syzkaller login: [ 66.626431] sshd (231) used greatest stack depth: 24072 bytes left Warning: Permanently added '[localhost]:62227' (ECDSA) to the list of known hosts. 2025/01/26 22:53:16 fuzzer started 2025/01/26 22:53:17 dialing manager at localhost:40883 [ 69.243944] cgroup: Unknown subsys name 'net' [ 69.373439] cgroup: Unknown subsys name 'cpuset' [ 69.424151] cgroup: Unknown subsys name 'rlimit' [ 75.237957] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/26 22:53:35 syscalls: 2217 2025/01/26 22:53:35 code coverage: enabled 2025/01/26 22:53:35 comparison tracing: enabled 2025/01/26 22:53:35 extra coverage: enabled 2025/01/26 22:53:35 setuid sandbox: enabled 2025/01/26 22:53:35 namespace sandbox: enabled 2025/01/26 22:53:35 Android sandbox: enabled 2025/01/26 22:53:35 fault injection: enabled 2025/01/26 22:53:35 leak checking: enabled 2025/01/26 22:53:35 net packet injection: enabled 2025/01/26 22:53:35 net device setup: enabled 2025/01/26 22:53:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/26 22:53:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/26 22:53:35 USB emulation: enabled 2025/01/26 22:53:35 hci packet injection: enabled 2025/01/26 22:53:35 wifi device emulation: enabled 2025/01/26 22:53:35 802.15.4 emulation: enabled 2025/01/26 22:53:35 fetching corpus: 50, signal 8321/9763 (executing program) 2025/01/26 22:53:35 fetching corpus: 100, signal 10849/13369 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/14637 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/15896 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/17154 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/18426 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/19698 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/20963 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/22242 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/23473 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/24712 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/25977 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/27244 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/28469 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/29208 (executing program) 2025/01/26 22:53:35 fetching corpus: 112, signal 10897/29208 (executing program) 2025/01/26 22:53:40 starting 8 fuzzer processes 22:53:40 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x9, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000100)="68f5a13fb88369087987c54b17b44f81e41b0bf3910f7fec57cc420cce185c8c23aeeab4fd9e5d055bc6feb8c947a0915f251e8df8a3c5f640282e591e488e289156e1255c964c6e3132cb39f915d29ac30b996acdce81589f3d89d3c9f6b6e8fc8eff58dde2bc58d23fed46cb9039f7cecd676c8694f2a3e1bdc14e775b0dfec2784ff55c9297bceddcdcf36e609a15ce26effb4a930db70d25433c7fe9aa67a43e29f6977d1be830800661b08c9884481f8520705b6007", 0xb8, 0x4}, {&(0x7f00000001c0)="f5fdd45006942c2d0c4c9802c24dbe0fc291e554bda3c000077243cb5fd980990676bfcdcf18d9617f4b1b99dda3e2e3300a4383d30492208038fd699ff31f3a8ac70dd4267b2534001e225c7c36f54b529ed81cd95dd1bd82e18a8d5e241ed656a1c1bb9482d1370fa8ae1a4caa3c4c78e57401d463740dc9d97e8a64ded5476f1fa729784eb718ef84829ab70cb628ac074eebd85a47281d2598a4cff68f997020230ca03940c112bb5711929c395eeb8e8a6e3932ef70d00c6f68a2022add638239ad0a10939d82dd61f31fdf833e707b87e2794dbd30086eeea305e01fdc0a11a5f41292d042d1e99a6604b670526ed44d30c15232a8", 0xf8, 0x1}, {&(0x7f00000002c0)="1bb07993ac0b7bf05ceab56a3c460ceba869edb79d8352b95356f8a4f320b0213286554ba8ad66759abe058cd0135c5d8f7ea2cb466b7861d3afedf8f6ae9568f917440c292d289ce72159ede3a1536d", 0x50, 0x7fffffff}, {&(0x7f0000000340)="4041238877951d2b41a0ca0d00812a6f0389bf0e644e41d6b672330b248a57772b07b428752b500e7be762f004ae62bdc3d1ee10c117b1f967543533ef300a0cd829b6a86d69596e91a2a88da35cc44fa2a5eae3bc8345117d8b2c169eb0b92c18dffe63dfaaf9c5819a", 0x6a, 0xff9}, {&(0x7f00000003c0)="31e9a2bc3d89a0c7a5add68adeab0bba12676eaccfc75dad3e10992c613b3a289d1bb3b9a016ab10", 0x28, 0x10}, {&(0x7f0000000400)="fa6c584efdd3a50ea40e8b7bf3679eb3310e48ea7ee0ff339f6e943ea876b9b4a11ae96be13dadfa15ea764133d59862", 0x30, 0x20}, {&(0x7f0000000440)="732da7e448c94ffc07c433bdcbc2dee99349042ff359a73b2dec4137ca2c9a8888a30e42f2f97ce44b62e4513c7452f5768eb7d943e5d636a5dfbd27f487b0c081", 0x41, 0x9}, {&(0x7f00000004c0)="e8484c753f0324fdecd6c346a092cb570e8019bf6a36f496cee2f6c13b8e04e0523cc174295caf15650b2afa8632de62b4ac0d6abe81eb751947302d324907db5a9cb23f47c0996fe7c8d4c6fa4a0e1cf671aaf59c4ca2e0e559cd4b217006063012dbe5b319155dc5c50e6046c2c7c8901bb31eb335078539b752f9df091e2cb423dac4234b4a02a126e43920050b695858e6d86b0cd8fd15df98eb5b09a0dd0f72ca232bea10c63df071a09b969937df8b65f3c4b7fab845f2e430d6db78815d5648a6a156d9c2844516424a4d7fbf4e759880ee8d15109147c35b17942ff756de66d5", 0xe4, 0x1}], 0x40000, &(0x7f0000000680)={[{@utf8}, {@numtail}, {@utf8}, {@shortname_lower}, {@utf8no}, {@fat=@check_normal}], [{@appraise_type}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x10002, 0x0) r5 = mq_open(&(0x7f0000000740)='\x00', 0x800, 0x8e, &(0x7f0000000780)={0x1, 0x8, 0x4, 0x6}) ppoll(&(0x7f00000007c0)=[{r0, 0xa2c0}, {r1, 0x80}, {r2}, {r3, 0x2200}, {0xffffffffffffffff, 0x44}, {0xffffffffffffffff, 0x1001}, {r4, 0x4628}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x4310}, {r5}], 0xa, &(0x7f0000000840)={0x0, 0x3938700}, &(0x7f0000000880)={[0x2]}, 0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000008c0)={0x0, 0x80000000, 0x1, [0x6, 0x401, 0x3, 0x4000000000000, 0x8000], [0x4, 0x101, 0x76f7, 0x4, 0x20, 0x1, 0x80, 0x100000000, 0xff, 0x52c0, 0xff, 0x8001, 0x94, 0xffffffff80000001, 0x7, 0xfffffffffffffffa, 0x10000, 0xcf, 0x200, 0x6, 0x66a, 0x9e7c, 0xbd, 0x4b, 0x6, 0x10000, 0x101, 0xb5ac, 0x2, 0x88, 0x81, 0x7, 0x6, 0xfffffffffffffff8, 0x1, 0x1ff, 0x6, 0x6, 0x100000001, 0x9, 0x100, 0x0, 