syzkaller login: [ 58.702932] sshd (238) used greatest stack depth: 23488 bytes left Warning: Permanently added '[localhost]:15702' (ECDSA) to the list of known hosts. 2025/01/28 17:01:42 fuzzer started 2025/01/28 17:01:43 dialing manager at localhost:40187 [ 62.994568] cgroup: Unknown subsys name 'net' [ 63.119723] cgroup: Unknown subsys name 'cpuset' [ 63.153745] cgroup: Unknown subsys name 'rlimit' [ 69.622975] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 17:02:01 syscalls: 208 2025/01/28 17:02:01 code coverage: enabled 2025/01/28 17:02:01 comparison tracing: enabled 2025/01/28 17:02:01 extra coverage: enabled 2025/01/28 17:02:01 setuid sandbox: enabled 2025/01/28 17:02:01 namespace sandbox: enabled 2025/01/28 17:02:01 Android sandbox: enabled 2025/01/28 17:02:01 fault injection: enabled 2025/01/28 17:02:01 leak checking: enabled 2025/01/28 17:02:01 net packet injection: enabled 2025/01/28 17:02:01 net device setup: enabled 2025/01/28 17:02:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 17:02:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 17:02:01 USB emulation: enabled 2025/01/28 17:02:01 hci packet injection: enabled 2025/01/28 17:02:01 wifi device emulation: enabled 2025/01/28 17:02:01 802.15.4 emulation: enabled 2025/01/28 17:02:01 fetching corpus: 0, signal 0/0 (executing program) 2025/01/28 17:02:03 starting 8 fuzzer processes 17:02:03 executing program 1: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x7, 0x3, 0x4, 0x7f, 0xffffffffffff7fff, 0x2, 0x986, 0x3f, 0xfff, 0x7fffffff, 0x0, 0x1, 0x82, 0x2}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000000c0)={r0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000010c0)={{r0, 0x10001, 0x7ff, 0x4, 0xfffffffffffffffd, 0x7, 0x5f, 0x3, 0x5, 0x1, 0x3, 0x6, 0xffffffffffffd549, 0x3, 0x8}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001180)={{r1, 0x8, 0x5, 0x4, 0x3, 0x0, 0x100000001, 0x644, 0x9, 0x529, 0x3, 0x2, 0x100000000, 0xb4d, 0x1f}}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x7c, r2, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40810) pipe(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002340), 0x120041, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r5) pipe2(&(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$nbd(r6, &(0x7f00000023c0)={0x67446698, 0x1, 0x4, 0x3, 0x4, "40c50ba317f177f134dad5a84217a8eca694294b658d79f8f945c070bd36"}, 0x2e) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000002400), &(0x7f0000002440), 0x2, 0x1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x68, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x40}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x61c0}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}]}, 0x68}, 0x1, 0x0, 0x0, 0x40c0050}, 0x60001) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x92008}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x14, r2, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x8010) r8 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000026c0)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000002700)={'custom0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002840)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r3) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000002a40)=0x6) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002c80)={0xd0, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r6}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 17:02:03 executing program 0: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000000)={0x0, 0x8001}) socketpair(0x1e, 0x800, 0x2, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x800) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000001180)) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000001200)={'ip6_vti0\x00', @ifru_settings={0x0, 0x0, @cisco=&(0x7f00000011c0)={0x8, 0x4619}}}) r1 = socket(0x0, 0xa, 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000001440)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001400)={&(0x7f0000001280)=@flushpolicy={0x16c, 0x1d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in=@loopback, @in6=@mcast2, 0x2, 0x36, 0x6}}, @offload={0xc, 0x1c, {0x0, 0x3}}, @mark={0xc, 0x15, {0x35075d, 0x7}}, @algo_auth_trunc={0x119, 0x14, {{'wp256-generic\x00'}, 0x668, 0x0, "87020b0dad0c7145ab6b7e2575dabb4d6aea5f97c578e30af8fba2ae2ff0803e199c36234ec4423888426f16b20db5bf7322a22c573e0d4746f7d97b6b38f312b5ba4a644fcc9f71c1441baac94dca979d85d943a214857b8b9afa19d57cf205ae401bebd06eb2c85a5faf8ee7e2d52508cff10b665ca87536f54d658c4369315a4bfb61f2bb4ae8099aebe07c6a76bb2b4dd65e26e7c361c9db5bff17cb9f976384bb74e757511c19a3a6c91e5146475a13cf85d6e28ba8412ef7d5612306df98439756f1d97660f43ef9ad39"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x2000) ioctl$sock_ifreq(r1, 