Warning: Permanently added '[localhost]:43471' (ECDSA) to the list of known hosts. 2025/01/24 08:53:56 fuzzer started 2025/01/24 08:53:57 dialing manager at localhost:45511 syzkaller login: [ 68.732361] cgroup: Unknown subsys name 'net' [ 68.808431] cgroup: Unknown subsys name 'cpuset' [ 68.828437] cgroup: Unknown subsys name 'rlimit' [ 74.329013] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 08:54:13 syscalls: 2217 2025/01/24 08:54:13 code coverage: enabled 2025/01/24 08:54:13 comparison tracing: enabled 2025/01/24 08:54:13 extra coverage: enabled 2025/01/24 08:54:13 setuid sandbox: enabled 2025/01/24 08:54:13 namespace sandbox: enabled 2025/01/24 08:54:13 Android sandbox: enabled 2025/01/24 08:54:13 fault injection: enabled 2025/01/24 08:54:13 leak checking: enabled 2025/01/24 08:54:13 net packet injection: enabled 2025/01/24 08:54:13 net device setup: enabled 2025/01/24 08:54:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 08:54:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 08:54:13 USB emulation: enabled 2025/01/24 08:54:13 hci packet injection: enabled 2025/01/24 08:54:13 wifi device emulation: enabled 2025/01/24 08:54:13 802.15.4 emulation: enabled 2025/01/24 08:54:13 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/24 08:54:13 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/24 08:54:13 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/24 08:54:13 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/24 08:54:13 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 08:54:13 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 08:54:16 starting 8 fuzzer processes 08:54:16 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x41) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x14) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000300)=0x8) getsockopt$inet6_buf(r2, 0x29, 0x2e, &(0x7f0000000340)=""/4096, &(0x7f0000001340)=0x1000) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000001380)=""/14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x8001) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x64, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000040}, 0x4040010) fremovexattr(r2, &(0x7f0000001640)=@known='trusted.overlay.metacopy\x00') r4 = dup2(r1, r2) write$cgroup_devices(r4, &(0x7f0000001680)={'c', ' *:* ', 'rm\x00'}, 0x9) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x74, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x400c1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000001800), &(0x7f0000001840)=0x14) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r4) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000001a40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)={0xfc, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}, 0xc0}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe0}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92b}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd4e}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x524bf616}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000001a80)=0x5) 08:54:16 executing program 1: ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80800) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{}, {@void, @max}}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:newrole_exec_t:s0\x00', 0x24, 0x3) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xed1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r2, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1f}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x400}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x37}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc015}, 0x40000) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x13}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x22000884) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x800, 0x0) write$P9_RLOCK(r5, &(0x7f0000000780)={0x8, 0x35, 0x1, 0x3}, 0x8) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xdf3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x20000) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x44000) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000009c0)={0x1, 0x2, 0x2}) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000a00)=0x3) fgetxattr(r5, &(0x7f0000000a40)=@known='user.incfs.size\x00', &(0x7f0000000a80)=""/43, 0x2b) 08:54:16 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x9, {0xe, 0x8, 0x5, 0x200, 0x5}}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0xa8c8, 0x2}, @timestamp, @sack_perm], 0x3) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048090}, 0x1080) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x24000004) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) r4 = openat$cgroup_ro(r3, &(0x7f0000000480)='net_prio.prioidx\x00', 0x0, 0x0) connect(r4, &(0x7f00000004c0)=@ieee802154, 0x80) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000540)={'icmp\x00'}, &(0x7f0000000580)=0x1e) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f00000005c0)={0x0, 0x800, 0x3e}) lremovexattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@known='trusted.overlay.impure\x00') ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000680)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r1, 0x4, 0xff, 0x3, 0xfffffff9, 0x74, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8000, 0x7800, 0x80000000, 0xfffffffd}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x3, 0x2, 0x4, 0x1, {0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}}}, 0x80) r6 = syz_open_dev$mouse(&(0x7f0000000800), 0xd1aa, 0x430003) ioctl$HIDIOCGNAME(r6, 0x80404806, &(0x7f0000000840)) fchmod(r0, 0x180) 08:54:16 executing program 3: