syzkaller login: [   60.153946] sshd (239) used greatest stack depth: 22672 bytes left
Warning: Permanently added '[localhost]:38463' (ECDSA) to the list of known hosts.
2025/01/28 20:12:53 fuzzer started
2025/01/28 20:12:54 dialing manager at localhost:40187
[   61.896665] cgroup: Unknown subsys name 'net'
[   61.977045] cgroup: Unknown subsys name 'cpuset'
[   61.999169] cgroup: Unknown subsys name 'rlimit'
[   67.715255] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/28 20:13:12 syscalls: 230
2025/01/28 20:13:12 code coverage: enabled
2025/01/28 20:13:12 comparison tracing: enabled
2025/01/28 20:13:12 extra coverage: enabled
2025/01/28 20:13:12 setuid sandbox: enabled
2025/01/28 20:13:12 namespace sandbox: enabled
2025/01/28 20:13:12 Android sandbox: enabled
2025/01/28 20:13:12 fault injection: enabled
2025/01/28 20:13:12 leak checking: enabled
2025/01/28 20:13:12 net packet injection: enabled
2025/01/28 20:13:12 net device setup: enabled
2025/01/28 20:13:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/28 20:13:12 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/28 20:13:12 USB emulation: enabled
2025/01/28 20:13:12 hci packet injection: enabled
2025/01/28 20:13:12 wifi device emulation: enabled
2025/01/28 20:13:12 802.15.4 emulation: enabled
2025/01/28 20:13:12 fetching corpus: 0, signal 0/0 (executing program)
2025/01/28 20:13:13 starting 8 fuzzer processes
20:13:13 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "1c28e89769eebcf72cd560a60ba7b3872dbc1a667d8433986a365d964ab8baa2531d6156d8400e37accae4001afe4d8140340b81367a62c7a914d84ee680eac3", 0x2b}, 0x48, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$search(0xa, r1, &(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x2}, r1)
r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$search(0xa, 0x0, &(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x0}, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x1}, r2)
r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$reject(0x13, r1, 0x80000000, 0x4, r3)
keyctl$get_persistent(0x16, 0xee01, r0)
r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r3)
keyctl$unlink(0x9, r2, r2)
keyctl$negate(0xd, r1, 0x2bb, r1)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000480), 0x4)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000004c0))
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000500), 0x8)
add_key(&(0x7f0000000540)='logon\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="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", 0x1000, 0xffffffffffffffff)
keyctl$search(0xa, r0, &(0x7f00000015c0)='pkcs7_test\x00', &(0x7f0000001600)={'syz', 0x0}, r4)
r5 = add_key(&(0x7f0000001740)='big_key\x00', &(0x7f0000001780)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r6 = add_key(&(0x7f0000001640)='cifs.spnego\x00', &(0x7f0000001680)={'syz', 0x2}, &(0x7f00000016c0)="541253502d95ab46b427b18d13df8f3ca079ddc1029fc6b9222434a1b9f4abc44ac43123f281f19ab998ce29eedda7ae5c88f7da2e0ed755135f7874e135280dc15b5035105adad40ea4f9ca7277aa612d231ee66fa8", 0x56, r5)
keyctl$KEYCTL_MOVE(0x1e, r1, r6, r4, 0x1)

20:13:13 executing program 1:
r0 = clone3(&(0x7f0000000280)={0x200006200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x2}, &(0x7f00000000c0)=""/193, 0xc1, &(0x7f00000001c0)=""/128, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58)
getpgrp(r1)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8044000}, 0x0)
r2 = perf_event_open$cgroup(&(0x7f00000004c0)={0x4, 0x80, 0x6, 0x7, 0x20, 0x5, 0x0, 0x0, 0x104, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x579b, 0x0, @perf_config_ext={0x401, 0x9}, 0x8, 0x7ff, 0x0, 0x9, 0x401, 0x5, 0x1, 0x0, 0x30000, 0x0, 0x401}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xf)
r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x1f)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0xa4, 0x0, &(0x7f0000000600)=[@dead_binder_done, @decrefs, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000540)={@flat=@handle={0x73682a85, 0x1200, 0x1}, @fda={0x66646185, 0x7, 0x1, 0x3c}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000005c0)={0x0, 0x18, 0x38}}}, @increfs_done, @increfs={0x40046304, 0x3}, @free_buffer={0x40086303, r3}, @increfs], 0xc7, 0x0, &(0x7f00000006c0)="7a8e2d91cbe5781e8600870544b1367297e75fdfaa593cfe4979658a472e945bfd6b5a5a63db4f3bad64a0425a3596dda7e17e723cf5d4e595188b3029be22d9e5d4cf296d14ab188903724714b2e8aa5d18c98e8fbe1f99e9f17780fefc022029010e81e5252bdec7ba94dace4d22e55b43c4e14f0ab9ec4b4872770b3bd7c71185af4b2de87eb7a6f347c7f7fc2ca80b9f1e9cb32e0510b9cda8b01b907b1d1061c45ce4c0f78c09fad67911d9953aeb0cd3a6d754b02af225eccfa623c01c2ec347bc0cfbbd"})
