xa8, r4, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1a86e75430600f45fc9773af2a34f15107feedd246c8c839"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4884}, 0x20000080) 20:53:21 executing program 7: ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x5, 0x8}) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x80000, 0x84) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x1) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0xcf) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x869}}, './file0\x00'}) read$usbmon(r1, &(0x7f0000000140)=""/116, 0x74) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000200)={0x5, 0x10, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000240)) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x200, 0x404002) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000002c0)={0x14, 0x34, 0x8, 0x10, 0x5, 0x63e06c86, 0x0, 0x95, 0xffffffffffffffff}) lseek(r0, 0x3ff, 0x4) r3 = dup2(0xffffffffffffffff, r0) pidfd_getfd(r3, r2, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r5 = signalfd4(r4, &(0x7f0000000340)={[0x7]}, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f00000003c0)={0xb, 0xe, 0xf, 0x1c, 0x8, 0xffff, 0x3, 0x85, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x428, 0x3f4, 0x100, 0x70bd29, 0x25dfdbfd, {0x4, 0x0, 0x2f, [0x800, 0x99e2, 0x2, 0x5, 0x5e4c, 0x2c, 0x800, 0x7f, 0x9a, 0x0, 0x40, 0x17f, 0x8000, 0x70cc45cd, 0x63da, 0x5, 0x2, 0x101, 0x9, 0x44, 0x9, 0x3, 0x6, 0xbb07, 0x4, 0xffffff1c, 0x2, 0xff, 0x4, 0x7, 0x599, 0xffffffff, 0xaf6, 0x5, 0x8, 0x0, 0x1df, 0x7, 0x8, 0xfffeffff, 0x642, 0x84b, 0x7, 0x0, 0x2, 0x100, 0xffff, 0x100, 0x800, 0x3, 0x3767, 0x4, 0x7, 0x0, 0x9, 0x6, 0x3ff, 0x1cb, 0x4, 0xff, 0x2, 0x8000, 0x37, 0x2], [0xfffffffa, 0x8, 0x15, 0x3, 0x7, 0x9, 0x20, 0x8, 0x80, 0x4, 0x7fffffff, 0x400, 0x7, 0x20, 0x10000, 0x7, 0x1fc9eaa9, 0x7088, 0x2, 0x1, 0x64f, 0x3, 0x3ff, 0xe1, 0x5, 0x7, 0x3, 0x7, 0x1, 0x6, 0xffffff51, 0xfffffff8, 0x1, 0x40000, 0x7f, 0x54458b9a, 0x5, 0x2, 0x5, 0xb34, 0x4, 0x5, 0x0, 0x7, 0x4, 0xe7c5, 0x1, 0x9, 0x4, 0xffffffff, 0x0, 0x4f, 0x8000, 0x9, 0x7fffffff, 0x6, 0x4, 0xffff9121, 0x5, 0x7, 0x1ff, 0x7fff, 0xff, 0x2], [0x7f, 0x6, 0x8, 0x0, 0xfffffd6d, 0x400, 0x6, 0x5, 0xfffffff8, 0x4, 0x7, 0x2, 0x4, 0x7, 0x6, 0x8, 0x8001, 0x1f, 0x190, 0x0, 0x65, 0x0, 0x200000, 0x2, 0x3a, 0x7, 0x4, 0x5, 0x2d0, 0xfffffffd, 0x2, 0x1, 0xfffffe00, 0x6, 0x8, 0xcb, 0x1, 0x1, 0x5, 0x7, 0xeec, 0x1, 0x101, 0x7, 0x200, 0x9, 0x1, 0x0, 0x6, 0x80000001, 0x2, 0x0, 0x7, 0x571b, 0x9, 0x0, 0x100, 0x0, 0x5, 0x1b, 0x3, 0x80, 0x7fffffff, 0xfffffff9], [0x7, 0x10001, 0x6, 0xc92, 0x34, 0x7, 0x688, 0xf9f4f5f, 0x1, 0x5, 0x6, 0x6, 0x7, 0xffffffff, 0x80000000, 0x1, 0xfffffc01, 0x4, 0x88, 0x1, 0x4, 0x0, 0x5, 0x4, 0x4, 0xfff, 0x8, 0xffff00ac, 0x7, 0x29, 0x401, 0x7fffffff, 0x2e, 0x0, 0x0, 0x5, 0x1, 0xe78, 0x5, 0x80000001, 0x0, 0xfffffffa, 0xf05b, 0x7, 0x4, 0x4, 0x448e, 0x4, 0x1, 0x8000, 0x98, 0x400, 0x0, 0x3ff, 0x6, 0x40, 0xc7, 0x9, 0x8, 0x452, 0x5, 0x0, 0x5, 0x59], 0x5, ['\x00', '-\x00', '\x00', '\x00']}, [""]}, 0x428}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000900)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x1, 0x9, 0x5, 0x0, 0x0, {0xb}, [@NFCTH_QUEUE_NUM={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24004800) [ 90.481492] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.486247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.488781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.490739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.492789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.497604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.499329] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.504426] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.505782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.507570] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.509369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.518988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.521866] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.523747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.531655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.543488] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.555701] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.560295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.604040] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.608431] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.612339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.628268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.636937] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.639875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.665882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.672892] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.676646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.