r0 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) r4 = geteuid() r5 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1, 0x6, 0x3, 0x7f, 0x0, 0x9, 0x40000, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000300), 0xd}, 0x0, 0x1, 0x40, 0x7, 0x10000, 0x80000001, 0x2, 0x0, 0x7fffffff, 0x0, 0x6f}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) r6 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x3f, 0x40, 0x1f, 0xef, 0x0, 0x7, 0x810, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x2, @perf_bp={&(0x7f00000003c0), 0x1}, 0x200, 0x400, 0x1, 0x5, 0x1000, 0x4, 0x5, 0x0, 0x400, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0xa) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1) r8 = syz_open_dev$sg(&(0x7f00000004c0), 0xffffffffffff7fff, 0x10d300) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x101, 0x80000000}, 0xc, &(0x7f0000000140)=[{&(0x7f00000000c0)={0x50, 0x3a, 0x10, 0x70bd25, 0x25dfdbff, "", [@generic="ffe42a6a38df6c2dfd26e05a21bf2c3543370a6f0a37bf03691fc4e819c6fc8dc44de4f947651c36d8c9989956f80553b42a320260f2e31e7a6d30410fe4"]}, 0x50}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, r6]}}, @rights={{0x1c, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}], 0xb8}, 0x200400c0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600), 0x401, 0x0) copy_file_range(r9, &(0x7f0000000640)=0x1, 0xffffffffffffffff, &(0x7f0000000680)=0x1200, 0x11c000000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10) r10 = pidfd_getfd(0xffffffffffffffff, r8, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa5c}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0080}, 0x20000850) ioctl$KDSIGACCEPT(r10, 0x4b4e, 0x2) r11 = signalfd4(r8, &(0x7f0000000840)={[0x7]}, 0x8, 0x80000) ioctl$VT_GETMODE(r11, 0x5601, &(0x7f0000000880)) sendmsg$AUDIT_SET(r11, &(0x7f0000000d40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, 0x3e9, 0x10, 0x70bd2c, 0x25dfdbfd, {0x22, 0x0, 0x2, 0x0, 0x3ff, 0xffff, 0xe49, 0x5bb, 0x0, 0x6}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24040480) 08:54:16 executing program 4: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x2f, 0xe5, 0x2, 0x1, 0x6a, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x40, 0xfffffffa, 0x7f}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={@mcast1, 0x6f, r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @phonet={0x23, 0x4, 0xff, 0x40}, 0x6, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)='bond0\x00', 0x5, 0x4, 0x7fff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x111000, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000340)="f964b8e03ff2f2181f9d2c70f071903d8ec0187629eab03aa7", 0x19) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000380)=0x200, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f00000003c0)={{r3}, "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"}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000013c0)={'filter\x00', 0xd, "7d32364995694b358d51cbaaaa"}, &(0x7f0000001400)=0x31) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000001440)) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xa8, 0x0, 0xd11, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9c5e}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040005}, 0x81) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000001600)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000001640)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001680), &(0x7f00000016c0)=0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0x94, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd3ba}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffd) r5 = syz_open_dev$vcsn(&(0x7f0000001880), 0xb2ee, 0x800) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x64, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x8899}, 0x40000) [ 87.243473] audit: type=1400 audit(1737708856.175:7): avc: denied { execmem } for pid=275 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:54:16 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x72b414cc, 0x2800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x64, 0x0, &(0x7f0000000100)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x1, 0x2d}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs_done, @register_looper, @increfs={0x40046304, 0x15}], 0xab, 0x0, &(0x7f0000000180)="d308b8b2a886b72cb3e2833746f0c615ff5a2b6cd67910332b8faab53d6ed84011f8ee1ac23e2f3e8f87883b71cdac5c877f6d2159f7c246096eeaa9d6a7399a5ccf607e2a3b2f2e6048e91c55349258a93930869405711973c53649ed37a7e30abdaf9452c5525b7795e4fa66436f8fedb34f115526779b3e0863472ad80fef6cd3ee29d2280dc26281160106229990401675603c914b01c89ec8df89616b8b032db894859d43e15872fb"}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000280)=[0x80, 0x80]) preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2, 0x2, 0x2) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000400)) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000440)="27204e496a36e3d3cd863100243dc06325fd60d9a40295b02a0e1945eac6de08eb059124ab657a5570dad62bcd310a4f4caa1c9ab5ca0fee91a0469a62d2fb71316fdc2328f0381797e9b6c65135829e80f1bc9cf96627f2", 0x58}, {&(0x7f00000004c0)="f05e57f45b339a8d4f48a85477ee15f6b968dd0f600dc5a8c1df0e66a68bfa31947b83", 0x23}], 0x2, 0x7ff, 0x8, 0x14) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x3) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000005c0)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000600)=0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000640)={"e98348213bc584dab92eee3f3d639639", 0x0, 0x0, {0x6f, 0x1f}, {0x4, 0x3}, 0x3, [0x4ff, 0x100000001, 0x5, 0x46f8b6f0, 0x9, 0x2, 0x1, 0x2, 0x5c05, 0x1, 0x2000000, 0x5, 0x80, 0xc8a9, 0x1000, 