0x8943, &(0x7f0000001480)={'veth0_virt_wifi\x00', @ifru_addrs=@ax25}) socketpair(0x10, 0x3, 0x401, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'ip6tnl0\x00', 0x0, 0x29, 0xb3, 0x7f, 0x3f, 0x10, @private0, @private1, 0x40, 0x8, 0x5, 0x7}}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000001640)={0x0, @qipcrtr={0x2a, 0x1, 0x8000}, @vsock, @isdn={0x22, 0x3, 0x2, 0x43, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001600)='veth0_macvtap\x00', 0x6, 0x1ff, 0x401}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f00000016c0)={0xbce, "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"}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000002300)={0x0, @phonet={0x23, 0x3, 0x3f, 0xb}, @ax25={0x3, @default}, @l2tp={0x2, 0x0, @empty, 0x3}, 0x5, 0x0, 0x0, 0x0, 0xffff, &(0x7f00000022c0)='veth0\x00', 0x1, 0x7ff, 0x200}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f00000029c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0xb6684316f6231a2a}, 0xc, &(0x7f0000002980)={&(0x7f00000023c0)={0x5a4, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c289300bb1698f60b8650fa9ffb77540fb8a5b41b58583f6ec8fea8fd9b156728f5988"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "407e6e387af336207740cb3de44bfe1046954850ae23742bd8d5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2000000}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "65c74c84dfd192ac3f9fc58cd6fd171804d1cb12cc348899be8d"}}, @TIPC_NLA_NODE_ID={0x7d, 0x3, "15bdeaa2248ffdba75103461374fdcd6d844e6ef3dc16de8509fce664ccbcc999cf6f553ec055553872d5e1d8e79137df8f2cc703f25930daa6ef011de42d6768f8ba90dbcda94fca78695bb02e920e0aea5aa3099b6c0a81e87dcb2ffb68bc7fca2faafa6e76b1df4d3db7f9265525ae513d422c85d8cd6c6"}, @TIPC_NLA_NODE_ID={0x22, 0x3, "682db3333f08f20e7454767d4f684e92aa2845d410fd1b109b93aef20e01"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1e0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "db4cff48c1b9d44f8b3364862e73e46d1706e0d53350f24ec3b1"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "13b1ace2b62b36fa6872b0368f8dea7cb3bad80c"}}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "12f6c42e173ef681bd920abb5dade2683ba48314e7c0218119275cd864f1cf603006915c4b57b922dde761c608d7dcf2d581e75888111b"}, @TIPC_NLA_NODE_ID={0x55, 0x3, "911ca33b9627b6505625a2d7e9ce8884eb9957bbd3ab144c3aa71b79716b5eabe106a617041c8e0d262447b1d0cdde44f4782a9f9a2a46c5c81d059f62fa4d528bfdb9cf86777add4c593cbe1276a033c0"}, @TIPC_NLA_NODE_ID={0x84, 0x3, "c645c0d2529d1181ccc21a69021e8db738b964bcdfe3e03a9f016df5b350add48ee8bc8e3744efdcf21309dd2995878a8a9045a642912854b6ff60d8beac3602b6d93fd25951b307bc6f12553533dda6f74812913fc3b0abb3d25b40054f3c639ec796c9362fd9a2bb2189422307a81fe7738481306efa50c5c5bb0cc440f7f1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "a24f0f8568102b6eeadc5a5b9e4f6a2d96853a34"}}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa59e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3eba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa8c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5ffbbac2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x630}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf4}]}]}, 0x5a4}, 0x1, 0x0, 0x0, 0x805}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000002a80)={0x0, @sco, @isdn={0x22, 0xc4, 0x3f, 0x7f, 0x7}, @llc={0x1a, 0x39, 0x9, 0x3, 0x1f, 0xfc, @local}, 0x1ff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)='syz_tun\x00', 0x66bf, 0xffffffff80000001, 0x5}) 17:02:03 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008085}, 0x8080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x24008090) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4004081) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x94) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r1) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000095}, 0x40080) r5 = syz_open_dev$vcsu(&(0x7f0000000740), 0x2, 0x40180) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}}, 0x80) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x80) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r6, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r3) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x86b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90d1) 17:02:03 executing program 4: r0 = socket(0x15, 0x6, 0x1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8000, 0xa7a7, 0xba8, 0x400}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10040) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8884}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:kmsg_device_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x8, 