688774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.694585] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.698525] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.749041] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.759460] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.770363] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.774274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.782544] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.788009] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.791388] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.794487] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.797525] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.802792] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.819435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.830330] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.831762] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.833929] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.837671] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.858729] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.862262] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.868424] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.567875] Bluetooth: hci0: command tx timeout [ 92.569429] Bluetooth: hci1: command tx timeout [ 92.631194] Bluetooth: hci2: command tx timeout [ 92.695472] Bluetooth: hci3: command tx timeout [ 92.759127] Bluetooth: hci4: command tx timeout [ 92.887242] Bluetooth: hci5: command tx timeout [ 92.950155] Bluetooth: hci7: command tx timeout [ 92.950770] Bluetooth: hci6: command tx timeout [ 94.616124] Bluetooth: hci1: command tx timeout [ 94.616636] Bluetooth: hci0: command tx timeout [ 94.678201] Bluetooth: hci2: command tx timeout [ 94.742253] Bluetooth: hci3: command tx timeout [ 94.806146] Bluetooth: hci4: command tx timeout [ 94.935932] Bluetooth: hci5: command tx timeout [ 94.998213] Bluetooth: hci7: command tx timeout [ 94.998756] Bluetooth: hci6: command tx timeout [ 96.663147] Bluetooth: hci1: command tx timeout [ 96.663624] Bluetooth: hci0: command tx timeout [ 96.726162] Bluetooth: hci2: command tx timeout [ 96.790157] Bluetooth: hci3: command tx timeout [ 96.854120] Bluetooth: hci4: command tx timeout [ 96.982160] Bluetooth: hci5: command tx timeout [ 97.046370] Bluetooth: hci6: command tx timeout [ 97.046888] Bluetooth: hci7: command tx timeout [ 98.710252] Bluetooth: hci1: command tx timeout [ 98.710759] Bluetooth: hci0: command tx timeout [ 98.774146] Bluetooth: hci2: command tx timeout [ 98.838436] Bluetooth: hci3: command tx timeout [ 98.902153] Bluetooth: hci4: command tx timeout [ 99.030370] Bluetooth: hci5: command tx timeout [ 99.094598] Bluetooth: hci7: command tx timeout [ 99.095165] Bluetooth: hci6: command tx timeout [ 152.951790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.953203] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.954926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.956864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.958382] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.961129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.148382] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.151299] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.152940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.154600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.155639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.159373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.161177] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.163915] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.163960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.167467] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.168681] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.170015] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.210127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.221580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.225317] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.231027] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.239735] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.241240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.267016] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.273811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.281536] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.286862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.291588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.292644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.293109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.299444] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.311116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.314576] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