0x1]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000740)=r2) write$P9_ROPEN(r0, &(0x7f0000000780)={0x18, 0x71, 0x1, {{0x4, 0x4}, 0x1}}, 0x18) inotify_init1(0x80000) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20004000) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f00000008c0)) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000900)="61cf986691d5fc831c2eada0854e2b8d304e2b0beb1cf35e33ae", 0x1a) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000940)=0x80000000, &(0x7f0000000980)=0x4) 08:54:16 executing program 6: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4071}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8041}, 0x81) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0xc004804) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000300)=0x1, &(0x7f0000000340)=0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4810) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x800, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x54, "88161028a0c74e682d5961b57cb13631fc88079f8531a447d0423d81fcac1c29ef1bc640cb457d259c978fe358101c1c397157d95c7e1114464bbf680610c94a0aaec8ece2edcc101db95bbf1ca657d482459cc7"}, &(0x7f0000000680)=0x78) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10}}, './file0\x00'}) getsockopt$inet6_int(r5, 0x29, 0xd1, &(0x7f0000000700), &(0x7f0000000740)=0x4) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000780)={@local, @loopback}, &(0x7f00000007c0)=0xc) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x1408c0c0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000900)={0xfffffffa, 0xffffff81, 0x0, 'queue1\x00', 0xffffffff}) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000009c0)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)=@getae={0xe4, 0x1f, 0x1, 0x70bd28, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0xa, 0x6c}, @in=@local, 0x8000, 0x3504}, [@extra_flags={0x8, 0x18, 0x2}, @algo_comp={0x50, 0x3, {{'lzjh\x00'}, 0x40, "2896c39646a8717f"}}, @algo_auth={0x4b, 0x1, {{'sha1-ssse3\x00'}, 0x18, "df167c"}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x8051) 08:54:16 executing program 7: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet_group_source_req(r0, 0x0, 0x2a, &(0x7f0000000040)={0x7, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, {{0x2, 0x4e21, @remote}}}, 0x108) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x3, 0x1052c0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbcc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c891}, 0x10) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x8, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000580)={'icmp\x00'}, &(0x7f00000005c0)=0x1e) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000600), 0x2, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000640)=0x8) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x460000, 0x0) r5 = accept$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5, {0x4, 0x4}}, './file0\x00'}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780), 0x404000, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000007c0)={{0x1, 0x1, 0x7f, 0x1}, 0x4, 0x7f, 0x7}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000840)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) getsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000880), 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f00000008c0)=0x2, 0x4) [ 88.610331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.614133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.618237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.624415] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.627315] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.628559] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.683087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.688267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.689218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.691221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.693115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.695046] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.697397] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.701422] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.702875] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.703943] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.705105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.706078] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.745768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.748394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.750652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.753144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.754402] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.757370] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.759187] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.771072] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.775505] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.776762] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.778507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.782247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.786142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.793074] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.795398] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.799702] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.800122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.802335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.820910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.826378] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.835394] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.856111] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.882659] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.918140] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.919257] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.925359] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.937687] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.938881] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.954113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.955530] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.704364] Bluetooth: hci0: command tx timeout [ 90.768611] Bluetooth: hci1: command tx timeout [ 90.769587] Bluetooth: hci2: command tx timeout [ 90.896928] Bluetooth: hci3: command tx timeout [ 90.960249] Bluetooth: hci4: command tx timeout [ 90.961197] Bluetooth: hci5: command tx timeout [ 91.025083] Bluetooth: hci7: command tx timeout [ 91.026155] Bluetooth: hci6: command tx timeout [ 92.751975] Bluetooth: hci0: command tx timeout [ 92.816986] Bluetooth: hci2: command tx timeout [ 92.817543] Bluetooth: hci1: command tx timeout [ 92.944905] Bluetooth: hci3: command tx timeout [ 93.008023] Bluetooth: hci4: command tx timeout [ 93.008585] Bluetooth: hci5: command tx timeout [ 93.072108] Bluetooth: hci7: command tx timeout [ 93.072666] Bluetooth: hci6: command tx timeout [ 94.800898] Bluetooth: hci0: command tx timeout [ 94.864851] Bluetooth: hci2: command tx timeout [ 94.865412] Bluetooth: hci1: command tx timeout [ 94.993978] Bluetooth: hci3: command tx timeout [ 95.056596] Bluetooth: hci5: command tx timeout [ 95.057182] Bluetooth: hci4: command tx timeout [ 95.119878] Bluetooth: hci7: command tx timeout [ 95.120471] Bluetooth: hci6: command tx timeout [ 96.847902] Bluetooth: hci0: command tx timeout [ 96.913865] Bluetooth: hci1: command tx timeout [ 96.914427] Bluetooth: hci2: command tx timeout [ 97.041896] Bluetooth: hci3: command tx timeout [ 97.105125] Bluetooth: hci4: command tx timeout [ 97.105652] Bluetooth: hci5: command tx timeout [ 97.168983] Bluetooth: hci6: command tx timeout [ 97.169517] Bluetooth: hci7: command tx timeout [ 151.134449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.135937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.152530] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.156210] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.161023] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.162151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.393397] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.399389] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.403273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.430194] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.431048] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.434247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.436694] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.438409] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.445808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.449753] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.460382] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.469076] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.470221] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.472235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.473703] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.476312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.486104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.489712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.494014] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.532657] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.536014] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.537696] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.540739] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.559124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.565193] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.567120] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.568202] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.569710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.577873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.579600] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.587133] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.601379] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.605705] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.617727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.626187] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.630450] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.648152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.657118] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.660567] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.667369] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.675431] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.677431] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.231904] Bluetooth: hci0: command tx timeout [ 153.552185] Bluetooth: hci2: command tx timeout [ 153.553014] Bluetooth: hci1: command tx timeout [ 153.616023] Bluetooth: hci4: command tx timeout [ 153.679862] Bluetooth: hci3: command tx timeout [ 153.680447] Bluetooth: hci5: command tx timeout [ 153.744135] Bluetooth: hci6: command tx timeout [ 153.744704] Bluetooth: hci7: command tx timeout [ 155.280889] Bluetooth: hci0: command tx timeout [ 155.600033] Bluetooth: hci1: command tx timeout [ 155.601250] Bluetooth: hci2: command tx timeout [ 155.664572] Bluetooth: hci4: command tx