Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:49841' (ECDSA) to the list of known hosts. 2025/01/23 21:50:50 fuzzer started 2025/01/23 21:50:50 dialing manager at localhost:45511 syzkaller login: [ 68.659990] cgroup: Unknown subsys name 'net' [ 68.769016] cgroup: Unknown subsys name 'cpuset' [ 68.807903] cgroup: Unknown subsys name 'rlimit' [ 74.812786] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 21:51:09 syscalls: 2217 2025/01/23 21:51:09 code coverage: enabled 2025/01/23 21:51:09 comparison tracing: enabled 2025/01/23 21:51:09 extra coverage: enabled 2025/01/23 21:51:09 setuid sandbox: enabled 2025/01/23 21:51:09 namespace sandbox: enabled 2025/01/23 21:51:09 Android sandbox: enabled 2025/01/23 21:51:09 fault injection: enabled 2025/01/23 21:51:09 leak checking: enabled 2025/01/23 21:51:09 net packet injection: enabled 2025/01/23 21:51:09 net device setup: enabled 2025/01/23 21:51:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 21:51:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 21:51:09 USB emulation: enabled 2025/01/23 21:51:09 hci packet injection: enabled 2025/01/23 21:51:09 wifi device emulation: enabled 2025/01/23 21:51:09 802.15.4 emulation: enabled 2025/01/23 21:51:09 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/23 21:51:09 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/23 21:51:09 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/23 21:51:09 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/23 21:51:09 fetching corpus: 0, signal 0/8011 (executing program) 2025/01/23 21:51:09 fetching corpus: 0, signal 0/8011 (executing program) 2025/01/23 21:51:12 starting 8 fuzzer processes 21:51:12 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x101, 0x191500) r1 = eventfd2(0x0, 0x800) r2 = pidfd_getfd(r0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x14}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe76c}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0xea96f99ff8af27b6}, 0x4001) r4 = accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) syncfs(r4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe0}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x661}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xd4e}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x22004000}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000400)) r6 = fcntl$dupfd(r2, 0x0, r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc1a2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x44001) connect$packet(r6, &(0x7f0000000540)={0x11, 0x5, r5, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = dup2(r1, r2) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000600)={0x8000, 0x0, &(0x7f00000005c0)=[r7, r8, r9, r0, r10]}, 0x5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6, {r8}}, './file0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f00000006c0)={@local, 0x60}) 21:51:12 executing program 1: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) fsync(r0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "475037e267d75fb7", "9f4d265dcfec77f26e39db5b06f16f50", "2cc5ed0c", "1605cecdf9df9b13"}, 0x28) r1 = accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x80000) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$RTC_WIE_OFF(r2, 0x7010) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000200), 0x8, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340)={0x7b, 0x9, 0x1, 0x3, 0x9}, 0x14) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000380)={0x30, 0x1, 0x14, 0x1a, 0x2, 0x7fffffff, 0x3, 0x19}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x10002, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4011) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = accept4$inet(r0, &(0x7f0000000780), &(0x7f00000007c0)=0x10, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000880)={{r5}, 0x0, 0x4, @inherit={0x70, &(0x7f0000000800)={0x1, 0x5, 0xff, 0x10001, {0xe, 0x4, 0x35c4, 0x100000000, 0x1}, [0x0, 0xfffffffffffffff7, 0x4, 0x249c, 0x100000000]}}, @name="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"}) r6 = inotify_init1(0x80000) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001980), 0x800, 0x0) io_cancel(0x0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x8, 0x4, r6, &(0x7f0000001880)="2e94301be0b39310a28277afad3778691b8117bc960eb01e61e7b5e70d0bedd63380061816769983cf820eacc3c43d5a703119911a0fdb3856a3e736e7687ee5eb11bfa9fb751be0c924ef9db42c2090bebb8e9fd370de8c6807603707daa79f0a719eee6ea72223abc760d4d9ba495b193affcbaf0843e532479e418f016fd3e26fd718515dd95dacaa703801c6e5895c64f49f785a233604df2fedd106fd02c57a6f795006e2fefaa2da6e17c72b27d02a02a036df7b50429a174cdb0f1477cc4b2dfec6b5a57ae61f8518", 0xcc, 0x7fffffff, 0x0, 0x1, r7}, &(0x7f0000001a00)) 21:51:12 executing program 2: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000000)) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = io_uring_setup(0x2fa0, &(0x7f0000000080)={0x0, 0xbfc3, 0x0, 0x3, 0x2c8}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='**[\x00', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl(r0, 0x401, &(0x7f0000000100)="0d6d8847767919ff3b11d71a83b11ade7033a41c49081f7d14268d51d1f873171c3fa2da0d3863705e5106905186f3526e1e9301787142a2a8edaa7d607caa5b7af88cb9b64648af61e58cd0fb7b021e776d3d0f582b8bbf1b") clone3(&(0x7f0000000440)={0x20000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x17}, &(0x7f0000000240)=""/254, 0xfe, &(0x7f0000000340)=""/140, &(0x7f0000000400)=[0xffffffffffffffff], 0x1}, 0x58) r1 = fsopen(&(0x7f00000004c0)='pstore\x00', 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000500)={0x2, 'ip6gretap0\x00', {0x1fe000}, 0xfff9}) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000540)=""/86) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000600)={{r2}, 0xfffffffffffffff9, 0x7d34, 