0x3, 0x100, 0x8, 0x92, 0x2, 0x8, 0x200, 0x7fff, 0xd8, 0x8001, 0x5, 0x4, 0x5, 0x4, 0x7f, 0x4, 0x6, 0x5, 0xffff, 0x0, 0x9, 0x1, 0x4, 0xbb, 0x100000001, 0x3, 0xfffffffffffffff9, 0x1, 0x7, 0x1, 0xffff, 0xff, 0x9, 0x10001, 0x20, 0x9, 0x400, 0x0, 0xfffffffffffffff8, 0x2, 0xfff, 0x80000000, 0x9, 0x34d, 0x0, 0x2, 0x200, 0x2821, 0x5, 0x8, 0x101, 0x0, 0x0, 0x2, 0x2, 0x4, 0x3495c7a6, 0x100, 0x19bb, 0x1, 0x2, 0x2, 0x7, 0x7, 0x9, 0xff, 0x11, 0x3, 0x8, 0x3, 0x5, 0x0, 0x200, 0x1000, 0x1, 0x1, 0x2, 0xffffffff, 0x100000001]}) fsetxattr$security_ima(r3, &(0x7f0000000d00), &(0x7f0000000d40)=@sha1={0x1, "708aa3aec6b0a0dfeaff6fe5f40c72950b32f1db"}, 0x15, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r3, {r5}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r4, {0x8001}}, './file0\x00'}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000e40)={0x5, 0x7, 0x5, 0xff, 0x7}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000e80)) mknod(&(0x7f0000000ec0)='\x00', 0x2, 0x7) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000f00)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x6, 0x80000001, 0x6, 0xfffffffffffffa32, 0x6, 0x40e}, {0xfff, 0xfffffffe, 0x0, 0x2, 0x2}], ['\x00']}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001000)={'wlan0\x00'}) 22:53:40 executing program 1: ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'vlan0\x00', @ifru_data=&(0x7f0000000000)="0793b46ae7f2a6f746af26eea0b55a7296a4f782358fcf8a763528079c4c7ee9"}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'ipvlan0\x00', {0x4}, 0x7}) r1 = socket$inet(0x2, 0x4, 0xff) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd4, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20008080) getsockopt(r1, 0xb8, 0x7, &(0x7f00000002c0)=""/35, &(0x7f0000000300)=0x23) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x7, 0x51a, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x2, 0x84a, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, @private1, 0x20, 0x20, 0x8001, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x3f, 0x8, {{0x4d, 0x4, 0x1, 0x6, 0x134, 0x65, 0x0, 0xf3, 0x2f, 0x0, @empty, @multicast2, {[@rr={0x7, 0xb, 0x8, [@local, @dev={0xac, 0x14, 0x14, 0x24}]}, @timestamp_addr={0x44, 0x14, 0x35, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast1}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x30, 0xffffffffffffffff, [{0x6, 0xd, "8e5ad34a45a172b0f3be7b"}, {0x0, 0x11, "162a93b438812eb8ba91fa26a7ee3f"}, {0x6, 0x6, "8f8dad31"}, {0x6, 0x6, "a1e8cf0a"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xea, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x5}]}, @timestamp_addr={0x44, 0x2c, 0x90, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x2}, {@empty, 0x1000}, {@rand_addr=0x64010102, 0x20}, {@local, 0xfff}, {@rand_addr=0x64010101, 0xa283}]}, @cipso={0x86, 0x83, 0x1, [{0x5, 0x10, "3ccb19c0438a5d6df4b97848d1e6"}, {0x7, 0xc, "e6df30c10e8beb06003d"}, {0x2, 0x12, "cd67dc9544a370efebe6fb0a362a29b2"}, {0x2, 0x12, "c8bbcb762da5cc8841b2b0e60098e54c"}, {0x0, 0x9, "3d9598398c5d10"}, {0x0, 0x4, "adb2"}, {0x0, 0x11, "63ebcfd27b9628a2fcf1a638a5fc68"}, {0x0, 0x10, "5818c42e29db78e2f904e52aba6b"}, {0x0, 0x4, 'hl'}, {0x0, 0xb, "0405bec6f9e07421db"}]}, @timestamp_prespec={0x44, 0xc, 0x9f, 0x3, 0x7, [{@broadcast, 0x9}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000980)={'erspan0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x2, 0x7, {{0x1b, 0x4, 0x2, 0x3e, 0x6c, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@noop, @timestamp_addr={0x44, 0x24, 0xdd, 0x1, 0x8, [{@private=0xa010102, 0x2}, {@broadcast}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xde, 0x0, 0x3, [0x2]}, @timestamp_addr={0x44, 0x4, 0x51, 0x1, 0x5}, @timestamp_addr={0x44, 0x1c, 0x3d, 0x1, 0x4, [{@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7fffffff}, {@private=0xa010102, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f00000009c0)={0x540, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffeff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r4}, {0x144, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x2, 0x20, 0xa35}, {0x1, 0x0, 0x6, 0x6f1}, {0xf000, 0x6, 0x80, 0x800}, {0x6, 0x7, 0x81, 0x8001}, {0x0, 0x40, 0x8, 0x3}, {0xfffb, 0x3, 0x2, 0x20}, {0xfff, 0x4, 0x7, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x4080}, 0x4a000) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24000011) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000001080), &(0x7f00000010c0)=0xc) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000001100), 0x80, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x140, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x70000}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x146b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x44010}, 0x88c1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000001340)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000001380), &(0x7f00000013c0)={'L-', 0x1f}, 0x16, 0x0) 22:53:40 executing program 2: io_setup(0x20, &(0x7f0000000000)=0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1f, 0xffffffffffffffff, &(0x7f0000000040)="90c3220dcce50cf3c9bed85398d338e5a3c77edd3b6d272f6d8389d1ebf483a560a87a611557f3a9e43d7188e45ccfa41b47d8c85e1462c14b18a622a48c3cf9ea33433b0dfd1ac3c67a6b2207b9", 0x4e, 0x30, 0x0, 0x3, r1}, &(0x7f0000000140)) io_pgetevents(r0, 0xfffffffffffffffc, 0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000002c0)={{r1}, 0x2, 0xffffffffffffffe0, 0xcd4a}) r2 = eventfd2(0x8, 0x80800) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8, 0x10000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000340)={0x0, r3, 0x2, 0x1ff, 0x2, 0x9}) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x448100, 0xc, 0x16}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = signalfd4(r1, &(0x7f0000000440)={[0x5]}, 