r4 = fork()
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000008c0), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, &(0x7f0000001980)=[@rights={{0x2c, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x40002000)
perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x1f, 0x7, 0x7, 0x8, 0x0, 0x7, 0x11081, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000800), 0x1}, 0x40480, 0x9, 0x200, 0x6, 0x7, 0x5, 0x0, 0x0, 0x4601fb87, 0x0, 0x6}, r4, 0xc, r7, 0x0)
openat$cgroup_pressure(r6, &(0x7f0000001a40)='cpu.pressure\x00', 0x2, 0x0)
sendto(r8, &(0x7f0000001a80)="e464b0f4ae737c29892cfb9d6ad486701c863888746fa57793e595629a90a36d647b4be32bfdb858f91b79e4f1bfa15ec263609bff43aa84fe2fbc7663a0880f1d28907206ac7e0e8f0f2f594c4efe97c9ccb947", 0x54, 0x5, 0x0, 0x0)
r9 = memfd_secret(0x80000)
perf_event_open(&(0x7f0000001b40)={0x0, 0x80, 0x8, 0x8, 0x6, 0x39, 0x0, 0x10001, 0x20, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000001b00)}, 0x5408, 0x1ff, 0x1, 0x6, 0x8, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x1ff}, r0, 0x5, r9, 0x0)
perf_event_open$cgroup(&(0x7f0000001c00)={0x2, 0x80, 0x60, 0x2, 0x20, 0x6, 0x0, 0x3, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffff263, 0x2, @perf_bp={&(0x7f0000001bc0), 0x3}, 0xa5024fee180274b3, 0x8bb, 0xb2, 0x2, 0x7, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xc, r5, 0xc)
io_uring_setup(0x777a, &(0x7f0000001c80)={0x0, 0xa001, 0x10, 0x3, 0x256})
ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000001d00))
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x673}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
mkdirat$cgroup(r7, &(0x7f0000001e40)='syz0\x00', 0x1ff)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001e80), 0x840, 0x0)
ioctl$KDFONTOP_SET_DEF(r10, 0x4b72, &(0x7f00000022c0)={0x2, 0x1, 0x5, 0x4, 0x199, &(0x7f0000001ec0)="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"})

20:13:13 executing program 2:
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x3)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0xed, 0xd1, 0x7, 0x0, 0x80000000, 0x0, 0xeea20004fab91405, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x13300, 0x3c03, 0x8ce, 0x5, 0xffffffffffffffc0, 0xffff, 0x0, 0x0, 0xfffff2f3, 0x0, 0x7}, 0xffffffffffffffff, 0x3, r2, 0xa)
r4 = memfd_secret(0x80000)
openat$cgroup_procs(r4, &(0x7f0000000300)='tasks\x00', 0x2, 0x0)
socketpair(0x18, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(r0, &(0x7f0000000440)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x1, 0x1, 0x6, 0x1, 0x0, 0x6, 0x800, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000380), 0xa}, 0x8, 0x2, 0x80, 0x0, 0x4, 0x9, 0xffff, 0x0, 0x1, 0x0, 0x2}, r6, 0xd, 0xffffffffffffffff, 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4004, @fd_index=0x8, 0x800, 0x4, 0x5, 0x1, 0x1, {0x2}}, 0xfffffffa)
r7 = socket$inet(0x2, 0xa, 0xba)
ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f00000004c0))
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000500)=0x7ff, 0x4)
openat$cgroup_ro(r1, &(0x7f0000000540)='cpuacct.usage_all\x00', 0x0, 0x0)
sched_rr_get_interval(r3, &(0x7f0000000580))
bind$bt_sco(r2, &(0x7f00000005c0), 0x8)
r8 = openat$cgroup(r2, &(0x7f0000000600)='syz0\x00', 0x200002, 0x0)
openat$cgroup_type(r8, &(0x7f0000000640), 0x2, 0x0)
r9 = accept4$bt_l2cap(r4, &(0x7f0000000680)={0x1f, 0x0, @fixed}, &(0x7f00000006c0)=0xe, 0x80800)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r9, 0x6, 0x2, &(0x7f0000000700)={0x3ff, "bf1cfc"}, 0x6)
socketpair(0x25, 0x3, 0x6, &(0x7f0000000740)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000000780)=0x5, &(0x7f00000007c0)=0x2)

[   81.079949] audit: type=1400 audit(1738095193.795:7): avc:  denied  { execmem } for  pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
20:13:13 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
mmap$usbmon(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2, 0x8010, 0xffffffffffffffff, 0x803)
r1 = memfd_secret(0x80000)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x281}, "5ad0255a55376327", "e9963589d986777e495a2f4627be7c81", "29a02409", "4c36413996fd9038"}, 0x28)