0x80000000}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000640), 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc8, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xfff8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0xfff9}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040004}, 0x6) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000840), 0x4b2803, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x57}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0xc015}, 0x820) write$P9_RWALK(r4, &(0x7f00000009c0)={0x23, 0x6f, 0x1, {0x2, [{0x80, 0x2, 0x6}, {0x4, 0x1, 0x4}]}}, 0x23) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000a40)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x8, 0x1ff, 0x10001, 0x3, 0x3]}, &(0x7f0000000ac0)=0x78) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000d80)={{0x0, 0xe57, 0x99, 0xa000000000, 0x9, 0x40, 0x0, 0x1000, 0x8, 0xe9a7, 0x5, 0x7fff, 0x9, 0x1, 0x5}}) 21:51:12 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"df5d5e2cb3cb7a92d1090080bfb8f8b4", 0x0, 0x0, {0x0, 0x10000}, {0x5a52, 0x7}, 0x6, [0x2, 0xa4c2, 0x4, 0x1000, 0x3f, 0xbf, 0xfffffffffffffffd, 0x0, 0x3, 0x8, 0x3b66, 0x7, 0x7fffffff, 0x5, 0x4b0fa71a, 0xfffffffffffffffa]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000001c0)={{}, r0, 0x2, @inherit={0x88, &(0x7f0000000100)={0x0, 0x8, 0x100000001, 0x5, {0x24, 0x5, 0x7, 0x1, 0xad}, [0x100000000, 0x6, 0x5, 0x0, 0xffff, 0x3, 0x6, 0xff]}}, @subvolid=0x2}) syz_genetlink_get_family_id$net_dm(&(0x7f00000011c0), 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f0000001200), 0x4d, 0x80) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x4000801) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10001082}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000804}, 0x8000) r3 = socket(0x21, 0x1, 0x928) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000001380)=0x601b, 0x4) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x50, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x48005}, 0x4000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001540), r1) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8880002}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1c010) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001740), 0x800, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x80, r6, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5f}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x80}, 0x1, 0x0, 0x0, 0x8008}, 0x40000) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001900), 0x101000, 0x0) ioctl$FIOCLEX(r7, 0x5451) getsockopt$inet6_int(r3, 0x29, 0xce, &(0x7f0000001940), &(0x7f0000001980)=0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) 21:51:12 executing program 5: readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/210, 0xd2) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000200)=""/173, 0xad}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/24, 0x18}, {&(0x7f0000000640)=""/170, 0xaa}, {&(0x7f0000000700)=""/15, 0xf}, {&(0x7f0000000740)=""/56, 0x38}], 0xa, 0x3, 0x20) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x72, 0x4}}, './file0\x00'}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x801) name_to_handle_at(r0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=@reiserfs_3={0xc, 0x3, {0xfff, 0x80000001, 0x3}}, &(0x7f0000000c00), 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000015) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000d80)=0xce) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r2, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40488c4}, 0x4040004) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000f00)={[0x3]}, 0x8, 0x800) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000f40)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x68, r4, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40890}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000001100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000001140), &(0x7f0000001180)=0x4) r6 = syz_io_uring_complete(0x0) readlinkat(r6, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)=""/156, 0x9c) 21:51:12 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x5) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)={0x7fff, 0x1}) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f00000000c0)) statx(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000280)=@v3={0x3000000, [{0x5, 0xfffffff7}, {0x2}], r1}, 0x18, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3e2}}, './file0\x00'}) recvmmsg$unix(r0, &(0x7f00000013c0)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/136, 0x88}, {&(0x7f0000000480)=""/239, 0xef}, {&(0x7f0000000580)=""/74, 0x4a}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/38, 0x26}], 0x7, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/219, 0xdb}], 0x1, &(0x7f0000000a80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000000bc0), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000c40)=""/207, 0xcf}, {&(0x7f0000000d40)=""/56, 0x38}, {&(0x7f0000000d80)=""/212, 0xd4}], 0x3, &(0x7f0000000ec0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x90}}, {{&(0x7f0000000f80), 0x6e, &(0x7f0000001300)=[{&(0x7f0000001000)=""/231, 0xe7}, {&(0x7f0000001100)=""/192, 0xc0}, {&(0x7f00000011c0)=""/23, 0x17}, {&(0x7f0000001200)=""/108, 0x6c}, {&(0x7f0000001280)=""/82, 0x52}], 0x5, &(0x7f0000001380)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x4, 0x10000, 0x0) r11 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000014c0)={{}, {0x1, 0x4}, [{0x2, 0x0, r9}, {0x2, 0x4, 0xee01}, {0x2, 0x6, r1}, {0x2, 0x3, r1}, {0x2, 0x0, r1}, {0x2, 0x3, r11}, {0x2, 0x5, r1}], {0x4, 0x3}, [{0x8, 0x2, r2}, {0x8, 0x1, r2}], {0x10, 0x4}}, 0x6c, 0x2) ioctl$BLKRRPART(r6, 0x125f, 0x0) setsockopt$sock_void(r10, 0x1, 