0x8, 0x80800) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x200000, 0x0) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f00000004c0)=""/215) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) io_cancel(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x6, r7, &(0x7f00000005c0)="d20c4210fa17fdf42beb66", 0xb, 0x6, 0x0, 0x2}, &(0x7f0000000640)) r8 = open(&(0x7f0000000680)='./file0\x00', 0x400, 0x2) fsetxattr$trusted_overlay_origin(r8, &(0x7f00000006c0), &(0x7f0000000700), 0x2, 0x3) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000740)={0x80000000}) dup2(r6, 0xffffffffffffffff) [ 91.785190] audit: type=1400 audit(1737932020.157:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:53:40 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x25847e0026de9c5b}, 0x800) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x5000}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x402}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x81) r2 = syz_open_dev$vcsu(&(0x7f0000000540), 0x7fffffff, 0x50000) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xf8, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x14a1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) socketpair(0x1d, 0x1, 0x6, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000001c80)={0x7, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1, 0x7, [{{0x2, 0x4e22, @private=0xa010100}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e24, @multicast2}}]}, 0x410) r4 = openat$cgroup_ro(r2, &(0x7f0000002100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000020c0), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000002380)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002340)={&(0x7f0000002180)={0x1b0, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xac, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ee817e0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x397266b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7266dcc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c1dc7ff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f3be0cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dac021e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5326fa5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44bc2fd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d086994}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000023c0)={0x1, 0xffff}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002400), 0x34941, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x48041) write$P9_RWALK(r6, &(0x7f0000002540)={0x16, 0x6f, 0x1, {0x1, [{0x4, 0x1, 0x7}]}}, 0x16) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000002580)={'security\x00', 0x1000, "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"}, &(0x7f00000035c0)=0x1024) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003880)={&(0x7f0000003800)={0x5c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) 22:53:40 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1976be1018af5742}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x284, 0x39, 0x100, 0x70bd26, 0x25dfdbfb, {0x1d}, [@nested={0xcb, 0x91, 0x0, 0x1, [@typed={0x4, 0x31}, @typed={0x8, 0x22, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="fce6990514b097735e45b932b680da5d2e6fe06161906fbeded87c5c82dfb906a48232b4edfbd42c59279956077ce97839e3083ce17d5c0dce207e2535eb18d00560a6c1eab21310f3f514674ac31d7c75a00abf498697b8952cbe6a98dd59505f6baf03830e2b4d0d654deda25443ff63474d1a126563c60b7d5e3937bbe5f60836e34ea100ef0da57c801d05ab490cb2cade70c7981098576e71a40ed70b", @typed={0xc, 0x53, 0x0, 0x0, @u64=0x5667c2bc}, @typed={0x8, 0x74, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, @typed={0x5, 0x15, 0x0, 0x0, @str='\x00'}, @typed={0x7a, 0x81, 0x0, 0x0, @binary="a685a426d3f2b5df3ee7b13a40e0c760d1655ed922398eb3b90d767bdb2ddee359b8c637d1c9dcf8d7561885fc15c284d377b89ff55e0ff4be9391f2db8c2351f8044a394ff997d9bb4ba438224e1bbea954fd5408d5de2d2d3a4495666cd1339556173a74771cd4647ea969181d48aaec2af34fdda4"}, @nested={0x28, 0x8f, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @u32=0xffffffff}, @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x3f, 0x0, 0x0, @fd}]}, @nested={0xf7, 0x1a, 0x0, 0x1, [@generic="415a4cf7b103ece1ea4a8cc12a035255876d3f731e7a62538384017eecf4b870386cc305aafb500bbd4e32193612fa26cb30bacd2d45ca", @typed={0xc, 0x70, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x65, 0x0, 0x0, @ipv6=@local}, @generic="ebc9e42b3a1af7ce46edd60619ac40c6c4794c2c032486a23c1f3d2bf9f45bf951da0303785db31ba516dff78b29e4e2e0b7c8500b9d4140fe538f60ff66a6d6ec8c4382124f565774a9abd11e5a61c8f404bb773342ebdb09c4b18a664bd6f297a2e6fc35c50e1927f7f6c4066e0aad5681266f7fcd9ed304017e183081bb0b8543f4bdacd36c4fd0224633b6c41d4f3b4047fadc4fa903479c7840"]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000400)) fcntl$setsig(r0, 0xa, 0x36) ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r4, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffc01, 0x8}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) mount$9p_virtio(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x100000, &(0x7f0000000800)={'trans=virtio,', {[{@version_9p2000}, {@version_L}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@subj_user={'subj_user', 0x3d, '/proc/timer_list\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '(\\)}'}}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x10100, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000900)={0x244, r4, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x3e}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x3, 0x1, 0x0, {0x80000000, 0x0, 0x0, 0x81, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x708, 0x20, 