epoll_create1(0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="a18260ddb9dccfbf2563abdee35d462a", 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x9)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @private=0xa010100, @broadcast}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r3=>0x0, 0x29, 0x3, 0x7f, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private1, 0x8000, 0x80, 0x1, 0xa7}})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', <r5=>r3, 0x29, 0x0, 0x20, 0x2, 0x2, @local, @loopback, 0x8000, 0x8057, 0xffffffff, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x9c, r4, 0x300, 0xffff, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20040001)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000540)=@gcm_256={{0x303}, "0b51bf5f27a8390a", "b1691276c706fb5d6e5009cece93419b66c600572b685474a994f37263daf251", "e455a29f", "5016fa94f491ee98"}, 0x38)
socket$inet6_udp(0xa, 0x2, 0x0)

20:13:13 executing program 4:
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x48, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/172, 0xac, 0x1, 0x33}, @fda={0x66646185, 0x4, 0x1, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/20, 0x14, 0x1, 0x1a}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @register_looper], 0xae, 0x0, &(0x7f0000000280)="7ee9ec4b7a58fbc177556a64069c085e5e9438f2166d3c89d5545e34f028284f476db612674f8d54e5a1f422e2c73e619b8305643e8b71ddfeb624c29751958110b118fa837c6a1e992cc1d3cf61fa0206cd435833c67f3859fc03dd32326cff65da98f5cad70eca5dc938d2b1783df9d8ddf794fe0b7177144d7d035af7ecdfcbb3981729e52a053164e4b36e31136fd732e8f2324213f58da96d6b41f682b2a5006f99256b1323373965a865c8"})
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000380)={0x4, 0xff, 0x80000000})
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000004c0)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000400)=""/139, 0x8b})
ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000500)={0xc1f5, 0xb9, 0x6})
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x71ef)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x74, 0x0, &(0x7f0000000580)="8975db5b6f74c8950a6cb3bc5a5a5cbf14ad1e26621729b56c09a82848314dcd7bd2837544da3ebba1aff0e30b660c5713e320a9e5e6634570084525e3ec1e656935cfd8b365ac83eced2020b9daa7a0128b227399fe6b2b0b5c7df1a4085b1144ea49263b258d29be1495ff7e4c075c8d69911e"})
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000640)={0x7d, 0xff, 0x3f})
r1 = syz_open_dev$usbmon(&(0x7f0000000680), 0x4000, 0x254400)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000740)={&(0x7f00000006c0), &(0x7f0000000700)=""/8, 0x8})
ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x80)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000780)=""/105)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000800), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/138, 0x8a}, {&(0x7f0000000940)=""/164, 0xa4}, {&(0x7f0000000a00)=""/21, 0x15}], 0x3, &(0x7f0000000a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x68}, 0x100)
ioctl$MON_IOCQ_URB_LEN(r2, 0x9201)
getsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)

20:13:13 executing program 5:
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x84, 0x1, 0x40, 0x0, 0x0, 0x2, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1008, 0x3, 0x4, 0x7afe389524d18255, 0x6, 0x3, 0x8, 0x0, 0x400}, r0, 0x1, 0xffffffffffffffff, 0x4)
keyctl$link(0x8, 0x0, 0xfffffffffffffffb)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001640)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001680), 0x2, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000016c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000001700)='devices.list\x00', 0x0, 0x0)
ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000001740))
r5 = perf_event_open(&(0x7f0000001800)={0x0, 0x80, 0x7, 0x6, 0x8, 0xff, 0x0, 0x63a, 0x21, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x9, 0x7}, 0x50000, 0x7, 0x3, 0x1, 0x4, 0xffffeec0, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0xb)
perf_event_open$cgroup(&(0x7f0000001780)={0x1, 0x80, 0x20, 0x1f, 0x7, 0x5, 0x0, 0x0, 0x120, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc3, 0x1, @perf_config_ext={0x400, 0x1}, 0x820, 0x7ff, 0x7, 0x1, 0x3, 0x100, 0x4, 0x0, 0x5, 0x0, 0xd984}, r3, 0x5, r5, 0x8)
perf_event_open$cgroup(&(0x7f00000018c0)={0x0, 0x80, 0x7, 0x7f, 0x1f, 0x0, 0x0, 0xbe, 0x20000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001880), 0x2}, 0x80, 0x8, 0x2, 0x5, 0x2, 0xcb3, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff}, r2, 0xd, r1, 0x8)
r6 = memfd_secret(0x0)
openat$cgroup_ro(r6, &(0x7f0000001940)='cpu.stat\x00', 0x0, 0x0)
openat$cgroup_type(r3, &(0x7f0000001980), 0x2, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000019c0)=0x6)
ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001a00))
openat$cgroup_subtree(r4, &(0x7f0000001a40), 0x2, 0x0)