timeout [ 155.728192] Bluetooth: hci5: command tx timeout [ 155.730186] Bluetooth: hci3: command tx timeout [ 155.792065] Bluetooth: hci7: command tx timeout [ 155.793432] Bluetooth: hci6: command tx timeout [ 157.327939] Bluetooth: hci0: command tx timeout [ 157.647907] Bluetooth: hci2: command tx timeout [ 157.648389] Bluetooth: hci1: command tx timeout [ 157.711935] Bluetooth: hci4: command tx timeout [ 157.775883] Bluetooth: hci5: command tx timeout [ 157.776371] Bluetooth: hci3: command tx timeout [ 157.840053] Bluetooth: hci6: command tx timeout [ 157.840530] Bluetooth: hci7: command tx timeout [ 159.376917] Bluetooth: hci0: command tx timeout [ 159.695879] Bluetooth: hci1: command tx timeout [ 159.696378] Bluetooth: hci2: command tx timeout [ 159.759897] Bluetooth: hci4: command tx timeout [ 159.823881] Bluetooth: hci3: command tx timeout [ 159.824366] Bluetooth: hci5: command tx timeout [ 159.887852] Bluetooth: hci6: command tx timeout [ 159.888314] Bluetooth: hci7: command tx timeout [ 213.487383] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.502879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.505853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.511070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.523078] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.524726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.527013] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.530030] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.533340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.542362] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.542379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.550264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.563274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.565299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.571934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.577683] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.597005] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.600896] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.677815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.686233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.693056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.756644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.762356] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.767051] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.777956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.780519] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.784178] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.792868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.796948] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.804694] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.807105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.822470] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.871306] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.882182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.887687] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.892432] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.894301] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.898205] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.902106] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.903496] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.905243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.907408] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.914627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.916260] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.917193] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.936125] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.942328] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.943663] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.568140] Bluetooth: hci0: command tx timeout [ 215.632254] Bluetooth: hci2: command tx timeout [ 215.633996] Bluetooth: hci1: command tx timeout [ 215.889194] Bluetooth: hci3: command tx timeout [ 215.889215] Bluetooth: hci4: command tx timeout [ 215.951953] Bluetooth: hci6: command tx timeout [ 215.952078] Bluetooth: hci5: command tx timeout [ 216.016020] Bluetooth: hci7: command tx timeout [ 217.615974] Bluetooth: hci0: command tx timeout [ 217.679970] Bluetooth: hci2: command tx timeout [ 217.682816] Bluetooth: hci1: command tx timeout [ 217.935995] Bluetooth: hci4: command tx timeout [ 217.936850] Bluetooth: hci3: command tx timeout [ 218.000064] Bluetooth: hci6: command tx timeout [ 218.000089] Bluetooth: hci5: command tx timeout [ 218.064356] Bluetooth: hci7: command tx timeout [ 219.663965] Bluetooth: hci0: command tx timeout [ 219.729857] Bluetooth: hci1: command tx timeout [ 219.729891] Bluetooth: hci2: command tx timeout [ 219.983861] Bluetooth: hci3: command tx timeout [ 219.984358] Bluetooth: hci4: command tx timeout [ 220.047836] Bluetooth: hci6: command tx timeout [ 220.049920] Bluetooth: hci5: command tx timeout [ 220.113885] Bluetooth: hci7: command tx timeout [ 221.711995] Bluetooth: hci0: command tx timeout [ 221.775968] Bluetooth: hci2: command tx timeout [ 221.776897] Bluetooth: hci1: command tx timeout [ 222.031903] Bluetooth: hci3: command tx timeout [ 222.032423] Bluetooth: hci4: command tx timeout [ 222.095924] Bluetooth: hci5: command tx timeout [ 222.095958] Bluetooth: hci6: command tx timeout [ 222.160011] Bluetooth: hci7: command tx timeout [ 