0x1}}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}, @NL80211_ATTR_PMK={0x102, 0xfe, "26d482bf77141b0769f0210ee107f321a1eeb6d3b682824450becdef8852dcc352a796489f30ff5fa8813849bcff4be97c0d29e091a1b720fceed420a336596db3e5cbb6a4ac1b3ca9962c687d6eab51484acd222b702caf4d150da1cac4998a758299fa756cef94a8319cfbb3a425352e1eab33be623f08c521c3d66d48c95d1d6382365d11974dcf2399bd2537463b287892ca1114dc7545215f5f8d8c24859bd6f55ea9484d58bcc80f3851f11e90cdcf40f41b693c54846c8a3a22eaa0b260b87c62a48ebfa95bedc5c36d1971ad38e1208bcc6c9e46f1266106a560c06769eafd7abd3eabc25c3145f476c09c06b2728bdb068a1c123fc3c5990b03"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8906}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x7}, @NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x71, 0x115, "8e34a93af28c68e697266df5693d1b4a02ca0af389f6e0bd43c7f37c7f6d7e90e154174a75e705d67c2ce663dc156e5a6775f8fa6747d880a832b92db95053b044082f80ec28ad3d5f17e73f54957a9eb7aa7ebdfc23461c7deb3b583f5b533819a8f3832418353a94e4040917"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @NL80211_ATTR_USE_MFP={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x10000000, {0x0, 0x3, 0xbe}}}, @NL80211_ATTR_PBSS={0x4}]}, 0x244}, 0x1, 0x0, 0x0, 0x4040}, 0x240040c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000dc0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'syztnl1\x00', r7, 0x2f, 0xe0, 0x20, 0x2, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x7, 0x8, 0x7, 0x5}}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000ec0), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000f40)) 22:53:40 executing program 5: ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x5, "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"}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/xfrm_stat\x00') ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000300)={0x8, 0x81, 0x6, 0x6, 0x80}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000380)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000003c0)) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xe6a) r2 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x1, 0x8) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000440)=""/5) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000480)={0x0, 0x9, 0xa40a, 0x0, 0x101}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x15dc00, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000540)=0x3, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x10000, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x59, 0x76}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4801) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000740)) 22:53:40 executing program 6: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x61) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x77359400}}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0x101, 0x1) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x200000, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = dup(r0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000280)='\x00', &(0x7f00000002c0)='./file1\x00', r2) lsetxattr$security_evm(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@md5={0x1, "dc5b3e3075fa59767d8f199e942b8f8b"}, 0x11, 0x1) mount(&(0x7f00000003c0)=@sr0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='cgroup\x00', 0x100000, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x400300, 0x0) r4 = syz_open_dev$loop(&(0x7f00000004c0), 0x58840819, 0x80000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x101400, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) poll(&(0x7f0000000580)=[{r3, 0x6104}, {r4, 0x1}, {r5, 0xb4}, {r2, 0x40}, {r6, 0x2400}], 0x5, 0x100) r7 = fcntl$dupfd(r1, 0x0, r5) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628) syz_open_dev$vcsu(&(0x7f00000005c0), 0x6, 0x204000) r8 = accept4(0xffffffffffffffff, &(0x7f0000000600)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000680)=0x80, 0x80800) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) 22:53:40 executing program 7: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r0, r1/1000+60000}, {0x77359400}}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2538}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x9f8]}, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_capability(r2, &(0x7f0000000180), &(0x7f00000001c0)=@v3={0x3000000, [{0x60, 0x1}, {0x8, 0xb0d}], 0xee00}, 0x18, 0x7) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x40000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000240)={"d03c5f63b8d6d619f5719c619dbd9fe0", 0x0, 0x0, {0x45a8, 0x7}, {0x0, 0x37}, 0x7fffffff, [0x0, 0x80, 0x8, 0xff, 0xc9, 0x5, 0x8, 0x5, 0x80000000000, 0x1000, 0x5, 0x1, 0x5, 0x9, 0x5, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000340)={"1e8eb3e237fcdd7dd86672ea1f3158e2", r4, 0x0, {0x80, 0x9}, {0xfffffffffffffff8, 0x1}, 0x3, [0x5, 0x1f, 0x8001, 0x8, 0x6, 0x6, 0x3, 0x401, 0x1a7, 0x3, 0x8e, 0x0, 0xfffffffffffffff7, 0x0, 0x668d, 0x4]}) recvmmsg(r2, &(0x7f0000003bc0)=[{{&(0x7f0000000440)=@caif=@rfm, 0x80, &(0x7f00000026c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/108, 0x6c}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/160, 0xa0}], 0x5, &(0x7f0000002740)=""/160, 0xa0}, 0x2685}, {{&(0x7f0000002800)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002880)=""/132, 0x84}], 0x1}, 0x4}, {{&(0x7f0000002980)=@isdn, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002a00)=""/104, 0x68}, {&(0x7f0000002a80)=""/165, 0xa5}, {&(0x7f0000002b40)=""/53, 0x35}], 0x3, &(0x7f0000002bc0)=""/4096, 0x1000}, 0x6}], 0x3, 0x2161, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000003c80)) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000003cc0)={'HL\x00'}, &(0x7f0000003d00)=0x1e) r5 = socket$inet6(0xa, 0xa, 0xfffffffd) ppoll(&(0x7f0000003d40)=[{r5, 