20:13:13 executing program 6:
read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8)
r0 = socket$inet6(0xa, 0x2, 0x3)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x2, 0x7f, 0x0, 0x41, @mcast2, @local, 0x3c28, 0x20, 0x9af8, 0x4}})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x2, 0xfffffffc, 0x3ff, 0x6, 0xa47, 0x5})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', <r3=>r1, 0x2f, 0x5, 0x1, 0x80000000, 0x0, @remote, @local, 0x20, 0x10, 0xff, 0x39}})
r4 = openat$cgroup_ro(r2, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0)
openat$cgroup_type(r4, &(0x7f0000000280), 0x2, 0x0)
r5 = memfd_secret(0x80000)
sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40060}, 0x8000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800)
openat$cgroup_type(r2, &(0x7f0000000980), 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r7, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x48004)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={<r8=>0xffffffffffffffff})
socketpair(0x25, 0x80000, 0xffffff01, &(0x7f0000000bc0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)={<r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x9c, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r10}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x58bc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000dc0), 0x6e, &(0x7f0000000e40), 0x0, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x20000001)

20:13:13 executing program 7:
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000))
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000040)={0x1216, 0x3ff, 0x7})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCSIG(r0, 0x40045436, 0x28)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x0, 0xff, 0x60, 0x0, 0x2000, 0x1004, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x9852, 0x200, 0x5, 0x3, 0x1, 0x1000, 0x800, 0x0, 0x1a200, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x9)
perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x80, 0x2, 0x1f, 0x61, 0x0, 0x1, 0x4000, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x2004, 0x9, 0xff, 0x9, 0x8, 0x101, 0x8, 0x0, 0x9, 0x0, 0xfffffffffffffbff}, 0xffffffffffffffff, 0x5, r1, 0xe)
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000200)=0x9)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000280))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f00000002c0)=0x4)
ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000300)={0x9, 0x40, 0x80000000})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f00000003c0))
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/135, 0x87, 0x0, &(0x7f00000004c0)=""/17, 0x11}, &(0x7f0000000540)=0x40)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0xbadd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2}, 0xe)
ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000005c0))
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0)

[   82.449398] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.455724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.458226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.463753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.468724] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   82.475252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.570708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.572921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.577736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.580216] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.584555] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.587638] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   82.588886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.593019] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.603494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.627847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.635181] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.639908] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   82.650162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.653772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.666306] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   82.671379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.672993] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.680342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.687951] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   82.695506] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   