275.618207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.624097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.628461] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.634705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.640999] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.643197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.809168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.815352] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.818215] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.828151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.837310] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.839666] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.871459] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.878074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.880006] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.890924] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.894386] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.896631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.950685] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.958545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.020002] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.033984] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.037577] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.042011] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.050370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.057414] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.064554] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.066196] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.066878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.070704] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.081300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.104254] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.110452] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.114122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.120494] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.135514] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.141392] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.161359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.163943] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.171431] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.184100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.202051] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.223956] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.240582] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.250542] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.252568] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.252604] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.267065] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.711857] Bluetooth: hci0: command tx timeout [ 277.903854] Bluetooth: hci1: command tx timeout [ 277.967849] Bluetooth: hci2: command tx timeout [ 278.223881] Bluetooth: hci3: command tx timeout [ 278.287961] Bluetooth: hci6: command tx timeout [ 278.351923] Bluetooth: hci5: command tx timeout [ 278.416813] Bluetooth: hci7: command tx timeout [ 278.417678] Bluetooth: hci4: command tx timeout [ 279.761857] Bluetooth: hci0: command tx timeout [ 279.951906] Bluetooth: hci1: command tx timeout [ 280.015932] Bluetooth: hci2: command tx timeout [ 280.271898] Bluetooth: hci3: command tx timeout [ 280.335931] Bluetooth: hci6: command tx timeout [ 280.401808] Bluetooth: hci5: command tx timeout [ 280.463875] Bluetooth: hci7: command tx timeout [ 280.464845] Bluetooth: hci4: command tx timeout [ 281.808871] Bluetooth: hci0: command tx timeout [ 282.001459] Bluetooth: hci1: command tx timeout [ 282.064808] Bluetooth: hci2: command tx timeout [ 282.319861] Bluetooth: hci3: command tx timeout [ 282.383839] Bluetooth: hci6: command tx timeout [ 282.448848] Bluetooth: hci5: command tx timeout [ 282.512983] Bluetooth: hci4: command tx timeout [ 282.513004] Bluetooth: hci7: command tx timeout [ 283.856848] Bluetooth: hci0: command tx timeout [ 284.048867] Bluetooth: hci1: command tx timeout [ 284.111825] Bluetooth: hci2: command tx timeout [ 284.367906] Bluetooth: hci3: command tx timeout [ 284.432843] Bluetooth: hci6: command tx timeout [ 284.496781] Bluetooth: hci5: command tx timeout [ 284.559930] Bluetooth: hci7: command tx timeout [ 284.560413] Bluetooth: hci4: command tx timeout [ 336.303708] [ 336.303998] ====================================================== [ 336.304653] WARNING: possible circular locking dependency detected [ 336.305296] 6.13.0-next-20250123 #1 Not tainted [ 336.305791] ------------------------------------------------------ [ 336.307080] kworker/u8:0/11 is trying to acquire lock: [ 336.308069] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.309801] [ 336.309801] but task is already holding lock: [ 336.310987] ffff888036900768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 336.313335] [ 336.313335] which lock already depends on the new lock. [ 336.313335] [ 336.314859] [ 336.314859] the existing dependency chain (in reverse order) is: [ 336.316188] [ 336.316188] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 336.317669] __mutex_lock+0x13d/0xb50 [ 336.318173] wiphy_register+0x1b2e/0x25d0 [ 336.318722] ieee80211_register_hw+0x23a4/0x3d60 [ 336.319313] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 336.319934] init_mac80211_hwsim+0x389/0x870 [ 336.320530] do_one_initcall+0xf9/0x640 [ 336.321065] kernel_init_freeable+0x53d/0x7a0 [ 336.321640] kernel_init+0x1e/0x2d0 [ 336.322109] ret_from_fork+0x48/0x80 [ 336.322583] ret_from_fork_asm+0x1a/0x30 [ 336.323129] [ 336.323129] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 