0x3080}, {r3, 0x55a}], 0x2, &(0x7f0000003d80)={0x0, 0x3938700}, &(0x7f0000003dc0)={[0x8000]}, 0x8) fsetxattr$security_evm(r3, &(0x7f0000003e00), &(0x7f0000003e40)=@v2={0x37a26a891fd951a6, 0x3, 0x8, 0x80000001, 0xad, "be58702e7752ab6e5e5081e81ad7fdc781bcc3779d2c4bd72544165269ced65e3bcf23122fa93c5c1bbe76bae8eaf6fbadbd125e343a8b965cac3618fc9df89efc2299025bdf59f218728427b2186e6e5ae87bfc5297d809b1ca97f47251419d2c45d4d0557d4e0838ae9f5a1e23131fa86d42b8fbd08a1907877351acc3d53dad9b5e3268949931019073f8ea58650bfcc944424dd85200239bab8d7319e6145aef82b3510a5473ef594a5abd"}, 0xb6, 0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000003f00)={0x2, 0x7}) r6 = accept$inet(r2, &(0x7f0000003f40)={0x2, 0x0, @remote}, &(0x7f0000003f80)=0x10) ppoll(&(0x7f0000003fc0)=[{r6, 0x102}, {r2, 0x2c0}], 0x2, &(0x7f0000004000)={0x77359400}, &(0x7f0000004040)={[0x1]}, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000004080)) r7 = socket$inet6(0xa, 0x80000, 0x1) connect$inet6(r7, &(0x7f00000040c0)={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x77}, 0x1c) [ 93.237707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.248558] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.250523] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.254475] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.254654] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.260355] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.264856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.271535] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.275773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.285312] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.287632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.290302] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.302277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.303414] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.307306] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.310545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.318329] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.322529] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.325213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.327406] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.348221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.392410] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.408240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.416953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.429872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.436351] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.439830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.441424] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.457199] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.470812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.475585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.476859] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.477451] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.487241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.487715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.489351] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.491548] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.497405] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.502857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.503271] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.529210] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.538176] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.542392] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.543876] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.543962] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.563229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.565434] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.567535] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.313518] Bluetooth: hci1: command tx timeout [ 95.377532] Bluetooth: hci0: command tx timeout [ 95.378234] Bluetooth: hci3: command tx timeout [ 95.505336] Bluetooth: hci2: command tx timeout [ 95.570108] Bluetooth: hci4: command tx timeout [ 95.633575] Bluetooth: hci7: command tx timeout [ 95.634683] Bluetooth: hci6: command tx timeout [ 95.697076] Bluetooth: hci5: command tx timeout [ 97.361898] Bluetooth: hci1: command tx timeout [ 97.425204] Bluetooth: hci0: command tx timeout [ 97.425698] Bluetooth: hci3: command tx timeout [ 97.555011] Bluetooth: hci2: command tx timeout [ 97.617378] Bluetooth: hci4: command tx timeout [ 97.681122] Bluetooth: hci7: command tx timeout [ 97.681584] Bluetooth: hci6: command tx timeout [ 97.745110] Bluetooth: hci5: command tx timeout [ 99.409066] Bluetooth: hci1: command tx timeout [ 99.473306] Bluetooth: hci3: command tx timeout [ 99.473780] Bluetooth: hci0: command tx timeout [ 99.601276] Bluetooth: hci2: command tx timeout [ 99.666027] Bluetooth: hci4: command tx timeout [ 99.729081] Bluetooth: hci6: command tx timeout [ 99.729540] Bluetooth: hci7: command tx timeout [ 99.793052] Bluetooth: hci5: command tx timeout [ 101.457090] Bluetooth: hci1: command tx timeout [ 101.521219] Bluetooth: hci0: command tx timeout [ 101.521740] Bluetooth: hci3: command tx timeout [ 101.649069] Bluetooth: hci2: command tx timeout [ 101.713115] Bluetooth: hci4: command tx timeout [ 101.777113] Bluetooth: hci7: command tx timeout [ 101.777563] Bluetooth: hci6: command tx timeout [ 101.841350] Bluetooth: hci5: command tx timeout [ 