82.697496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.701125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   82.706098] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   82.708328] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   82.710804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   82.714855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   82.716901] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   82.716964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.722806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   82.724371] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.745358] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   82.749912] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   82.755242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.758372] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   82.761006] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   82.762984] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   82.764948] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   82.766775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   82.769841] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   82.771772] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   82.773273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.784938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   84.536827] Bluetooth: hci0: command tx timeout
[   84.664511] Bluetooth: hci2: command tx timeout
[   84.728040] Bluetooth: hci1: command tx timeout
[   84.791530] Bluetooth: hci3: command tx timeout
[   84.855871] Bluetooth: hci4: command tx timeout
[   84.856683] Bluetooth: hci6: command tx timeout
[   84.856695] Bluetooth: hci7: command tx timeout
[   84.920636] Bluetooth: hci5: command tx timeout
[   86.585528] Bluetooth: hci0: command tx timeout
[   86.711579] Bluetooth: hci2: command tx timeout
[   86.775513] Bluetooth: hci1: command tx timeout
[   86.839818] Bluetooth: hci3: command tx timeout
[   86.903677] Bluetooth: hci7: command tx timeout
[   86.904512] Bluetooth: hci6: command tx timeout
[   86.905125] Bluetooth: hci4: command tx timeout
[   86.967710] Bluetooth: hci5: command tx timeout
[   88.632563] Bluetooth: hci0: command tx timeout
[   88.759830] Bluetooth: hci2: command tx timeout
[   88.823600] Bluetooth: hci1: command tx timeout
[   88.888447] Bluetooth: hci3: command tx timeout
[   88.952528] Bluetooth: hci6: command tx timeout
[   88.952946] Bluetooth: hci7: command tx timeout
[   88.953006] Bluetooth: hci4: command tx timeout
[   89.016490] Bluetooth: hci5: command tx timeout
[   90.679556] Bluetooth: hci0: command tx timeout
[   90.808639] Bluetooth: hci2: command tx timeout
[   90.872623] Bluetooth: hci1: command tx timeout
[   90.937228] Bluetooth: hci3: command tx timeout
[   90.999526] Bluetooth: hci4: command tx timeout
[   90.999555] Bluetooth: hci7: command tx timeout
[   90.999994] Bluetooth: hci6: command tx timeout
[   91.064455] Bluetooth: hci5: command tx timeout
[  139.856633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.857357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.041015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.042060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.263987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.265465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.496915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.497850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.645629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.646297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.872836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.873602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.065415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.066089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.717483] 
[  141.717709] ======================================================
[  141.718241] WARNING: possible circular locking dependency detected
[  141.718784] 6.13.0-next-20250128 #1 Not tainted
[  141.719186] ------------------------------------------------------
[  141.720491] kworker/u8:2/3796 is trying to acquire lock:
[  141.721644] ffffffff8621d9a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[  141.723699] 
[  141.723699] but task is already holding lock:
[  141.725277] ffff888033770768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  141.727231] 
[  141.727231] which lock already depends on the new lock.