0x24, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000001540)=0x2, &(0x7f0000001580)=0x2) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000001600)) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000001640)) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000001680)={0x3, 0xa2, 0x3, 0x8, 0x3, [{0x9, 0x20a2, 0x9, '\x00', 0x2}, {0x1, 0x0, 0x101, '\x00', 0x3f08}, {0x1ff, 0x7f, 0x3, '\x00', 0x1000}]}) chmod(&(0x7f0000001780)='./file0\x00', 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000017c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r13) [ 90.472497] audit: type=1400 audit(1737669072.507:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:51:12 executing program 6: ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0x5, 0x1, 0x5}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x40, 0xcc, 0x9, 0x2, 0x3, 0x3, 0xffffffff, 0x143, 0x38, 0x1c9, 0x6, 0x27, 0x20, 0x1, 0x8a, 0x7, 0x101}, [{0x7, 0xffffffff, 0x9, 0x0, 0x1f, 0x0, 0xfffffff7, 0x1}, {0x1, 0x100, 0x40, 0x200, 0xc9a, 0x5, 0x3b6f3498, 0x6}], "66d8d44e04b7013de15f0f894ab41e8dfe2e93240af36ee4c85901b2b055e9e8d9600a10316b442e6b", ['\x00', '\x00', '\x00']}, 0x3a1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x2, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'syztnl1\x00', r2, 0x2f, 0x0, 0x1f, 0x4, 0x44, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x7806, 0x400, 0x2}}) fdatasync(r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x88, 0x0, 0x403, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4011) r3 = syz_open_dev$loop(&(0x7f0000000b40), 0xffffffff, 0x4400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000c00)={@remote}, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/tty/ldiscs\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000c80)={0x7, 0x21, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000cc0)=0x1, 0x4) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000d00), &(0x7f0000000d40), 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000ec0)={'ip6tnl0\x00', &(0x7f0000000e40)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0xff, 0x1, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3e8, 0x8, 0x2, 0x1}}) 21:51:12 executing program 7: write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x0, 0x1, 0x4}}, 0x14) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x770, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x2004c880) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000014) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004004}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xcc, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xb4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000700)={0x16, 0x2e, 0x2, 0x12, 0x2, 0x6, 0x5, 0x127, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x30}}, 0x20008401) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8f2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x7fffffff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5c}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2e}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000980)=@gcm_256={{0x304}, "c96fc0c57d15959b", "cfb65706053412e258d289edbedcbe7f9965535a56a8b8f75d4d759dc3d83438", "c7a466de", "ca9365db7afe6edb"}, 0x38) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r4, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x20000040) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10c, r0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x7c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xd33a}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x81}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xef4e}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x81}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x1}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x68, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="17c8dc9f136b"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xa2b3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x50}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x200}]}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x24008044) [ 91.998030] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.001754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.004221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.009904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.014439] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.017056] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.055667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.060935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.065838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.071224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.076293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.078379] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.119075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.123038] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.125405] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.130897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.133867] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.136711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.205750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.209904] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.211871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.224031] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.226958] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.229370] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.233710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.247183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.266111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.269442] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.275106] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.279214] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.287909] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.290877] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.297911] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.303657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.310068] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.311606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.334839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.341040] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.352046] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.362049] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.367117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.380224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.380945] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.382769] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.387841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.419981] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.455099] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.465984] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.083106] Bluetooth: hci0: command tx timeout [ 94.147666] Bluetooth: hci1: command tx timeout [ 94.211711] Bluetooth: hci2: command tx timeout [ 94.274645] Bluetooth: hci3: command tx timeout [ 94.338720] Bluetooth: hci6: command tx timeout [ 94.468328] Bluetooth: hci4: command tx timeout [ 94.532007] Bluetooth: hci7: command tx timeout [ 94.532716] Bluetooth: hci5: command tx timeout [ 96.131642] Bluetooth: hci0: command tx timeout [ 96.195713] Bluetooth: hci1: command tx timeout [ 96.260632] Bluetooth: hci2: command tx timeout [ 96.323680] Bluetooth: hci3: command tx timeout [ 96.387578] Bluetooth: hci6: command tx timeout [ 96.515670] Bluetooth: hci4: command tx timeout [ 96.580275] Bluetooth: hci7: command tx timeout [ 96.580756] Bluetooth: hci5: command tx timeout [ 98.180192] Bluetooth: hci0: command tx timeout [ 98.243603] Bluetooth: hci1: command tx timeout [ 98.307815] Bluetooth: hci2: command tx timeout [ 98.370628] Bluetooth: hci3: command tx timeout [ 98.436576] Bluetooth: hci6: command tx timeout [ 98.563615] Bluetooth: hci4: command tx timeout [ 98.627887] Bluetooth: hci7: command tx timeout [ 98.628459] Bluetooth: hci5: command tx timeout [ 100.226697] Bluetooth: hci0: command tx timeout [ 100.291617] Bluetooth: hci1: command tx timeout [ 100.355575] Bluetooth: hci2: command tx timeout [ 100.418669] Bluetooth: hci3: command tx timeout [ 100.482595] Bluetooth: hci6: command tx timeout [ 100.610592] Bluetooth: hci4: command tx timeout [ 100.674834] Bluetooth: hci7: command tx timeout [ 100.675280] Bluetooth: hci5: command tx timeout [ 153.994034] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.998016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.007450] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.014165] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.021142] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.023973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.139440] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.144088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.145147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.147408] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.148580] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.149386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.152726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.154430] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.155770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.155822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.160948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.165912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.266486] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.275103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.296054] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.319222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.353461] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.354999] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.361850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.366171] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.367704] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.368817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.371835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.373432] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.402499] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.413181] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.423978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.425968] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.427848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.434136] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.443112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.444745] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.448873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.452762] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.457144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.463902] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.466942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.472737] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.473391] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.480399] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.490728] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.503961] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.099691] Bluetooth: hci0: command tx timeout [ 