155.745890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.754398] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.757887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.765399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.768099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.769933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.801858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.807358] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.810354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.816584] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.819640] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.823476] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.890578] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.898375] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.901903] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.904213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.906197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.910541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.914317] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.916304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.919796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.928603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.934457] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.935612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.938747] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.939509] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.943802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.944033] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.961600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.963508] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.966915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.968604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.989676] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.992481] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.994551] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.996838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.002181] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.005549] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.007415] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.009428] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.011354] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.015427] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.018388] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.020447] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.023638] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.030301] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.032620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.033371] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.841094] Bluetooth: hci0: command tx timeout [ 157.905068] Bluetooth: hci1: command tx timeout [ 158.033118] Bluetooth: hci3: command tx timeout [ 158.034141] Bluetooth: hci2: command tx timeout [ 158.097246] Bluetooth: hci6: command tx timeout [ 158.098423] Bluetooth: hci5: command tx timeout [ 158.099367] Bluetooth: hci4: command tx timeout [ 158.161104] Bluetooth: hci7: command tx timeout [ 159.889062] Bluetooth: hci0: command tx timeout [ 159.953504] Bluetooth: hci1: command tx timeout [ 160.081135] Bluetooth: hci3: command tx timeout [ 160.081613] Bluetooth: hci2: command tx timeout [ 160.145245] Bluetooth: hci5: command tx timeout [ 160.145707] Bluetooth: hci6: command tx timeout [ 160.146602] Bluetooth: hci4: command tx timeout [ 160.209021] Bluetooth: hci7: command tx timeout [ 161.937060] Bluetooth: hci0: command tx timeout [ 162.001037] Bluetooth: hci1: command tx timeout [ 162.130018] Bluetooth: hci2: command tx timeout [ 162.130482] Bluetooth: hci3: command tx timeout [ 162.193146] Bluetooth: hci4: command tx timeout [ 162.193582] Bluetooth: hci6: command tx timeout [ 162.194476] Bluetooth: hci5: command tx timeout [ 162.258074] Bluetooth: hci7: command tx timeout [ 163.985404] Bluetooth: hci0: command tx timeout [ 164.049118] Bluetooth: hci1: command tx timeout [ 164.177078] Bluetooth: hci3: command tx timeout [ 164.177578] Bluetooth: hci2: command tx timeout [ 164.241182] Bluetooth: hci5: command tx timeout [ 164.241686] Bluetooth: hci6: command tx timeout [ 164.242888] Bluetooth: hci4: command tx timeout [ 164.306568] Bluetooth: hci7: command tx timeout [ 216.219912] [ 216.220302] ====================================================== [ 216.221271] WARNING: possible circular locking dependency detected [ 216.222203] 6.13.0-next-20250124 #1 Not tainted [ 216.222911] ------------------------------------------------------ [ 216.225573] kworker/u8:1/64 is trying to acquire lock: [ 216.228328] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.231789] [ 216.231789] but task is already holding lock: [ 216.232692] ffff888018c78768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 216.234268] [ 216.234268] which lock already depends on the new lock. [ 216.234268] [ 216.235492] [ 216.235492] the existing dependency chain (in reverse order) is: [ 216.236625] [ 216.236625] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 216.237696] __mutex_lock+0x13d/0xb50 [ 216.238445] wiphy_register+0x1b2e/0x25d0 [ 216.239243] ieee80211_register_hw+0x23a4/0x3d60 [ 216.240120] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 216.241033] init_mac80211_hwsim+0x389/0x870 [ 216.241894] do_one_initcall+0xf9/0x640 [ 216.242675] kernel_init_freeable+0x53d/0x7a0 [ 216.243532] kernel_init+0x1e/0x2d0 [ 216.244217] ret_from_fork+0x48/0x80 [ 216.244913] ret_from_fork_asm+0x1a/0x30 [ 216.245717] [ 216.245717] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 216.246700] __lock_acquire+0x29fd/0x4580 [ 216.247487] lock_acquire+0x19b/0x520 [ 216.248220] __mutex_lock+0x13d/0xb50 [ 