0x8, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000081) socketpair(0x28, 0x5, 0x7, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x22040000}, 0x44) r5 = getuid() ioprio_set$uid(0x3, r5, 0x2004) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r4, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0xfffff904, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x9127}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0x24008050) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x88, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x62}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x317}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) socketpair(0x1e, 0x80000, 0x2, &(0x7f0000000b00)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r2) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r9, 0x800, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x54010890}, 0x80) [ 83.265514] audit: type=1400 audit(1738083723.956:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:02:03 executing program 5: ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8e) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0xfff, 0x0, 0xa, 0xb, 0x19, "a587754c69a035d36354d618084a341e151af5759ea1c234799e2e2ed430f8333f9bec0a0030e079b57103b73c0d2a78c777752c97fac1a2c1b60cb06146c59b", "5c3a6e7c682c15414c8631231baf6a287ce801a0a140b78d96a47fc3f4acb868d7d70e362df89774f5d9dd11bf3e94018b42dc22eb046d0eebd4ed64513f05f3", "0ee51ba4c38655609a7a9d7f91f5be9f8e33fd0281786c7e02171c690e2d3a10", [0x6]}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0x736e, 0x10040) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x7fff, 0x0, 0x5, 0x4, "811ad984e8a399d20211df3fca54b470a47ae9ed035f79021e1e9d2423e194db77c1c85ba020e835440bfc1396f3370e35ed555f780f94e80093f4061aee8072", "e39b0d4a4a289d10a6d4ca5f06f03c928c71459c4626561fb21b22bef546ec14", [0x880, 0x1f]}) socketpair(0x22, 0x3, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x3ff, r2, &(0x7f00000002c0)="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", 0xff, 0x7f000000000, 0x0, 0x3}, &(0x7f0000000400)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)=0x2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r4 = socket$inet6(0xa, 0x800, 0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, r4) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x400a0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r7, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x43}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x2004004) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x9) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) 17:02:04 executing program 6: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = getpgrp(r0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x6d, 0x0, 0x6, 0x0, 0x1, 0xb1814, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x1, @perf_config_ext={0x7, 0x38b63edc}, 0x10, 0x3, 0x7, 0x1, 0x80000001, 0x5, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffff96}, r1, 0x6, 0xffffffffffffffff, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xfffd, 0x9, 0x6, 0x4}, {0x40, 0xde, 0x7, 0xe7}, {0x2, 0x8, 0x1, 0x81}]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8992, &(0x7f0000000180)={'batadv0\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f0000000140)={0x0, 0x7ff}}}) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x89, 0xb8, 0x6, 0x7, 0x0, 0x20, 0x0, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x20, 0x7f, 0x7fff, 0x0, 0x3, 0x8001, 0x0, 0x0, 0xae7, 0x0, 0x3f}, 0x0, 0xa, 0xffffffffffffffff, 0x2) socketpair(0x23, 0xa, 0x7fffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x80, 0x7, 0xfffffff8, 0x11, @mcast2, @dev={0xfe, 0x80, '\x00', 0x42}, 0x20, 0x7, 0x6, 0x2e}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000003c0)={0x0, 0x80, 0x8, 0x5, 0x5, 0xf8, 0x0, 0x4, 0x1141, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xec9b, 0x9, @perf_bp={&(0x7f0000000380), 0x5}, 0x800, 0x6, 0x2008, 0x4, 0x100, 0x101, 0x0, 0x0, 0x96, 0x0, 0x400000008000}) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r4, &(0x7f0000000480)={0x800, 0x20, 0x2, 0x20, 0xff}, 0x48) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/15, 0xf, 0x2, 0x34}, @fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x3, 0x1, 0x2d}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}}], 0x22, 0x0, &(0x7f00000006c0)="08051e839d76cc646b9f0dd07c721b2bfb0df4dd8eac7e5bcbc4286101f563c1e255"}) r6 = syz_open_dev$vcsu(&(0x7f0000000740), 0xac85, 