336.323800] __lock_acquire+0x29fd/0x4580 [ 336.324349] lock_acquire+0x19b/0x520 [ 336.324846] __mutex_lock+0x13d/0xb50 [ 336.325354] unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.326036] unregister_netdevice_queue+0x224/0x2e0 [ 336.326644] _cfg80211_unregister_wdev+0x57b/0x700 [ 336.327250] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 336.327853] ieee80211_unregister_hw+0x55/0x3a0 [ 336.328440] hwsim_exit_net+0x3a0/0x730 [ 336.328948] ops_exit_list+0xb3/0x180 [ 336.329434] cleanup_net+0x546/0xad0 [ 336.329913] process_one_work+0x8ee/0x1a10 [ 336.330466] worker_thread+0x674/0xe70 [ 336.330983] kthread+0x3ab/0x720 [ 336.331443] ret_from_fork+0x48/0x80 [ 336.331915] ret_from_fork_asm+0x1a/0x30 [ 336.332458] [ 336.332458] other info that might help us debug this: [ 336.332458] [ 336.333274] Possible unsafe locking scenario: [ 336.333274] [ 336.333909] CPU0 CPU1 [ 336.334398] ---- ---- [ 336.334890] lock(&rdev->wiphy.mtx); [ 336.335326] lock(rtnl_mutex); [ 336.335957] lock(&rdev->wiphy.mtx); [ 336.336640] lock(rtnl_mutex); [ 336.337022] [ 336.337022] *** DEADLOCK *** [ 336.337022] [ 336.337637] 4 locks held by kworker/u8:0/11: [ 336.338118] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 336.339212] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 336.340272] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 336.341254] #3: ffff888036900768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 336.342370] [ 336.342370] stack backtrace: [ 336.342841] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250123 #1 [ 336.342887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 336.342916] Workqueue: netns cleanup_net [ 336.342968] Call Trace: [ 336.342980] [ 336.342994] dump_stack_lvl+0xca/0x120 [ 336.343067] print_circular_bug+0x47b/0x750 [ 336.343125] check_noncircular+0x2e9/0x3c0 [ 336.343176] ? lock_repin_lock+0x207/0x320 [ 336.343250] ? __pfx_check_noncircular+0x10/0x10 [ 336.343302] ? hlock_class+0x4e/0x130 [ 336.343340] ? mark_lock+0xac/0xed0 [ 336.343389] ? __pfx_lock_repin_lock+0x10/0x10 [ 336.343464] ? timerqueue_del+0x83/0x150 [ 336.343519] ? lockdep_lock+0xba/0x1b0 [ 336.343590] ? __pfx_lockdep_lock+0x10/0x10 [ 336.343668] __lock_acquire+0x29fd/0x4580 [ 336.343735] ? __pfx___lock_acquire+0x10/0x10 [ 336.343789] ? lock_release+0x20f/0x6f0 [ 336.343844] ? __pfx_lock_release+0x10/0x10 [ 336.343904] lock_acquire+0x19b/0x520 [ 336.343959] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.344021] ? __pfx_lock_acquire+0x10/0x10 [ 336.344077] ? srso_return_thunk+0x5/0x5f [ 336.344147] ? lock_release+0x20f/0x6f0 [ 336.344202] ? srso_return_thunk+0x5/0x5f [ 336.344280] ? lock_is_held_type+0x9e/0x120 [ 336.344350] ? srso_return_thunk+0x5/0x5f [ 336.344425] __mutex_lock+0x13d/0xb50 [ 336.344491] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.344549] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.344608] ? srso_return_thunk+0x5/0x5f [ 336.344678] ? synchronize_rcu_expedited+0x38a/0x420 [ 336.344733] ? __pfx___mutex_lock+0x10/0x10 [ 336.344801] ? __pfx_autoremove_wake_function+0x10/0x10 [ 336.344868] ? srso_return_thunk+0x5/0x5f [ 336.344938] ? kasan_quarantine_put+0x84/0x1e0 [ 336.345014] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 336.345058] ? srso_return_thunk+0x5/0x5f [ 336.345134] unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.345192] ? __virt_addr_valid+0x2e8/0x5d0 [ 336.345258] ? __pfx_lock_release+0x10/0x10 [ 336.345314] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 336.345372] ? find_held_lock+0x2c/0x110 [ 336.345445] ? srso_return_thunk+0x5/0x5f [ 336.345518] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 336.345594] ? srso_return_thunk+0x5/0x5f [ 336.345664] ? lock_release+0x20f/0x6f0 [ 336.345719] ? __pfx_lock_release+0x10/0x10 [ 336.345773] ? srso_return_thunk+0x5/0x5f [ 336.345843] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 336.345903] ? srso_return_thunk+0x5/0x5f [ 336.345979] unregister_netdevice_queue+0x224/0x2e0 [ 336.346035] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 336.346091] ? up_write+0x195/0x520 [ 336.346159] _cfg80211_unregister_wdev+0x57b/0x700 [ 336.346225] ? srso_return_thunk+0x5/0x5f [ 336.346300] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 336.346349] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 336.346399] ? srso_return_thunk+0x5/0x5f [ 336.346469] ? srso_return_thunk+0x5/0x5f [ 336.346539] ? synchronize_rcu+0x1ff/0x260 [ 336.346592] ieee80211_unregister_hw+0x55/0x3a0 [ 336.346649] hwsim_exit_net+0x3a0/0x730 [ 336.346703] ? __pfx_hwsim_exit_net+0x10/0x10 [ 336.346755] ? srso_return_thunk+0x5/0x5f [ 336.346825] ? netdev_run_todo+0x788/0x1040 [ 336.346887] ? __pfx_hwsim_exit_net+0x10/0x10 [ 336.346942] ops_exit_list+0xb3/0x180 [ 336.346996] cleanup_net+0x546/0xad0 [ 336.347053] ? __pfx_cleanup_net+0x10/0x10 [ 336.347121] process_one_work+0x8ee/0x1a10 [ 336.347203] ? __pfx_lock_acquire+0x10/0x10 [ 336.347258] ? __pfx_process_one_work+0x10/0x10 [ 336.347331] ? srso_return_thunk+0x5/0x5f [ 336.347401] ? move_linked_works+0x172/0x270 [ 336.347457] ? srso_return_thunk+0x5/0x5f [ 336.347527] ? assign_work+0x196/0x240 [ 336.347599] worker_thread+0x674/0xe70 [ 336.347672] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 336.347738] ? __pfx_worker_thread+0x10/0x10 [ 336.347812] kthread+0x3ab/0x720 [ 336.347876] ? __pfx_kthread+0x10/0x10 [ 336.347941] ? srso_return_thunk+0x5/0x5f [ 336.348011] ? finish_task_switch.isra.0+0x206/0x840 [ 336.348076] ? __pfx_kthread+0x10/0x10 [ 336.348143] ret_from_fork+0x48/0x80 [ 336.348182] ? __pfx_kthread+0x10/0x10 [ 336.348256] ret_from_fork_asm+0x1a/0x30 [ 336.348339] [ 