156.163594] Bluetooth: hci2: command tx timeout [ 156.226598] Bluetooth: hci1: command tx timeout [ 156.418630] Bluetooth: hci5: command tx timeout [ 156.546823] Bluetooth: hci3: command tx timeout [ 156.547115] Bluetooth: hci4: command tx timeout [ 156.610940] Bluetooth: hci7: command tx timeout [ 156.611203] Bluetooth: hci6: command tx timeout [ 158.148795] Bluetooth: hci0: command tx timeout [ 158.214551] Bluetooth: hci2: command tx timeout [ 158.274749] Bluetooth: hci1: command tx timeout [ 158.467554] Bluetooth: hci5: command tx timeout [ 158.594622] Bluetooth: hci4: command tx timeout [ 158.595695] Bluetooth: hci3: command tx timeout [ 158.658746] Bluetooth: hci7: command tx timeout [ 158.659615] Bluetooth: hci6: command tx timeout [ 160.195666] Bluetooth: hci0: command tx timeout [ 160.259585] Bluetooth: hci2: command tx timeout [ 160.323783] Bluetooth: hci1: command tx timeout [ 160.515916] Bluetooth: hci5: command tx timeout [ 160.643596] Bluetooth: hci3: command tx timeout [ 160.643706] Bluetooth: hci4: command tx timeout [ 160.707627] Bluetooth: hci6: command tx timeout [ 160.708493] Bluetooth: hci7: command tx timeout [ 162.243626] Bluetooth: hci0: command tx timeout [ 162.308602] Bluetooth: hci2: command tx timeout [ 162.372568] Bluetooth: hci1: command tx timeout [ 162.564162] Bluetooth: hci5: command tx timeout [ 162.690650] Bluetooth: hci3: command tx timeout [ 162.690798] Bluetooth: hci4: command tx timeout [ 162.756188] Bluetooth: hci7: command tx timeout [ 162.756307] Bluetooth: hci6: command tx timeout [ 216.409765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.415976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.420281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.432792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.439011] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.441042] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.468370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.473621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.476054] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.488678] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.491816] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.499948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.597054] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.601891] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.604925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.617884] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.622872] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.628295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.677886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.681038] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.683310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.693085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.701167] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.705834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.718471] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.723396] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.725139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.729282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.736464] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.738900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.814263] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.820944] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.823816] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.829284] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.834806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.837818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.839729] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.844789] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.845893] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.851050] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.853418] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.855119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.902219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.904974] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.913933] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.935956] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.938806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.961314] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.498603] Bluetooth: hci0: command tx timeout [ 218.562726] Bluetooth: hci1: command tx timeout [ 218.690685] Bluetooth: hci2: command tx timeout [ 218.755612] Bluetooth: hci3: command tx timeout [ 218.818651] Bluetooth: hci4: command tx timeout [ 218.946727] Bluetooth: hci6: command tx timeout [ 219.010639] Bluetooth: hci7: command tx timeout [ 219.074590] Bluetooth: hci5: command tx timeout [ 220.546618] Bluetooth: hci0: command tx timeout [ 220.610577] Bluetooth: hci1: command tx timeout [ 220.738618] Bluetooth: hci2: command tx timeout [ 220.803568] Bluetooth: hci3: command tx timeout [ 220.866896] Bluetooth: hci4: command tx timeout [ 220.994674] Bluetooth: hci6: command tx timeout [ 221.058658] Bluetooth: hci7: command tx timeout [ 221.122627] Bluetooth: hci5: command tx timeout [ 222.594705] Bluetooth: hci0: command tx timeout [ 222.659556] Bluetooth: hci1: command tx timeout [ 222.786603] Bluetooth: hci2: command tx timeout [ 222.850590] Bluetooth: hci3: command tx timeout [ 222.914622] Bluetooth: hci4: command tx timeout [ 223.042634] Bluetooth: hci6: command tx timeout [ 223.107593] Bluetooth: hci7: command tx timeout [ 223.170630] Bluetooth: hci5: command tx timeout [ 224.642748] Bluetooth: hci0: command tx timeout [ 224.707732] Bluetooth: hci1: command tx timeout [ 224.835691] Bluetooth: hci2: command tx