0x412302) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000b00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2e0, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2cbb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2d2e}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff9f27}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcedd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6c}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5291}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @private0, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private0, 0x7ff}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000b40)={'security\x00', 0xc, "7e014aff5092c2e03472a81f"}, &(0x7f0000000b80)=0x30) r7 = syz_open_dev$loop(&(0x7f0000000bc0), 0x1, 0x14140) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000c00), 0x874a, 0x2002) ioctl$LOOP_SET_CAPACITY(r8, 0x4c07) 17:02:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x800, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa08208}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2, 0x8, 0x0, 0x80000000}}}, ["", "", ""]}, 0x30}}, 0x840) r1 = socket(0x27, 0x5, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) write$char_usb(0xffffffffffffffff, &(0x7f00000001c0)="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", 0x1000) syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r0) pipe2(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) syz_genetlink_get_family_id$tipc(&(0x7f0000001200), r3) syz_usb_connect(0x1, 0x27f, &(0x7f0000001280)={{0x12, 0x1, 0x250, 0x4b, 0x3b, 0xe, 0x40, 0xaf0, 0x7a01, 0x92c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26d, 0x1, 0x3f, 0x46, 0xb0, 0x8, [{{0x9, 0x4, 0xbf, 0x2c, 0x4, 0x53, 0xf8, 0xbb, 0x7, [@hid_hid={0x9, 0x21, 0x0, 0x20, 0x1, {0x22, 0xef2}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "44cc1b8c60"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x5, 0x7f}, [@obex={0x5, 0x24, 0x15, 0x8}, @dmm={0x7, 0x24, 0x14, 0xf39c, 0x7e7}]}], [{{0x9, 0x5, 0x6, 0x3, 0x200, 0x7, 0xfa, 0x5}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x4, 0x4, 0x7, [@generic={0xd9, 0x10, "d0c7c19cda424a638f8a34646bc11da3f5b4c2ae99e6296dfef84ed74219e3292530d93a7e0d806aee743be5024b2f6e3f571822f6adfc6bcf90c239d0654d5bca4b018cbc93e2e01c18a900f876219e5c90ffb682572bad0ed65decc4979254eb9eb2aa084ff38dbc4a1b222215fab5d5cf59c47f6451995b006a5d2407cb44ed5ab38e0929b102bd9936e122592a9efa67395545e5d7d850f55e1f83c56afa044d93119abd4d2eba78f352e4c43c4ecb0a5cfbaca9c69340d687294c7002ede1e6a39e6e74b3add7c6e98523361bd712ab74573da8a4"}, @generic={0x7e, 0x21, "f9295ee9c5b1cda1214c13cca88bb8134a66274c85751a7cae6b2e274c93c92ea67cac462a451275fea32247f4261bdd1e435228b1de28a409625b87ec9c5a52e2e79a4137ea83d46795e694ab0b4353e7fe058f2a587933fbd133e49e9035649e59834acd0357c9af75469ba6b3c727f3fd2493bd96728771c1d064"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x2, 0x0, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}, @generic={0xa1, 0x7, "002d6628bcdfeae51429d742badf48c072c7774d4872235d5f44e0447a4911ea762a3600f7947a368d9cf68bc6edffbb04b54d67cae0d4e68fe0f420879b7821d293e8b6a5d43e0696c0577c34765bfe94c29322167e03d6b45781c5183f86fde94e84a0aba1c545ea494e610c9e92af2854a505d4616e42eb66d3b78f421c6335d02b47bcc013419929a3f8efcf830c16b51b5eea3c1179985ddf7660417c"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x3f, 0x1, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe5, 0x1000}]}}]}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x250, 0x3f, 0x1, 0x0, 0xff, 0x7f}, 0x5, &(0x7f0000001540)={0x5, 0xf, 0x5}, 0x1, [{0x59, &(0x7f0000001580)=@string={0x59, 0x3, "355bf7884e5fe5ae7e7af4084cdda4082ff6d093b384862aeb71d0bcba23d6f8f1c16a3d98eca4022313e29c0cf2891f6ed73bc1c854e2322ce195ebea1883371bde26ca481c9faf2daa0e4445bae29ce27ff79bb3fa92"}}]}) r4 = syz_open_dev$vcsu(&(0x7f0000001640), 0xeda, 0x82) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe2(&(0x7f0000001780)={0xffffffffffffffff}, 0x800) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001800), r2) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r6, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) add_key(&(0x7f0000001900)='asymmetric\x00', &(0x7f0000001940)={'syz', 0x1}, &(0x7f0000001980)="4bd2fb52eba3d5aa97bba781abbea80743432be4a75c89257cc0029ec236e01c8c917729e5258510aa0e431ad6a959d0fd511f13f92b58fd17709f83f8ad88fa8019bd279f9c10e51f5792e477421b6ce1a4e8c6b2825958046330e46e45810c3fb7a2af53ab0f536e0b8314e67cf54d10cd898f831a3b4f74e3c12786", 0x7d, 0xfffffffffffffffc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a40), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x28, r8, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 