[  141.727231] 
[  141.728744] 
[  141.728744] the existing dependency chain (in reverse order) is:
[  141.729366] 
[  141.729366] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  141.729929]        __mutex_lock+0x13d/0xb50
[  141.730326]        wiphy_register+0x1b2e/0x25d0
[  141.730750]        ieee80211_register_hw+0x23a4/0x3d60
[  141.731213]        mac80211_hwsim_new_radio+0x2759/0x4d60
[  141.731696]        init_mac80211_hwsim+0x389/0x870
[  141.732146]        do_one_initcall+0xf9/0x640
[  141.732560]        kernel_init_freeable+0x53d/0x7a0
[  141.733012]        kernel_init+0x1e/0x2d0
[  141.733379]        ret_from_fork+0x48/0x80
[  141.733745]        ret_from_fork_asm+0x1a/0x30
[  141.734170] 
[  141.734170] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  141.734694]        __lock_acquire+0x29fd/0x4580
[  141.735116]        lock_acquire+0x19b/0x520
[  141.735507]        __mutex_lock+0x13d/0xb50
[  141.735910]        unregister_netdevice_many_notify+0x1612/0x1c80
[  141.736447]        unregister_netdevice_queue+0x224/0x2e0
[  141.736928]        _cfg80211_unregister_wdev+0x57b/0x700
[  141.737420]        ieee80211_remove_interfaces+0x2f2/0x6b0
[  141.737900]        ieee80211_unregister_hw+0x55/0x3a0
[  141.738357]        hwsim_exit_net+0x3a0/0x730
[  141.738765]        ops_exit_list+0xb3/0x180
[  141.739152]        cleanup_net+0x546/0xad0
[  141.739536]        process_one_work+0x8ee/0x1a10
[  141.739978]        worker_thread+0x674/0xe70
[  141.740390]        kthread+0x3ab/0x720
[  141.740758]        ret_from_fork+0x48/0x80
[  141.741131]        ret_from_fork_asm+0x1a/0x30
[  141.741565] 
[  141.741565] other info that might help us debug this:
[  141.741565] 
[  141.742208]  Possible unsafe locking scenario:
[  141.742208] 
[  141.742697]        CPU0                    CPU1
[  141.743076]        ----                    ----
[  141.743455]   lock(&rdev->wiphy.mtx);
[  141.743792]                                lock(rtnl_mutex);
[  141.744277]                                lock(&rdev->wiphy.mtx);
[  141.744800]   lock(rtnl_mutex);
[  141.745098] 
[  141.745098]  *** DEADLOCK ***
[  141.745098] 
[  141.745595] 4 locks held by kworker/u8:2/3796:
[  141.745980]  #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[  141.746842]  #1: ffff888034f07d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[  141.747668]  #2: ffffffff862119d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[  141.748438]  #3: ffff888033770768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  141.749304] 
[  141.749304] stack backtrace:
[  141.749675] CPU: 0 UID: 0 PID: 3796 Comm: kworker/u8:2 Not tainted 6.13.0-next-20250128 #1
[  141.749712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  141.749734] Workqueue: netns cleanup_net
[  141.749775] Call Trace:
[  141.749784]  <TASK>
[  141.749796]  dump_stack_lvl+0xca/0x120
[  141.749854]  print_circular_bug+0x47b/0x750
[  141.749899]  check_noncircular+0x2e9/0x3c0
[  141.749941]  ? __pfx_check_noncircular+0x10/0x10
[  141.749983]  ? hlock_class+0x4e/0x130
[  141.750013]  ? mark_lock+0xac/0xed0
[  141.750052]  ? srso_return_thunk+0x5/0x5f
[  141.750108]  ? sched_clock+0x37/0x60
[  141.750164]  ? lockdep_lock+0xba/0x1b0
[  141.750221]  ? __pfx_lockdep_lock+0x10/0x10
[  141.750283]  __lock_acquire+0x29fd/0x4580
[  141.750336]  ? __pfx___lock_acquire+0x10/0x10
[  141.750379]  ? lock_release+0x20f/0x6f0
[  141.750423]  ? __pfx_lock_release+0x10/0x10
[  141.750471]  lock_acquire+0x19b/0x520
[  141.750514]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  141.750562]  ? __pfx_lock_acquire+0x10/0x10
[  141.750607]  ? srso_return_thunk+0x5/0x5f
[  141.750662]  ? lock_release+0x20f/0x6f0
[  141.750705]  ? srso_return_thunk+0x5/0x5f
[  141.750760]  ? lock_is_held_type+0x9e/0x120
[  141.750815]  ? srso_return_thunk+0x5/0x5f
[  141.750874]  __mutex_lock+0x13d/0xb50
[  141.750926]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  141.750971]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  141.751017]  ? srso_return_thunk+0x5/0x5f
[  141.751072]  ? synchronize_rcu_expedited+0x38a/0x420
[  141.751116]  ? __pfx___mutex_lock+0x10/0x10
[  141.751169]  ? __pfx_autoremove_wake_function+0x10/0x10
[  141.751223]  ? srso_return_thunk+0x5/0x5f
[  141.751278]  ? kasan_quarantine_put+0x84/0x1e0
[  141.751338]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  141.751373]  ? srso_return_thunk+0x5/0x5f