timeout [ 224.898624] Bluetooth: hci3: command tx timeout [ 224.962644] Bluetooth: hci4: command tx timeout [ 225.090792] Bluetooth: hci6: command tx timeout [ 225.154847] Bluetooth: hci7: command tx timeout [ 225.218854] Bluetooth: hci5: command tx timeout [ 276.789780] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 278.419460] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.423728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.435368] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.447366] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.450683] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.452722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.540783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.544920] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.547450] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.552856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.557321] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.559448] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.608863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.621827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.625942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.631409] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.639025] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.644854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.708602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.735149] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.743909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.752857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.758005] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.761220] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.772983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.776368] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.778057] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.780205] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.796838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.801330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.804628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.810007] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.815622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.827255] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.834731] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.839271] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.842054] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.847051] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.852619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.856274] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.858158] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.860036] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.861898] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.871060] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.878711] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.883185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.911067] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.922946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.515154] Bluetooth: hci0: command tx timeout [ 280.581766] Bluetooth: hci1: command tx timeout [ 280.771703] Bluetooth: hci2: command tx timeout [ 280.898619] Bluetooth: hci4: command tx timeout [ 280.899603] Bluetooth: hci7: command tx timeout [ 280.962648] Bluetooth: hci5: command tx timeout [ 280.963302] Bluetooth: hci3: command tx timeout [ 281.026614] Bluetooth: hci6: command tx timeout [ 282.562568] Bluetooth: hci0: command tx timeout [ 282.627804] Bluetooth: hci1: command tx timeout [ 282.818667] Bluetooth: hci2: command tx timeout [ 282.946565] Bluetooth: hci7: command tx timeout [ 282.947646] Bluetooth: hci4: command tx timeout [ 283.012665] Bluetooth: hci3: command tx timeout [ 283.012752] Bluetooth: hci5: command tx timeout [ 283.076560] Bluetooth: hci6: command tx timeout [ 284.611609] Bluetooth: hci0: command tx timeout [ 284.675582] Bluetooth: hci1: command tx timeout [ 284.868551] Bluetooth: hci2: command tx timeout [ 284.994562] Bluetooth: hci4: command tx timeout [ 284.994593] Bluetooth: hci7: command tx timeout [ 285.058652] Bluetooth: hci5: command tx timeout [ 285.059682] Bluetooth: hci3: command tx timeout [ 285.122614] Bluetooth: hci6: command tx timeout [ 286.658625] Bluetooth: hci0: command tx timeout [ 286.724577] Bluetooth: hci1: command tx timeout [ 286.914581] Bluetooth: hci2: command tx timeout [ 287.042639] Bluetooth: hci7: command tx timeout [ 287.042749] Bluetooth: hci4: command tx timeout [ 287.106643] Bluetooth: hci3: command tx timeout [ 287.107110] Bluetooth: hci5: command tx timeout [ 287.172505] Bluetooth: hci6: command tx timeout [ 336.789672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.790389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.091164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.091870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.837087] [ 337.837326] ====================================================== [ 337.837896] WARNING: possible circular locking dependency detected [ 337.838491] 6.13.0-next-20250123 #1 Not tainted [ 337.838885] ------------------------------------------------------ [ 337.839372] kworker/u8:1/64 is trying to acquire lock: [ 337.839780] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.840624] [ 337.840624] but task is already holding lock: [ 337.841172] ffff88802fa08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.842104] [ 337.842104] which lock already depends on the new lock. [ 337.842104] [ 337.842852] [ 337.842852] the existing dependency chain (in reverse order) is: [ 337.844483] [ 