17:02:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="3a885a7717f87f7411ead2bc27aeda6dcd628f997560b0a436a6459ee1e932b74411409d2c1d7de8a2bd630dd9ada1f5adf77c96e3d6f936ac4e2e0ec29fca3371717e1d6fa44cbac41f6519e3a9171ddb08324cc5788f878b4089dc5a366f1a33", 0x61) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x1f, 0xffff, 0x1, 0x8000, 0x0, 0x5}) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f00000000c0)=""/144) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={0x0, @phonet={0x23, 0x1, 0x4, 0x3}, @sco, @in={0x2, 0x4e23, @multicast1}, 0x200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0xffffffff, 0x6}) semget$private(0x0, 0x4, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair(0x1f, 0x4, 0x8, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1c, 0x80000, 0xfffffffa, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x87}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x8010) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r6) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000000500)={{0x0, 0x4, 0x998f, 0xc53, 0x100000000, 0x5, 0x56e, 0x6, 0x6, 0x400, 0x3, 0x8, 0x8, 0x1, 0x8}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000080e00)={0x7fffffff, [{r8}], 0x1, "db4bf18e197eb4"}) [ 84.917577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.925054] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.934619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.944616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.950988] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.954180] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.969976] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.976592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.986894] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.006589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.008292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.013401] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.016193] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.019066] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.022608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.025524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.027851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.031599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.053814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.057850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.060042] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.068163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.090151] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.095333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.111794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.135109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.143437] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.147366] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.149094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.157909] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.159704] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.164571] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.166214] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.167588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.175042] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.177166] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.181043] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.182301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.183626] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.195196] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.199583] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.220571] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.400257] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.402960] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.406233] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.411568] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.414564] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.416563] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.054017] Bluetooth: hci0: command tx timeout [ 87.117791] Bluetooth: hci1: command tx timeout [ 87.117827] Bluetooth: hci2: command tx timeout [ 87.182004] Bluetooth: hci3: command tx timeout [ 87.245732] Bluetooth: hci6: command tx timeout [ 87.245783] Bluetooth: hci4: command tx timeout [ 87.310812] Bluetooth: hci5: command tx timeout [ 87.501761] Bluetooth: hci7: command tx timeout [ 89.101925] Bluetooth: hci0: command tx timeout [ 89.167889] Bluetooth: hci2: command tx timeout [ 89.168124] Bluetooth: hci1: command tx timeout [ 89.230240] Bluetooth: hci3: command tx timeout [ 89.294479] Bluetooth: hci4: command tx timeout [ 89.295023] Bluetooth: hci6: command tx timeout [ 89.357711] Bluetooth: hci5: command tx timeout [ 89.549902] Bluetooth: hci7: command tx timeout [ 91.149940] Bluetooth: hci0: command tx timeout [ 91.214164] Bluetooth: hci1: command tx timeout [ 91.214727] Bluetooth: hci2: command tx timeout [ 91.279717] Bluetooth: hci3: command tx timeout [ 91.341728] Bluetooth: hci6: command tx timeout [ 91.343449] Bluetooth: hci4: command tx timeout [ 91.406738] Bluetooth: hci5: command tx timeout [ 91.597735] Bluetooth: hci7: command tx timeout [ 93.197729] Bluetooth: hci0: command tx timeout [ 93.261787] Bluetooth: hci2: command tx timeout [ 93.263503] Bluetooth: hci1: command tx timeout [ 93.326707] Bluetooth: hci3: command tx timeout [ 93.389941] Bluetooth: hci4: command tx timeout [ 93.389967] Bluetooth: hci6: command tx timeout [ 93.454755] Bluetooth: hci5: command tx timeout [ 93.646953] Bluetooth: hci7: command tx timeout [ 142.871569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.872320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.192488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.193202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.944011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.944727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.181835] [ 145.182189] ====================================================== [ 145.183129] WARNING: possible circular locking dependency detected [ 145.184045] 6.13.0-next-20250128 #1 Not tainted [ 145.184736] ------------------------------------------------------ [ 145.186532] kworker/u8:0/11 is trying to acquire lock: [ 145.187809] ffffffff8621d9a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 145.190171] [ 145.190171] but task is already holding lock: [ 145.191509] ffff88800e128768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 145.193848] [ 145.193848] which lock already depends on the new lock. [ 145.193848] [ 145.195732] [ 145.195732] the existing dependency chain (in reverse order) is: [ 145.197460] [ 145.197460] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 145.198825] __mutex_lock+0x13d/0xb50 [ 145.199586] wiphy_register+0x1b2e/0x25d0 [ 145.200345] ieee80211_register_hw+0x23a4/0x3d60 [ 145.201169] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 145.202026] init_mac80211_hwsim+0x389/0x870 [ 145.202828] do_one_initcall+0xf9/0x640 [ 145.203585] kernel_init_freeable+0x53d/0x7a0 [ 145.204403] kernel_init+0x1e/0x2d0 [ 145.205056] ret_from_fork+0x48/0x80 [ 145.205715] ret_from_fork_asm+0x1a/0x30 [ 145.206497] [ 145.206497] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 145.207461] __lock_acquire+0x29fd/0x4580 [ 145.208227] lock_acquire+0x19b/0x520 [ 145.208923] __mutex_lock+0x13d/0xb50 [ 145.209674] unregister_netdevice_many_notify+0x1612/0x1c80 [ 145.210647] unregister_netdevice_queue+0x224/0x2e0 [ 145.211529] _cfg80211_unregister_wdev+0x57b/0x700 [ 145.212409] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 145.213280] ieee80211_unregister_hw+0x55/0x3a0 [ 145.214112] hwsim_exit_net+0x3a0/0x730 [ 145.214848] ops_exit_list+0xb3/0x180 [ 145.215563] cleanup_net+0x546/0xad0 [ 145.216264] process_one_work+0x8ee/0x1a10 [ 145.217065] worker_thread+0x674/0xe70 [ 145.217819] kthread+0x3ab/0x720 [ 145.218495] ret_from_fork+0x48/0x80 [ 145.219184] ret_from_fork_asm+0x1a/0x30 [ 145.219966] [ 145.219966] other info that might help us debug this: [ 145.219966] [ 145.221151] Possible unsafe locking scenario: [ 145.221151] [ 145.222076] CPU0 CPU1 [ 145.222777] ---- ---- [ 145.223482] lock(&rdev->wiphy.mtx); [ 145.224107] lock(rtnl_mutex); [ 145.225005] lock(&rdev->wiphy.mtx); [ 145.225968] lock(rtnl_mutex); [ 145.226522] [ 145.226522] *** DEADLOCK *** [ 145.226522] [ 145.227423] 4 locks held by kworker/u8:0/11: [ 145.228101] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 145.229678] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 145.231230] #2: ffffffff862119d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 145.232662] #3: ffff88800e128768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 145.234263] [ 145.234263] stack backtrace: [ 145.234944] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250128 #1 [ 145.235012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 145.235052] Workqueue: netns cleanup_net [ 145.235128] Call Trace: [ 145.235145] [ 145.235166] dump_stack_lvl+0xca/0x120 [ 145.235272] print_circular_bug+0x47b/0x750 [ 145.235357] check_noncircular+0x2e9/0x3c0 [ 145.235435] ? __pfx_check_noncircular+0x10/0x10 [ 145.235513] ? hlock_class+0x4e/0x130 [ 145.235569] ? mark_lock+0xac/0xed0 [ 145.235643] ? srso_return_thunk+0x5/0x5f [ 145.235746] ? sched_clock+0x37/0x60 [ 