216.248969] unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.249945] unregister_netdevice_queue+0x224/0x2e0 [ 216.250812] _cfg80211_unregister_wdev+0x57b/0x700 [ 216.251687] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 216.252558] ieee80211_unregister_hw+0x55/0x3a0 [ 216.253393] hwsim_exit_net+0x3a0/0x730 [ 216.254126] ops_exit_list+0xb3/0x180 [ 216.254825] cleanup_net+0x546/0xad0 [ 216.255540] process_one_work+0x8ee/0x1a10 [ 216.256367] worker_thread+0x674/0xe70 [ 216.257152] kthread+0x3ab/0x720 [ 216.257838] ret_from_fork+0x48/0x80 [ 216.258514] ret_from_fork_asm+0x1a/0x30 [ 216.259291] [ 216.259291] other info that might help us debug this: [ 216.259291] [ 216.260500] Possible unsafe locking scenario: [ 216.260500] [ 216.261435] CPU0 CPU1 [ 216.262163] ---- ---- [ 216.262887] lock(&rdev->wiphy.mtx); [ 216.263530] lock(rtnl_mutex); [ 216.264460] lock(&rdev->wiphy.mtx); [ 216.265466] lock(rtnl_mutex); [ 216.266035] [ 216.266035] *** DEADLOCK *** [ 216.266035] [ 216.266941] 4 locks held by kworker/u8:1/64: [ 216.267630] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 216.269272] #1: ffff88800f4a7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 216.270800] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 216.272222] #3: ffff888018c78768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 216.273825] [ 216.273825] stack backtrace: [ 216.274506] CPU: 0 UID: 0 PID: 64 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1 [ 216.274574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 216.274614] Workqueue: netns cleanup_net [ 216.274689] Call Trace: [ 216.274706] [ 216.274726] dump_stack_lvl+0xca/0x120 [ 216.274833] print_circular_bug+0x47b/0x750 [ 216.274918] check_noncircular+0x2e9/0x3c0 [ 216.274994] ? lock_repin_lock+0x207/0x320 [ 216.275103] ? __pfx_check_noncircular+0x10/0x10 [ 216.275180] ? hlock_class+0x4e/0x130 [ 216.275237] ? mark_lock+0xac/0xed0 [ 216.275310] ? __pfx_lock_repin_lock+0x10/0x10 [ 216.275426] ? lockdep_lock+0xba/0x1b0 [ 216.275532] ? __pfx_lockdep_lock+0x10/0x10 [ 216.275648] __lock_acquire+0x29fd/0x4580 [ 216.275748] ? __pfx___lock_acquire+0x10/0x10 [ 216.275828] ? lock_release+0x20f/0x6f0 [ 216.275910] ? __pfx_lock_release+0x10/0x10 [ 216.275999] lock_acquire+0x19b/0x520 [ 216.276080] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.276171] ? __pfx_lock_acquire+0x10/0x10 [ 216.276254] ? srso_return_thunk+0x5/0x5f [ 216.276356] ? lock_release+0x20f/0x6f0 [ 216.276437] ? srso_return_thunk+0x5/0x5f [ 216.276540] ? lock_is_held_type+0x9e/0x120 [ 216.276641] ? srso_return_thunk+0x5/0x5f [ 216.276751] __mutex_lock+0x13d/0xb50 [ 216.276847] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.276931] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.277017] ? srso_return_thunk+0x5/0x5f [ 216.277119] ? synchronize_rcu_expedited+0x38a/0x420 [ 216.277211] ? __pfx___mutex_lock+0x10/0x10 [ 216.277311] ? __pfx_autoremove_wake_function+0x10/0x10 [ 216.277411] ? srso_return_thunk+0x5/0x5f [ 216.277514] ? kasan_quarantine_put+0x84/0x1e0 [ 216.277626] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 216.277693] ? srso_return_thunk+0x5/0x5f [ 216.277806] unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.277890] ? __virt_addr_valid+0x2e8/0x5d0 [ 216.277988] ? __pfx_lock_release+0x10/0x10 [ 216.278071] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 216.278157] ? find_held_lock+0x2c/0x110 [ 216.278265] ? srso_return_thunk+0x5/0x5f [ 216.278371] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 216.278483] ? srso_return_thunk+0x5/0x5f [ 216.278585] ? lock_release+0x20f/0x6f0 [ 216.278667] ? __pfx_lock_release+0x10/0x10 [ 216.278748] ? srso_return_thunk+0x5/0x5f [ 216.278850] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 216.278938] ? srso_return_thunk+0x5/0x5f [ 216.279051] unregister_netdevice_queue+0x224/0x2e0 [ 216.279131] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 216.279212] ? up_write+0x195/0x520 [ 216.279314] _cfg80211_unregister_wdev+0x57b/0x700 [ 216.279411] ? srso_return_thunk+0x5/0x5f [ 216.279521] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 216.279592] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 216.279664] ? srso_return_thunk+0x5/0x5f [ 216.279766] ? srso_return_thunk+0x5/0x5f [ 216.279869] ? synchronize_rcu+0x1ff/0x260 [ 216.279948] ieee80211_unregister_hw+0x55/0x3a0 [ 216.280031] hwsim_exit_net+0x3a0/0x730 [ 216.280109] ? __pfx_hwsim_exit_net+0x10/0x10 [ 216.280185] ? srso_return_thunk+0x5/0x5f [ 216.280287] ? netdev_run_todo+0x788/0x1040 [ 216.280379] ? __pfx_hwsim_exit_net+0x10/0x10 [ 216.280459] ops_exit_list+0xb3/0x180 [ 216.280537] cleanup_net+0x546/0xad0 [ 216.280620] ? __pfx_cleanup_net+0x10/0x10 [ 216.280720] process_one_work+0x8ee/0x1a10 [ 216.280841] ? __pfx_lock_acquire+0x10/0x10 [ 216.280925] ? __pfx_process_one_work+0x10/0x10 [ 216.281033] ? srso_return_thunk+0x5/0x5f [ 216.281145] ? move_linked_works+0x172/0x270 [ 216.281232] ? srso_return_thunk+0x5/0x5f [ 216.281334] ? assign_work+0x196/0x240 [ 216.281441] worker_thread+0x674/0xe70 [ 216.281549] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 216.281646] ? srso_return_thunk+0x5/0x5f [ 216.281748] ? __pfx_worker_thread+0x10/0x10 [ 216.281859] kthread+0x3ab/0x720 [ 216.281955] ? __pfx_kthread+0x10/0x10 [ 216.282051] ? srso_return_thunk+0x5/0x5f [ 216.282154] ? finish_task_switch.isra.0+0x206/0x840 [ 216.282248] ? __pfx_kthread+0x10/0x10 [ 216.282348] ret_from_fork+0x48/0x80 [ 216.282406] ? __pfx_kthread+0x10/0x10 [ 216.282504] ret_from_fork_asm+0x1a/0x30 [ 216.282628] [ 