.316414] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.318562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.320748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.339378] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.343477] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.344956] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.350538] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.351818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.362426] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.363621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.375484] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.381481] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.382582] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.384236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.966214] Bluetooth: hci0: command tx timeout [ 155.222273] Bluetooth: hci2: command tx timeout [ 155.223773] Bluetooth: hci1: command tx timeout [ 155.286226] Bluetooth: hci3: command tx timeout [ 155.414227] Bluetooth: hci4: command tx timeout [ 155.478570] Bluetooth: hci6: command tx timeout [ 155.479688] Bluetooth: hci7: command tx timeout [ 155.542314] Bluetooth: hci5: command tx timeout [ 157.014166] Bluetooth: hci0: command tx timeout [ 157.270235] Bluetooth: hci2: command tx timeout [ 157.270813] Bluetooth: hci1: command tx timeout [ 157.334213] Bluetooth: hci3: command tx timeout [ 157.464099] Bluetooth: hci4: command tx timeout [ 157.526196] Bluetooth: hci6: command tx timeout [ 157.526741] Bluetooth: hci7: command tx timeout [ 157.591130] Bluetooth: hci5: command tx timeout [ 159.063075] Bluetooth: hci0: command tx timeout [ 159.318259] Bluetooth: hci2: command tx timeout [ 159.318897] Bluetooth: hci1: command tx timeout [ 159.382194] Bluetooth: hci3: command tx timeout [ 159.510163] Bluetooth: hci4: command tx timeout [ 159.574179] Bluetooth: hci7: command tx timeout [ 159.574709] Bluetooth: hci6: command tx timeout [ 159.638135] Bluetooth: hci5: command tx timeout [ 161.110151] Bluetooth: hci0: command tx timeout [ 161.366149] Bluetooth: hci1: command tx timeout [ 161.366607] Bluetooth: hci2: command tx timeout [ 161.430388] Bluetooth: hci3: command tx timeout [ 161.558170] Bluetooth: hci4: command tx timeout [ 161.622249] Bluetooth: hci6: command tx timeout [ 161.622742] Bluetooth: hci7: command tx timeout [ 161.686167] Bluetooth: hci5: command tx timeout [ 215.013678] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.015392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.016924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.024500] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.027300] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.030728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.229697] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.233649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.234705] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.243156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.245666] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.246850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.396985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.403256] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.406044] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.407538] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.408455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.423979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.424783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.438435] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.443528] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.457793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.462184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.462997] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.463913] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.465548] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.468774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.476665] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.485365] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.492242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.496314] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.497658] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.498968] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.503483] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.520414] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.539585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.564408] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.567866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.602934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.604374] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.611994] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.622558] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.625007] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.627406] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.631228] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.631603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.633899] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.635247] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.110134] Bluetooth: hci0: command tx timeout [ 217.303176] Bluetooth: hci1: command tx timeout [ 217.561186] Bluetooth: hci5: command tx timeout [ 217.561317] Bluetooth: hci3: command tx timeout [ 217.561997] Bluetooth: hci2: command tx timeout [ 217.622154] Bluetooth: hci4: command tx timeout [ 217.686250] Bluetooth: hci7: command tx timeout [ 217.686283] Bluetooth: hci6: command tx timeout [ 219.160227] Bluetooth: hci0: command tx timeout [ 219.351092] Bluetooth: hci1: command tx timeout [ 219.606392] Bluetooth: hci2: command tx timeout [ 219.606845] Bluetooth: hci3: command tx timeout [ 219.607843] Bluetooth: hci5: command tx timeout [ 219.670142] Bluetooth: hci4: command tx timeout [ 219.734207] Bluetooth: hci7: command tx timeout [ 219.734585] Bluetooth: hci6: command tx timeout [ 221.206160] Bluetooth: hci0: command tx timeout [ 221.399629] Bluetooth: hci1: command tx timeout [ 221.654284] Bluetooth: hci3: command tx timeout [ 221.655173] Bluetooth: hci2: command tx timeout [ 221.656110] Bluetooth: hci5: command tx timeout [ 221.722125] Bluetooth: hci4: command tx timeout [ 221.782187] Bluetooth: hci6: command tx timeout [ 221.783929] Bluetooth: hci7: command tx timeout [ 223.254601] Bluetooth: hci0: command tx timeout [ 223.446346] Bluetooth: hci1: command tx timeout [ 223.702246] Bluetooth: hci2: command tx timeout [ 223.702755] Bluetooth: hci5: command tx timeout [ 223.704124] Bluetooth: hci3: command tx timeout [ 223.766095] Bluetooth: hci4: command tx timeout [ 223.830117] Bluetooth: hci6: command tx timeout [ 223.830595] Bluetooth: hci7: command tx timeout [ 277.479677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.483924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.493788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.509626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.517140] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.519555] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.616349] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.620512] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.622997] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.628447] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.636385] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.640551] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.750521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.754646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.757498] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.763648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.766824] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.769205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.819201] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.828771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.830528] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.835708] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.837780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.843376] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.849878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.865213] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.874438] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.876406] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.878372] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.881439] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.883789] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.888324] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.932889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.935594] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.946598] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.948480] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.950877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.960389] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.963605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.967401] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.972355] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.977070] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.992191] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.997759] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.005222] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.026606] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.031410] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.035454] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.575283] Bluetooth: hci0: command tx timeout [ 279.704064] Bluetooth: hci1: command tx timeout [ 279.830136] Bluetooth: hci2: command tx timeout [ 279.960179] Bluetooth: hci5: command tx timeout [ 279.961479] Bluetooth: hci4: command tx timeout [ 280.022092] Bluetooth: hci3: command tx timeout [ 280.086106] Bluetooth: hci7: command tx timeout [ 280.150318] Bluetooth: hci6: command tx timeout [ 281.623164] Bluetooth: hci0: command tx timeout [ 281.751076] Bluetooth: hci1: command tx timeout [ 281.879115] Bluetooth: hci2: command tx timeout [ 282.007289] Bluetooth: hci4: command tx timeout [ 282.007745] Bluetooth: hci5: command tx timeout [ 282.071057] Bluetooth: hci3: command tx timeout [ 282.135178] Bluetooth: hci7: command tx timeout [ 282.199312] Bluetooth: hci6: command tx timeout [ 283.670140] Bluetooth: hci0: command tx timeout [ 283.798154] Bluetooth: hci1: command tx timeout [ 283.926608] Bluetooth: hci2: command tx timeout [ 284.054343] Bluetooth: hci4: command tx timeout [ 284.054802] Bluetooth: hci5: command tx timeout [ 284.119095] Bluetooth: hci3: command tx timeout [ 284.183924] Bluetooth: hci7: command tx timeout [ 284.246095] Bluetooth: hci6: command tx timeout [ 285.718112] Bluetooth: hci0: command tx timeout [ 285.846225] Bluetooth: hci1: command tx timeout [ 285.976158] Bluetooth: hci2: command tx timeout [ 286.103294] Bluetooth: hci4: command tx timeout [ 286.103796] Bluetooth: hci5: command tx timeout [ 286.166102] Bluetooth: hci3: command tx timeout [ 286.231160] Bluetooth: hci7: command tx timeout [ 286.295435] Bluetooth: hci6: command tx timeout [ 336.087435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.088187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.376292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.376938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.127119] [ 338.127485] ====================================================== [ 338.128458] WARNING: possible circular locking dependency detected [ 338.129440] 6.13.0-next-20250123 #1 Not tainted [ 338.130305] ------------------------------------------------------ [ 338.131778] kworker/u8:1/64 is trying to acquire lock: [ 338.132914] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.135023] [ 338.135023] but task is already holding lock: [ 338.136246] ffff88802bc08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 338.138253] [ 338.138253] which lock already depends on the new lock. [ 338.138253] [ 338.149460] [ 338.149460] the existing dependency chain (in reverse order) is: [ 338.151176] [ 338.151176] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 338.152394] __mutex_lock+0x13d/0xb50 [ 338.153211] wiphy_register+0x1b2e/0x25d0 [ 338.155848] ieee80211_register_hw+0x23a4/0x3d60 [ 338.156908] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 338.157873] init_mac80211_hwsim+0x389/0x870 [ 338.158910] do_one_initcall+0xf9/0x640 [ 338.159734] kernel_init_freeable+0x53d/0x7a0 [ 338.160640] kernel_init+0x1e/0x2d0 [ 338.161368] ret_from_fork+0x48/0x80 [ 338.162072] ret_from_fork_asm+0x1a/0x30 [ 338.162889] [ 338.162889] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 338.163883] __lock_acquire+0x29fd/0x4580 [ 338.164719] lock_acquire+0x19b/0x520 [ 338.165525] __mutex_lock+0x13d/0xb50 [ 338.166351] unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.167429] unregister_netdevice_queue+0x224/0x2e0 [ 338.168377] _cfg80211_unregister_wdev+0x57b/0x700 [ 338.169368] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 338.170331] ieee80211_unregister_hw+0x55/0x3a0 [ 338.171244] hwsim_exit_net+0x3a0/0x730 [ 338.172055] ops_exit_list+0xb3/0x180 [ 338.172826] cleanup_net+0x546/0xad0 [ 338.173630] process_one_work+0x8ee/0x1a10 [ 338.174510] worker_thread+0x674/0xe70 [ 338.175352] kthread+0x3ab/0x720 [ 338.176105] ret_from_fork+0x48/0x80 [ 338.176845] ret_from_fork_asm+0x1a/0x30 [ 338.177717] [ 338.177717] other info that might help us debug this: [ 338.177717] [ 338.178996] Possible unsafe locking scenario: [ 338.178996] [ 338.179962] CPU0 CPU1 [ 338.180729] ---- ---- [ 338.181513] lock(&rdev->wiphy.mtx); [ 338.182197] lock(rtnl_mutex); [ 338.183184] lock(&rdev->wiphy.mtx); [ 338.184233] lock(rtnl_mutex); [ 338.184827] [ 338.184827] *** DEADLOCK *** [ 338.184827] [ 338.185841] 4 locks held by kworker/u8:1/64: [ 338.186577] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 338.188313] #1: ffff88800e8c7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 338.189968] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 338.191776] #3: ffff88802bc08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 338.193857] [ 338.193857] stack backtrace: [ 338.194747] CPU: 0 UID: 0 PID: 64 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250123 #1 [ 338.194839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 338.194893] Workqueue: netns cleanup_net [ 338.194994] Call Trace: [ 338.195020] [ 338.195049] dump_stack_lvl+0xca/0x120 [ 338.195191] print_circular_bug+0x47b/0x750 [ 338.195305] check_noncircular+0x2e9/0x3c0 [ 338.195404] ? lock_repin_lock+0x207/0x320 [ 338.195548] ? __pfx_check_noncircular+0x10/0x10 [ 338.195648] ? hlock_class+0x4e/0x130 [ 338.195722] ? mark_lock+0xac/0xed0 [ 338.195818] ? __pfx_lock_repin_lock+0x10/0x10 [ 338.195953] ? timerqueue_del+0x83/0x150 [ 338.196042] ? lockdep_lock+0xba/0x1b0 [ 338.196170] ? __pfx_lockdep_lock+0x10/0x10 [ 338.196294] __lock_acquire+0x29fd/0x4580 [ 338.196402] ? __pfx___lock_acquire+0x10/0x10 [ 338.196489] ? lock_release+0x20f/0x6f0 [ 338.196577] ? __pfx_lock_release+0x10/0x10 [ 338.196673] lock_acquire+0x19b/0x520 [ 338.196760] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.196859] ? __pfx_lock_acquire+0x10/0x10 [ 338.196948] ? srso_return_thunk+0x5/0x5f [ 338.197067] ? lock_release+0x20f/0x6f0 [ 338.197288] ? srso_return_thunk+0x5/0x5f [ 338.197400] ? lock_is_held_type+0x9e/0x120 [ 338.197511] ? srso_return_thunk+0x5/0x5f [ 338.197631] __mutex_lock+0x13d/0xb50 [ 338.197737] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.197829] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.197923] ? srso_return_thunk+0x5/0x5f [ 338.198035] ? synchronize_rcu_expedited+0x38a/0x420 [ 338.198133] ? __pfx___mutex_lock+0x10/0x10 [ 338.198242] ? __pfx_autoremove_wake_function+0x10/0x10 [ 338.198349] ? srso_return_thunk+0x5/0x5f [ 338.198461] ? kasan_quarantine_put+0x84/0x1e0 [ 338.198582] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 338.198661] unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.198755] ? __virt_addr_valid+0x2e8/0x5d0 [ 338.198859] ? __pfx_lock_release+0x10/0x10 [ 338.198949] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 338.199045] ? find_held_lock+0x2c/0x110 [ 338.199168] ? srso_return_thunk+0x5/0x5f [ 338.199285] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 338.199405] ? srso_return_thunk+0x5/0x5f [ 338.199516] ? lock_release+0x20f/0x6f0 [ 338.199604] ? __pfx_lock_release+0x10/0x10 [ 338.199691] ? srso_return_thunk+0x5/0x5f [ 338.199802] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 338.199897] ? srso_return_thunk+0x5/0x5f [ 338.200020] unregister_netdevice_queue+0x224/0x2e0 [ 338.200118] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 338.200207] ? up_write+0x195/0x520 [ 338.200317] _cfg80211_unregister_wdev+0x57b/0x700 [ 338.200423] ? srso_return_thunk+0x5/0x5f [ 338.200543] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 338.200622] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 338.200701] ? srso_return_thunk+0x5/0x5f [ 338.200813] ? srso_return_thunk+0x5/0x5f [ 338.200925] ? synchronize_rcu+0x1ff/0x260 [ 338.201010] ieee80211_unregister_hw+0x55/0x3a0 [ 338.201133] hwsim_exit_net+0x3a0/0x730 [ 338.201223] ? __pfx_hwsim_exit_net+0x10/0x10 [ 338.201306] ? srso_return_thunk+0x5/0x5f [ 338.201418] ? netdev_run_todo+0x788/0x1040 [ 338.201513] ? srso_return_thunk+0x5/0x5f [ 338.201629] ? __pfx_hwsim_exit_net+0x10/0x10 [ 338.201716] ops_exit_list+0xb3/0x180 [ 338.201803] cleanup_net+0x546/0xad0 [ 338.201894] ? __pfx_cleanup_net+0x10/0x10 [ 338.202003] process_one_work+0x8ee/0x1a10 [ 338.202144] ? __pfx_lock_acquire+0x10/0x10 [ 338.202234] ? __pfx_process_one_work+0x10/0x10 [ 338.202350] ? srso_return_thunk+0x5/0x5f [ 338.202462] ? move_linked_works+0x172/0x270 [ 338.202551] ? srso_return_thunk+0x5/0x5f [ 338.202663] ? assign_work+0x196/0x240 [ 338.202778] worker_thread+0x674/0xe70 [ 338.202894] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 338.202998] ? srso_return_thunk+0x5/0x5f [ 338.203119] ? __pfx_worker_thread+0x10/0x10 [ 338.203239] kthread+0x3ab/0x720 [ 338.203343] ? __pfx_kthread+0x10/0x10 [ 338.203446] ? srso_return_thunk+0x5/0x5f [ 338.203558] ? finish_task_switch.isra.0+0x206/0x840 [ 338.203660] ? __pfx_kthread+0x10/0x10 [ 338.203767] ret_from_fork+0x48/0x80 [ 338.203830] ? __pfx_kthread+0x10/0x10 [ 338.203935] ret_from_fork_asm+0x1a/0x30 [ 338.204077] [ 340.063540] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.065571] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.070316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.077583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.086335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.093351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.130630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.133812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.135151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.140389] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.144282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.145820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.161364] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.170749] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.174441] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.176093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.183181] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.192696] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.199065] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.217041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.226238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.231282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.233155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.235105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.236857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.239397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.241810] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.243564] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.261863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.265392] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.267367] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.267413] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.270340] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.272239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.275326] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.276043] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.280851] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.282257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.284126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.289958] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.292341] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.296786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.301938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.307047] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.313450] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.327624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.336893] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.338644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.167061] Bluetooth: hci0: command tx timeout [ 342.232119] Bluetooth: hci2: command tx timeout [ 342.232685] Bluetooth: hci1: command tx timeout [ 342.295061] Bluetooth: hci4: command tx timeout [ 342.358082] Bluetooth: hci6: command tx timeout [ 342.359110] Bluetooth: hci3: command tx timeout [ 342.359516] Bluetooth: hci7: command tx timeout [ 342.424036] Bluetooth: hci5: command tx timeout [ 344.214249] Bluetooth: hci0: command tx timeout [ 344.278325] Bluetooth: hci1: command tx timeout [ 344.279923] Bluetooth: hci2: command tx timeout [ 344.342250] Bluetooth: hci4: command tx timeout [ 344.406119] Bluetooth: hci3: command tx timeout [ 344.406971] Bluetooth: hci7: command tx timeout [ 344.407841] Bluetooth: hci6: command tx timeout [ 344.470218] Bluetooth: hci5: command tx timeout [ 346.264015] Bluetooth: hci0: command tx timeout [ 346.327103] Bluetooth: hci2: command tx timeout [ 346.327577] Bluetooth: hci1: command tx timeout [ 346.391162] Bluetooth: hci4: command tx timeout [ 346.454125] Bluetooth: hci3: command tx timeout [ 346.455360] Bluetooth: hci6: command tx timeout [ 346.455769] Bluetooth: hci7: command tx timeout [ 346.519105] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 20:57:30 Registers: info registers vcpu 0 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283eaa5 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800e8c6d20 R8 =0000000000000000 R9 =ffffed1001790046 R10=000000000000006b R11=6f6c206863696877 R12=000000000000006b R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283ea90 RIP=ffffffff8283eafd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f104ccd6278 CR3=000000000f494000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=18f589798b56ee8cf7462de1c1bd2f42 XMM02=00000000000fd6c0f61f520134a0d9c2 XMM03=00000000001336b8a3797342f9eb3dd9 XMM04=efaacd5cde8f67e400000000000ae988 XMM05=ebfae20747c011c5000000000014fb38 XMM06=9f165a4fe6c971ad0000000000137348 XMM07=711fbe8126c5d3440000000000137240 XMM08=a3797342f9eb3dd900000000000fef78 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88806cf00000 RBX=0000000000000001 RCX=ffffffff84a8e9d7 RDX=ffffed100d9e6c4b RSI=0000000000000004 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffff88800970fe68 R8 =0000000000000000 R9 =ffffed100d9e6c4a R10=ffff88806cf36253 R11=ffff8880134be140 R12=ffffffff864043d0 R13=1ffff110012e1fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e239762b00 CR3=000000000de82000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=0000000200000003000055fc5060be20 XMM05=000055fc5060b7a0000055fc5060b820 XMM06=000055fc50639000ffffffff00000002 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000020000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000