145.235851] ? lockdep_lock+0xba/0x1b0 [ 145.235958] ? __pfx_lockdep_lock+0x10/0x10 [ 145.236074] __lock_acquire+0x29fd/0x4580 [ 145.236174] ? __pfx___lock_acquire+0x10/0x10 [ 145.236254] ? lock_release+0x20f/0x6f0 [ 145.236337] ? __pfx_lock_release+0x10/0x10 [ 145.236426] lock_acquire+0x19b/0x520 [ 145.236506] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 145.236597] ? __pfx_lock_acquire+0x10/0x10 [ 145.236681] ? srso_return_thunk+0x5/0x5f [ 145.236784] ? lock_release+0x20f/0x6f0 [ 145.236868] ? srso_return_thunk+0x5/0x5f [ 145.236973] ? lock_is_held_type+0x9e/0x120 [ 145.237076] ? srso_return_thunk+0x5/0x5f [ 145.237186] __mutex_lock+0x13d/0xb50 [ 145.237284] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 145.237368] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 145.237454] ? srso_return_thunk+0x5/0x5f [ 145.237558] ? synchronize_rcu_expedited+0x38a/0x420 [ 145.237639] ? __pfx___mutex_lock+0x10/0x10 [ 145.237740] ? __pfx_autoremove_wake_function+0x10/0x10 [ 145.237840] ? srso_return_thunk+0x5/0x5f [ 145.237943] ? kasan_quarantine_put+0x84/0x1e0 [ 145.238054] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 145.238119] ? srso_return_thunk+0x5/0x5f [ 145.238231] unregister_netdevice_many_notify+0x1612/0x1c80 [ 145.238316] ? __virt_addr_valid+0x2e8/0x5d0 [ 145.238413] ? __pfx_lock_release+0x10/0x10 [ 145.238497] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 145.238583] ? find_held_lock+0x2c/0x110 [ 145.238691] ? srso_return_thunk+0x5/0x5f [ 145.238799] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 145.238921] ? srso_return_thunk+0x5/0x5f [ 145.239024] ? lock_release+0x20f/0x6f0 [ 145.239107] ? __pfx_lock_release+0x10/0x10 [ 145.239187] ? srso_return_thunk+0x5/0x5f [ 145.239290] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 145.239379] ? srso_return_thunk+0x5/0x5f [ 145.239492] unregister_netdevice_queue+0x224/0x2e0 [ 145.239573] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 145.239655] ? up_write+0x195/0x520 [ 145.239757] _cfg80211_unregister_wdev+0x57b/0x700 [ 145.239855] ? srso_return_thunk+0x5/0x5f [ 145.239966] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 145.240038] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 145.240110] ? srso_return_thunk+0x5/0x5f [ 145.240214] ? srso_return_thunk+0x5/0x5f [ 145.240317] ? synchronize_rcu+0x1ff/0x260 [ 145.240396] ieee80211_unregister_hw+0x55/0x3a0 [ 145.240480] hwsim_exit_net+0x3a0/0x730 [ 145.240558] ? __pfx_hwsim_exit_net+0x10/0x10 [ 145.240634] ? srso_return_thunk+0x5/0x5f [ 145.240737] ? netdev_run_todo+0x788/0x1040 [ 145.240829] ? __pfx_hwsim_exit_net+0x10/0x10 [ 145.240908] ops_exit_list+0xb3/0x180 [ 145.240987] cleanup_net+0x546/0xad0 [ 145.241071] ? __pfx_cleanup_net+0x10/0x10 [ 145.241171] process_one_work+0x8ee/0x1a10 [ 145.241293] ? __pfx_lock_acquire+0x10/0x10 [ 145.241376] ? __pfx_process_one_work+0x10/0x10 [ 145.241485] ? srso_return_thunk+0x5/0x5f [ 145.241588] ? move_linked_works+0x172/0x270 [ 145.241671] ? srso_return_thunk+0x5/0x5f [ 145.241775] ? assign_work+0x196/0x240 [ 145.241882] worker_thread+0x674/0xe70 [ 145.241990] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 145.242087] ? __pfx_worker_thread+0x10/0x10 [ 145.242199] kthread+0x3ab/0x720 [ 145.242295] ? __pfx_kthread+0x10/0x10 [ 145.242392] ? srso_return_thunk+0x5/0x5f [ 145.242495] ? finish_task_switch.isra.0+0x206/0x840 [ 145.242589] ? __pfx_kthread+0x10/0x10 [ 145.242690] ret_from_fork+0x48/0x80 [ 145.242748] ? __pfx_kthread+0x10/0x10 [ 145.242846] ret_from_fork_asm+0x1a/0x30 [ 145.242978] [ 147.224592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.227238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.229299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.232799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.236082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.240026] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.241867] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.244340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.247208] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.254468] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.256858] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.259088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.321076] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.325806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.327345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.331570] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.333825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.336113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.541879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