217.694566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.697810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.699844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.705922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.708877] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.717871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.818888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.820765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.823077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.838617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.842822] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.846726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.944591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.950659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.955361] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.968377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.972336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.974136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.976695] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.980579] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.986759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.988354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.998361] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.999844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.171666] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.175598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.177591] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.179057] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.180661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.182174] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.186173] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.188628] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.191599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.195386] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.206417] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.208066] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.210778] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.212472] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.213898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.219854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.221733] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.223582] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.227159] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.231724] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.234382] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.236858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.248462] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.300158] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.794152] Bluetooth: hci0: command tx timeout [ 219.923983] Bluetooth: hci1: command tx timeout [ 220.050013] Bluetooth: hci3: command tx timeout [ 220.050491] Bluetooth: hci2: command tx timeout [ 220.241048] Bluetooth: hci4: command tx timeout [ 220.304990] Bluetooth: hci5: command tx timeout [ 220.369234] Bluetooth: hci7: command tx timeout [ 220.432996] Bluetooth: hci6: command tx timeout [ 221.840988] Bluetooth: hci0: command tx timeout [ 221.968992] Bluetooth: hci1: command tx timeout [ 222.097000] Bluetooth: hci2: command tx timeout [ 222.097451] Bluetooth: hci3: command tx timeout [ 222.289002] Bluetooth: hci4: command tx timeout [ 222.353059] Bluetooth: hci5: command tx timeout [ 222.417007] Bluetooth: hci7: command tx timeout [ 222.482963] Bluetooth: hci6: command tx timeout [ 223.888994] Bluetooth: hci0: command tx timeout [ 224.017071] Bluetooth: hci1: command tx timeout [ 224.145046] Bluetooth: hci3: command tx timeout [ 224.145533] Bluetooth: hci2: command tx timeout [ 224.337975] Bluetooth: hci4: command tx timeout [ 224.401003] Bluetooth: hci5: command tx timeout [ 224.467018] Bluetooth: hci7: command tx timeout [ 224.529319] Bluetooth: hci6: command tx timeout [ 225.937396] Bluetooth: hci0: command tx timeout [ 226.065253] Bluetooth: hci1: command tx timeout [ 226.193516] Bluetooth: hci2: command tx timeout [ 226.195126] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 22:55:44 Registers: info registers vcpu 0 RAX=0000000000000075 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800f4a6d20 R8 =0000000000000000 R9 =ffffed1001765046 R10=0000000000000075 R11=2f72656b726f776b R12=0000000000000075 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffaa8a6dc28 CR3=000000000a72e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0ea51e56733952a20148eed28ba80f49 XMM02=2fccd54c36d8a3f300000000000fcab8 XMM03=f61f520134a0d9c200000000000fcb78 XMM04=3738512810b358c600000000000ae988 XMM05=565da6a83010eacb0000000000140310 XMM06=6098c19552daab49000000000010b520 XMM07=ee7587d5db12e8e300000000000fcbd0 XMM08=5d82995fcda3111200000000000fcb18 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800f35d340 RBX=ffff88806e148040 RCX=ffffffff81429a4a RDX=1ffff11001e9fe00 RSI=0000000000000008 RDI=ffff88800f4ff000 RBP=0000000000000000 RSP=ffff88800f8d7dd0 R8 =0000000000000000 R9 =ffffed1001e9fe00 R10=ffff88800f4ff007 R11=ffff88800f35d7f8 R12=ffff88806e148ff9 R13=ffffffff8864bff0 R14=ffff88800f35d340 R15=0000000000000086 RIP=ffffffff81aefaba RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff2b3b4000 CR3=00000000160f4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c00031a2d0000000c00031a230 XMM04=000000c000086090000000c000086060 XMM05=000000c0000860f0000000c0000860c0 XMM06=000000c000086150000000c000086120 XMM07=000000c000085760000000c00005b4d0 XMM08=000000c0000864b0000000c000086480 XMM09=000000c000086510000000c0000864e0 XMM10=000000c000086540000000c00005b530 XMM11=000000c0000865a0000000c000086570 XMM12=000000c000086600000000c0000865d0 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0