337.754084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.755900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.757491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.760349] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.764413] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.768050] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.140547] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.142448] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.148567] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.152474] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.155947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.158072] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.160884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.161263] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.164312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.172576] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.176327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.177906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.179601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.184485] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.186378] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.189504] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.191315] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.197867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.218274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.222512] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.224382] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.234090] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.236212] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.237632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.240204] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.245424] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.251910] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.254470] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.256600] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.258218] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.264363] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.267316] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.268700] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.270375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.279274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.280950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.332784] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.336964] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.350707] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.355785] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.358313] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.363100] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.791794] Bluetooth: hci0: command tx timeout [ 340.241853] Bluetooth: hci3: command tx timeout [ 340.241979] Bluetooth: hci1: command tx timeout [ 340.303895] Bluetooth: hci4: command tx timeout [ 340.304685] Bluetooth: hci5: command tx timeout [ 340.305760] Bluetooth: hci6: command tx timeout [ 340.305985] Bluetooth: hci2: command tx timeout [ 340.431838] Bluetooth: hci7: command tx timeout [ 341.839822] Bluetooth: hci0: command tx timeout [ 342.287972] Bluetooth: hci3: command tx timeout [ 342.288651] Bluetooth: hci1: command tx timeout [ 342.351957] Bluetooth: hci6: command tx timeout [ 342.352613] Bluetooth: hci5: command tx timeout [ 342.353595] Bluetooth: hci2: command tx timeout [ 342.354220] Bluetooth: hci4: command tx timeout [ 342.479831] Bluetooth: hci7: command tx timeout [ 343.887768] Bluetooth: hci0: command tx timeout [ 344.336001] Bluetooth: hci1: command tx timeout [ 344.336480] Bluetooth: hci3: command tx timeout [ 344.399951] Bluetooth: hci2: command tx timeout [ 344.400536] Bluetooth: hci5: command tx timeout [ 344.401198] Bluetooth: hci4: command tx timeout [ 344.401696] Bluetooth: hci6: command tx timeout [ 344.528963] Bluetooth: hci7: command tx timeout [ 345.937801] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 08:58:25 Registers: info registers vcpu 0 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283eaa5 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095dec90 R8 =0000000000000000 R9 =ffffed1001e0f046 R10=0000000000000072 R11=3038383866666666 R12=0000000000000072 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283ea90 RIP=ffffffff8283eafd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe16ad83230 CR3=0000000013baa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=740cc6cad31e6aadf24720757f3a2278 XMM02=d12871896912de2d00000000000febc8 XMM03=f9980df3bdc2dbad0000000000133670 XMM04=0041796904ad8ee200000000000ae988 XMM05=ebfae20747c011c5000000000014f1b0 XMM06=9f165a4fe6c971ad0000000000137300 XMM07=711fbe8126c5d34400000000001371f8 XMM08=68a8aee3740b9fad00000000000fece8 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000202000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88806cf00000 RBX=0000000000000001 RCX=ffffffff84a8e9d7 RDX=ffffed100d9e6c4b RSI=0000000000000004 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffff88800970fe68 R8 =0000000000000000 R9 =ffffed100d9e6c4a R10=ffff88806cf36253 R11=0000000000000001 R12=ffffffff864043d0 R13=1ffff110012e1fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffede6d4ff8 CR3=000000002e198000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000004ffffffff000055cb3be2b000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055cb3be229e0000055cb3be3c040 XMM06=000055cb3bdfdc200000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000