.543567] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.546466] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.552858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.554887] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.562193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.607063] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.620363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.631276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.686117] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.700370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.701604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.703052] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.712456] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.715700] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.723810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.724559] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.725808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.727505] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.729242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.731886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.734693] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.740287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.742543] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.808278] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.830304] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.838320] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.853870] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.855507] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.857876] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.261907] Bluetooth: hci1: command tx timeout [ 149.325876] Bluetooth: hci0: command tx timeout [ 149.390691] Bluetooth: hci2: command tx timeout [ 149.582855] Bluetooth: hci3: command tx timeout [ 149.837739] Bluetooth: hci5: command tx timeout [ 149.904650] Bluetooth: hci7: command tx timeout [ 149.905108] Bluetooth: hci4: command tx timeout [ 149.967648] Bluetooth: hci6: command tx timeout [ 151.310726] Bluetooth: hci1: command tx timeout [ 151.374737] Bluetooth: hci0: command tx timeout [ 151.438692] Bluetooth: hci2: command tx timeout [ 151.630785] Bluetooth: hci3: command tx timeout [ 151.886662] Bluetooth: hci5: command tx timeout [ 151.949739] Bluetooth: hci7: command tx timeout [ 151.950162] Bluetooth: hci4: command tx timeout [ 152.014676] Bluetooth: hci6: command tx timeout [ 153.358658] Bluetooth: hci1: command tx timeout [ 153.424652] Bluetooth: hci0: command tx timeout [ 153.486778] Bluetooth: hci2: command tx timeout [ 153.680765] Bluetooth: hci3: command tx timeout [ 153.934748] Bluetooth: hci5: command tx timeout [ 153.997750] Bluetooth: hci7: command tx timeout [ 153.998208] Bluetooth: hci4: command tx timeout [ 154.062687] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 17:03:06 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff855863be RCX=ffffffff8166b091 RDX=ffff8880095c3780 RSI=ffffffff8166b09f RDI=0000000000000001 RBP=0000000000000000 RSP=ffff8880095de6f0 R8 =ffff8880095de7c0 R9 =ffff8880095de8e0 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=ffff8880095de8ef R14=00000000000001f1 R15=dffffc0000000000 RIP=ffffffff8171a408 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557e67049120 CR3=000000001564c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=61532f64616f4c20676e697472617453 XMM02=206c6c694b20465220657661532f6461 XMM03=646d65747379732033303a33303a3731 XMM04=6456774875434142334f726f59427469 XMM05=485320415352203a3268737320343737 XMM06=206d6f726620746f6f7220726f662079 XMM07=00000000000000000000000000000000 XMM08=3a677562656420676f6c737973720000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce42d00 RCX=ffffffff81664972 RDX=ffff888016fb0000 RSI=ffffffff8166494c RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880325677c8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=ffffed100d9c85a1 R13=ffff88806ce42d08 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8166494e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5408fcac78 CR3=000000001564c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2035303a33303a3731203832206e614a XMM01=6f4c2064657472617453203a5d315b64 XMM02=6c6c694b20465220657661532f64616f XMM03=65747379732072656c6c616b7a797320 XMM04=2033303a32303a3731203832206e614a XMM05=65636f72703d7373616c63742030733a XMM06=733a755f6d65747379733d747865746e XMM07=725f6d65747379733a755f6d65747379 XMM08=7475636578652d7a7973223d6d6d6f63 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000