[  141.751433]  unregister_netdevice_many_notify+0x1612/0x1c80
[  141.751478]  ? __virt_addr_valid+0x2e8/0x5d0
[  141.751531]  ? __pfx_lock_release+0x10/0x10
[  141.751575]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  141.751621]  ? find_held_lock+0x2c/0x110
[  141.751678]  ? srso_return_thunk+0x5/0x5f
[  141.751736]  ? kernfs_remove_by_name_ns+0xc7/0x130
[  141.751796]  ? srso_return_thunk+0x5/0x5f
[  141.751851]  ? lock_release+0x20f/0x6f0
[  141.751895]  ? __pfx_lock_release+0x10/0x10
[  141.751937]  ? srso_return_thunk+0x5/0x5f
[  141.751992]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  141.752040]  ? srso_return_thunk+0x5/0x5f
[  141.752100]  unregister_netdevice_queue+0x224/0x2e0
[  141.752143]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  141.752187]  ? up_write+0x195/0x520
[  141.752241]  _cfg80211_unregister_wdev+0x57b/0x700
[  141.752294]  ? srso_return_thunk+0x5/0x5f
[  141.752353]  ieee80211_remove_interfaces+0x2f2/0x6b0
[  141.752391]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  141.752430]  ? srso_return_thunk+0x5/0x5f
[  141.752485]  ? srso_return_thunk+0x5/0x5f
[  141.752540]  ? synchronize_rcu+0x1ff/0x260
[  141.752582]  ieee80211_unregister_hw+0x55/0x3a0
[  141.752627]  hwsim_exit_net+0x3a0/0x730
[  141.752669]  ? __pfx_hwsim_exit_net+0x10/0x10
[  141.752709]  ? srso_return_thunk+0x5/0x5f
[  141.752764]  ? netdev_run_todo+0x788/0x1040
[  141.752813]  ? __pfx_hwsim_exit_net+0x10/0x10
[  141.752855]  ops_exit_list+0xb3/0x180
[  141.752897]  cleanup_net+0x546/0xad0
[  141.752942]  ? __pfx_cleanup_net+0x10/0x10
[  141.752995]  process_one_work+0x8ee/0x1a10
[  141.753060]  ? __pfx_lock_acquire+0x10/0x10
[  141.753104]  ? __pfx_process_one_work+0x10/0x10
[  141.753163]  ? srso_return_thunk+0x5/0x5f
[  141.753225]  ? move_linked_works+0x172/0x270
[  141.753269]  ? srso_return_thunk+0x5/0x5f
[  141.753324]  ? assign_work+0x196/0x240
[  141.753382]  worker_thread+0x674/0xe70
[  141.753439]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  141.753491]  ? srso_return_thunk+0x5/0x5f
[  141.753546]  ? __pfx_worker_thread+0x10/0x10
[  141.753605]  kthread+0x3ab/0x720
[  141.753656]  ? __pfx_kthread+0x10/0x10
[  141.753708]  ? srso_return_thunk+0x5/0x5f
[  141.753763]  ? finish_task_switch.isra.0+0x206/0x840
[  141.753814]  ? __pfx_kthread+0x10/0x10
[  141.753867]  ret_from_fork+0x48/0x80
[  141.753898]  ? __pfx_kthread+0x10/0x10
[  141.753951]  ret_from_fork_asm+0x1a/0x30
[  141.754016]  </TASK>
[  144.342164] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  144.344054] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  144.346664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  144.350762] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  144.354193] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  144.358165] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  144.386792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  144.388226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  144.390466] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  144.392462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  144.394732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  144.394747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  144.398067] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  144.403554] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  144.405114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  144.414312] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  144.417947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  144.423477] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  144.425619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  144.428374] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  144.438203] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  144.439988] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  144.446264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  144.457258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  144.470033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  144.473565] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  144.475285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  144.483580] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  144.485623] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  