337.844483] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 337.845158] __mutex_lock+0x13d/0xb50 [ 337.846493] wiphy_register+0x1b2e/0x25d0 [ 337.847256] ieee80211_register_hw+0x23a4/0x3d60 [ 337.848137] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 337.849500] init_mac80211_hwsim+0x389/0x870 [ 337.850389] do_one_initcall+0xf9/0x640 [ 337.851176] kernel_init_freeable+0x53d/0x7a0 [ 337.851988] kernel_init+0x1e/0x2d0 [ 337.852604] ret_from_fork+0x48/0x80 [ 337.853483] ret_from_fork_asm+0x1a/0x30 [ 337.853994] [ 337.853994] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 337.854610] __lock_acquire+0x29fd/0x4580 [ 337.855087] lock_acquire+0x19b/0x520 [ 337.855531] __mutex_lock+0x13d/0xb50 [ 337.855986] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.856606] unregister_netdevice_queue+0x224/0x2e0 [ 337.857167] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.857731] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.858299] ieee80211_unregister_hw+0x55/0x3a0 [ 337.858844] hwsim_exit_net+0x3a0/0x730 [ 337.859321] ops_exit_list+0xb3/0x180 [ 337.859775] cleanup_net+0x546/0xad0 [ 337.860224] process_one_work+0x8ee/0x1a10 [ 337.860737] worker_thread+0x674/0xe70 [ 337.861223] kthread+0x3ab/0x720 [ 337.861652] ret_from_fork+0x48/0x80 [ 337.862088] ret_from_fork_asm+0x1a/0x30 [ 337.862607] [ 337.862607] other info that might help us debug this: [ 337.862607] [ 337.863363] Possible unsafe locking scenario: [ 337.863363] [ 337.863936] CPU0 CPU1 [ 337.864390] ---- ---- [ 337.864842] lock(&rdev->wiphy.mtx); [ 337.865246] lock(rtnl_mutex); [ 337.865823] lock(&rdev->wiphy.mtx); [ 337.866449] lock(rtnl_mutex); [ 337.866806] [ 337.866806] *** DEADLOCK *** [ 337.866806] [ 337.867379] 4 locks held by kworker/u8:1/64: [ 337.867825] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 337.868859] #1: ffff88800f3afd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 337.869851] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 337.870782] #3: ffff88802fa08768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.871809] [ 337.871809] stack backtrace: [ 337.872249] CPU: 0 UID: 0 PID: 64 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250123 #1 [ 337.872294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 337.872320] Workqueue: netns cleanup_net [ 337.872370] Call Trace: [ 337.872383] [ 337.872397] dump_stack_lvl+0xca/0x120 [ 337.872467] print_circular_bug+0x47b/0x750 [ 337.872523] check_noncircular+0x2e9/0x3c0 [ 337.872574] ? __pfx_check_noncircular+0x10/0x10 [ 337.872628] ? srso_return_thunk+0x5/0x5f [ 337.872696] ? find_held_lock+0x2c/0x110 [ 337.872769] ? lockdep_lock+0xba/0x1b0 [ 337.872838] ? __pfx_lockdep_lock+0x10/0x10 [ 337.872915] __lock_acquire+0x29fd/0x4580 [ 337.872981] ? __pfx___lock_acquire+0x10/0x10 [ 337.873035] ? __pfx_try_to_wake_up+0x10/0x10 [ 337.873093] lock_acquire+0x19b/0x520 [ 337.873146] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.873206] ? __pfx_lock_acquire+0x10/0x10 [ 337.873260] ? __pfx_lock_release+0x10/0x10 [ 337.873313] ? __pfx_try_to_wake_up+0x10/0x10 [ 337.873364] ? srso_return_thunk+0x5/0x5f [ 337.873432] ? lock_is_held_type+0x9e/0x120 [ 337.873501] ? srso_return_thunk+0x5/0x5f [ 337.873574] __mutex_lock+0x13d/0xb50 [ 337.873639] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.873694] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.873751] ? srso_return_thunk+0x5/0x5f [ 337.873820] ? synchronize_rcu_expedited+0x38a/0x420 [ 337.873872] ? __pfx___mutex_lock+0x10/0x10 [ 337.873940] ? srso_return_thunk+0x5/0x5f [ 337.874010] ? srso_return_thunk+0x5/0x5f [ 337.874078] ? kasan_quarantine_put+0x84/0x1e0 [ 337.874152] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 337.874194] ? srso_return_thunk+0x5/0x5f [ 337.874268] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.874325] ? __virt_addr_valid+0x2e8/0x5d0 [ 337.874396] ? __pfx_lock_release+0x10/0x10 [ 337.874451] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 337.874508] ? find_held_lock+0x2c/0x110 [ 337.874578] ? srso_return_thunk+0x5/0x5f [ 337.874650] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 337.874723] ? srso_return_thunk+0x5/0x5f [ 337.874792] ? lock_release+0x20f/0x6f0 [ 337.874845] ? __pfx_lock_release+0x10/0x10 [ 337.874897] ? srso_return_thunk+0x5/0x5f [ 337.874966] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.875024] ? srso_return_thunk+0x5/0x5f [ 337.875099] unregister_netdevice_queue+0x224/0x2e0 [ 337.875153] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.875207] ? up_write+0x195/0x520 [ 337.875274] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.875335] ? srso_return_thunk+0x5/0x5f [ 337.875405] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.875451] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 337.875503] ? srso_return_thunk+0x5/0x5f [ 337.875572] ? srso_return_thunk+0x5/0x5f [ 337.875640] ? synchronize_rcu+0x1ff/0x260 [ 337.875692] ieee80211_unregister_hw+0x55/0x3a0 [ 337.875748] hwsim_exit_net+0x3a0/0x730 [ 337.875800] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.875851] ? srso_return_thunk+0x5/0x5f [ 337.875919] ? netdev_run_todo+0x788/0x1040 [ 337.875980] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.876033] ops_exit_list+0xb3/0x180 [ 337.876086] cleanup_net+0x546/0xad0 [ 337.876142] ? __pfx_cleanup_net+0x10/0x10 [ 337.876209] process_one_work+0x8ee/0x1a10 [ 337.876289] ? __pfx_lock_acquire+0x10/0x10 [ 337.876343] ? __pfx_process_one_work+0x10/0x10 [ 337.876414] ? srso_return_thunk+0x5/0x5f [ 337.876483] ? move_linked_works+0x172/0x270 [ 337.876537] ? srso_return_thunk+0x5/0x5f [ 337.876606] ? assign_work+0x196/0x240 [ 337.876676] worker_thread+0x674/0xe70 [ 337.876747] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.876810] ? srso_return_thunk+0x5/0x5f [ 337.876879] ? __pfx_worker_thread+0x10/0x10 [ 337.876951] kthread+0x3ab/0x720 [ 337.877014] ? __pfx_kthread+0x10/0x10 [ 337.877078] ? srso_return_thunk+0x5/0x5f [ 337.877146] ? finish_task_switch.isra.0+0x206/0x840 [ 337.877208] ? __pfx_kthread+0x10/0x10 [ 337.877274] ret_from_fork+0x48/0x80 [ 337.877312] ? __pfx_kthread+0x10/0x10 [ 337.877376] ret_from_fork_asm+0x1a/0x30 [ 337.877458] [ 340.109304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.112414] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.116271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.122131] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.126780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.128850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.314422] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.316401] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.321660] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.334777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.339826] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.342062] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.493585] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.495873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.499721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.510282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.516579] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.520116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.632955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.635791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.638022] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.641613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.645743] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.649761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.694782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.697225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.699233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.704058] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.706634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.710657] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.714021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.717787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.719306] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.722304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.739207] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.745203] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.752726] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.752955] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.754537] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.757382] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.757439] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.762097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.954962] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.989838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.044169] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.066859] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.081125] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.083376] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.210693] Bluetooth: hci0: command tx timeout [ 342.404627] Bluetooth: hci1: command tx timeout [ 342.594662] Bluetooth: hci2: command tx timeout [ 342.722738] Bluetooth: hci3: command tx timeout [ 342.786613] Bluetooth: hci6: command tx timeout [ 342.850601] Bluetooth: hci5: command tx timeout [ 342.850615] Bluetooth: hci4: command tx timeout [ 343.170741] Bluetooth: hci7: command tx timeout [ 344.258665] Bluetooth: hci0: command tx timeout [ 344.450682] Bluetooth: hci1: command tx timeout [ 344.643501] Bluetooth: hci2: command tx timeout [ 344.770539] Bluetooth: hci3: command tx timeout [ 344.835522] Bluetooth: hci6: command tx timeout [ 344.898817] Bluetooth: hci4: command tx timeout [ 344.898832] Bluetooth: hci5: command tx timeout [ 345.219532] Bluetooth: hci7: command tx timeout [ 346.306566] Bluetooth: hci0: command tx timeout [ 346.500523] Bluetooth: hci1: command tx timeout [ 346.690660] Bluetooth: hci2: command tx timeout [ 346.818532] Bluetooth: hci3: command tx timeout [ 346.882578] Bluetooth: hci6: command tx timeout [ 346.946564] Bluetooth: hci4: command tx timeout [ 346.946590] Bluetooth: hci5: command tx timeout [ 347.266573] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 21:55:20 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283eaa5 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800f3aeca0 R8 =0000000000000000 R9 =ffffed100170f046 R10=0000000000000020 R11=6d20202020202020 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283ea90 RIP=ffffffff8283eafd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f143d152028 CR3=000000000f628000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004169085d00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce42cc0 RCX=ffffffff816643a2 RDX=ffff888038fc8000 RSI=ffffffff8166437c RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88802c1ff7c8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=ffffed100d9c8599 R13=ffff88806ce42cc8 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8166437e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561a570ee778 CR3=000000000f628000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c0078bc87800000000008e84e0 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000b000000000000000b XMM05=000000c0078bc87800000000008e84e0 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=000000c00074bd0000000000004643c1 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=72617473657220726f74756365786511 XMM14=616469646e616320636578650e007374 XMM15=000073746e696820636578650a006574