144.487632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  144.513799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  144.530079] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  144.531536] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  144.553459] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  144.555204] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  144.557958] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  144.561673] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  144.580963] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  144.589209] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  144.589547] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  144.591307] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  144.592582] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  144.597082] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  144.605550] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  144.606205] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  144.638703] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  144.645627] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  144.665004] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.423554] Bluetooth: hci1: command tx timeout
[  146.424027] Bluetooth: hci0: command tx timeout
[  146.487592] Bluetooth: hci2: command tx timeout
[  146.551709] Bluetooth: hci3: command tx timeout
[  146.680521] Bluetooth: hci7: command tx timeout
[  146.743459] Bluetooth: hci6: command tx timeout
[  146.743933] Bluetooth: hci5: command tx timeout
[  146.744343] Bluetooth: hci4: command tx timeout
[  148.474435] Bluetooth: hci0: command tx timeout
[  148.474915] Bluetooth: hci1: command tx timeout
[  148.536501] Bluetooth: hci2: command tx timeout
[  148.600487] Bluetooth: hci3: command tx timeout
[  148.728477] Bluetooth: hci7: command tx timeout
[  148.792488] Bluetooth: hci6: command tx timeout
[  148.792937] Bluetooth: hci4: command tx timeout
[  148.793348] Bluetooth: hci5: command tx timeout
[  150.519519] Bluetooth: hci1: command tx timeout
[  150.519998] Bluetooth: hci0: command tx timeout
[  150.583428] Bluetooth: hci2: command tx timeout
[  150.649422] Bluetooth: hci3: command tx timeout
[  150.776446] Bluetooth: hci7: command tx timeout
[  150.839437] Bluetooth: hci5: command tx timeout
[  150.839877] Bluetooth: hci4: command tx timeout
[  150.840281] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
20:14:14  Registers:
info registers vcpu 0
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8283f415 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff888034f06d20
R8 =0000000000000000 R9 =ffffed100175a046 R10=0000000000000020 R11=3a6b636f6c206762
R12=0000000000000020 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f400
RIP=ffffffff8283f46d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055844ce44ba8 CR3=0000000023d6a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000005 XMM01=ffffffffffffff00ffffffffffffffff
XMM02=77656e6d70720070756f72672e61746f XMM03=646e756f662b74736f6c002f2e2f002f
XMM04=3020202020202020093a736567615062 XMM05=00000000000000000000000000000000
XMM06=2020092020202020093a0a4267203436 XMM07=00000000000000000000000000000000
XMM08=722f6c6c696b66722f6372732f2e2e00 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806ce42d00 RCX=ffffffff81664972 RDX=ffff888015655340
RSI=ffffffff8166494c RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88802cbe77b8
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003
R12=ffffed100d9c85a1 R13=ffff88806ce42d08 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff84ab3f40 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ff60e43000 CR3=0000000016bd4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000004242c1dcb98d0000
XMM02=00000000000000003fd3333333333333 XMM03=000000c0002f8db0000000c0000a8350
XMM04=000000c00036a328000000c0000a80f0 XMM05=000000c0000d2628000000c00036a378
XMM06=000000c0000d27a8000000c0000d2790 XMM07=000000c000085a20000000c0000a8218
XMM08=000000c0000d2768000000c0000a8158 XMM09=000000c0000a83f8000000c0000a8130
XMM10=000000c0000a8178000000c0000a80f8 XMM11=000000c0000d2650000000c00036a218
XMM12=000000c0000a81c8000000c0000d2930 XMM13=000000c0000a81a0000000c0000a8278
XMM14=000000c0000d2568000000c0000a82a0 XMM15=000000c000504950000000c0000d2570