syzkaller login: [ 60.153946] sshd (239) used greatest stack depth: 22672 bytes left Warning: Permanently added '[localhost]:38463' (ECDSA) to the list of known hosts. 2025/01/28 20:12:53 fuzzer started 2025/01/28 20:12:54 dialing manager at localhost:40187 [ 61.896665] cgroup: Unknown subsys name 'net' [ 61.977045] cgroup: Unknown subsys name 'cpuset' [ 61.999169] cgroup: Unknown subsys name 'rlimit' [ 67.715255] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 20:13:12 syscalls: 230 2025/01/28 20:13:12 code coverage: enabled 2025/01/28 20:13:12 comparison tracing: enabled 2025/01/28 20:13:12 extra coverage: enabled 2025/01/28 20:13:12 setuid sandbox: enabled 2025/01/28 20:13:12 namespace sandbox: enabled 2025/01/28 20:13:12 Android sandbox: enabled 2025/01/28 20:13:12 fault injection: enabled 2025/01/28 20:13:12 leak checking: enabled 2025/01/28 20:13:12 net packet injection: enabled 2025/01/28 20:13:12 net device setup: enabled 2025/01/28 20:13:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 20:13:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 20:13:12 USB emulation: enabled 2025/01/28 20:13:12 hci packet injection: enabled 2025/01/28 20:13:12 wifi device emulation: enabled 2025/01/28 20:13:12 802.15.4 emulation: enabled 2025/01/28 20:13:12 fetching corpus: 0, signal 0/0 (executing program) 2025/01/28 20:13:13 starting 8 fuzzer processes 20:13:13 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "1c28e89769eebcf72cd560a60ba7b3872dbc1a667d8433986a365d964ab8baa2531d6156d8400e37accae4001afe4d8140340b81367a62c7a914d84ee680eac3", 0x2b}, 0x48, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x2}, r1) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$search(0xa, 0x0, &(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x0}, r2) keyctl$search(0xa, 0x0, &(0x7f0000000300)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x1}, r2) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$reject(0x13, r1, 0x80000000, 0x4, r3) keyctl$get_persistent(0x16, 0xee01, r0) r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$unlink(0x9, r2, r2) keyctl$negate(0xd, r1, 0x2bb, r1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000480), 0x4) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000004c0)) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000500), 0x8) add_key(&(0x7f0000000540)='logon\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="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", 0x1000, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f00000015c0)='pkcs7_test\x00', &(0x7f0000001600)={'syz', 0x0}, r4) r5 = add_key(&(0x7f0000001740)='big_key\x00', &(0x7f0000001780)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key(&(0x7f0000001640)='cifs.spnego\x00', &(0x7f0000001680)={'syz', 0x2}, &(0x7f00000016c0)="541253502d95ab46b427b18d13df8f3ca079ddc1029fc6b9222434a1b9f4abc44ac43123f281f19ab998ce29eedda7ae5c88f7da2e0ed755135f7874e135280dc15b5035105adad40ea4f9ca7277aa612d231ee66fa8", 0x56, r5) keyctl$KEYCTL_MOVE(0x1e, r1, r6, r4, 0x1) 20:13:13 executing program 1: r0 = clone3(&(0x7f0000000280)={0x200006200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0, {0x2}, &(0x7f00000000c0)=""/193, 0xc1, &(0x7f00000001c0)=""/128, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) getpgrp(r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8044000}, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000004c0)={0x4, 0x80, 0x6, 0x7, 0x20, 0x5, 0x0, 0x0, 0x104, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x579b, 0x0, @perf_config_ext={0x401, 0x9}, 0x8, 0x7ff, 0x0, 0x9, 0x401, 0x5, 0x1, 0x0, 0x30000, 0x0, 0x401}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x1f) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0xa4, 0x0, &(0x7f0000000600)=[@dead_binder_done, @decrefs, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000540)={@flat=@handle={0x73682a85, 0x1200, 0x1}, @fda={0x66646185, 0x7, 0x1, 0x3c}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000005c0)={0x0, 0x18, 0x38}}}, @increfs_done, @increfs={0x40046304, 0x3}, @free_buffer={0x40086303, r3}, @increfs], 0xc7, 0x0, &(0x7f00000006c0)="7a8e2d91cbe5781e8600870544b1367297e75fdfaa593cfe4979658a472e945bfd6b5a5a63db4f3bad64a0425a3596dda7e17e723cf5d4e595188b3029be22d9e5d4cf296d14ab188903724714b2e8aa5d18c98e8fbe1f99e9f17780fefc022029010e81e5252bdec7ba94dace4d22e55b43c4e14f0ab9ec4b4872770b3bd7c71185af4b2de87eb7a6f347c7f7fc2ca80b9f1e9cb32e0510b9cda8b01b907b1d1061c45ce4c0f78c09fad67911d9953aeb0cd3a6d754b02af225eccfa623c01c2ec347bc0cfbbd"}) r4 = fork() recvmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000008c0), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, &(0x7f0000001980)=[@rights={{0x2c, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x40002000) perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x1f, 0x7, 0x7, 0x8, 0x0, 0x7, 0x11081, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000800), 0x1}, 0x40480, 0x9, 0x200, 0x6, 0x7, 0x5, 0x0, 0x0, 0x4601fb87, 0x0, 0x6}, r4, 0xc, r7, 0x0) openat$cgroup_pressure(r6, &(0x7f0000001a40)='cpu.pressure\x00', 0x2, 0x0) sendto(r8, &(0x7f0000001a80)="e464b0f4ae737c29892cfb9d6ad486701c863888746fa57793e595629a90a36d647b4be32bfdb858f91b79e4f1bfa15ec263609bff43aa84fe2fbc7663a0880f1d28907206ac7e0e8f0f2f594c4efe97c9ccb947", 0x54, 0x5, 0x0, 0x0) r9 = memfd_secret(0x80000) perf_event_open(&(0x7f0000001b40)={0x0, 0x80, 0x8, 0x8, 0x6, 0x39, 0x0, 0x10001, 0x20, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000001b00)}, 0x5408, 0x1ff, 0x1, 0x6, 0x8, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x1ff}, r0, 0x5, r9, 0x0) perf_event_open$cgroup(&(0x7f0000001c00)={0x2, 0x80, 0x60, 0x2, 0x20, 0x6, 0x0, 0x3, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffff263, 0x2, @perf_bp={&(0x7f0000001bc0), 0x3}, 0xa5024fee180274b3, 0x8bb, 0xb2, 0x2, 0x7, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xc, r5, 0xc) io_uring_setup(0x777a, &(0x7f0000001c80)={0x0, 0xa001, 0x10, 0x3, 0x256}) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000001d00)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x673}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdirat$cgroup(r7, &(0x7f0000001e40)='syz0\x00', 0x1ff) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001e80), 0x840, 0x0) ioctl$KDFONTOP_SET_DEF(r10, 0x4b72, &(0x7f00000022c0)={0x2, 0x1, 0x5, 0x4, 0x199, &(0x7f0000001ec0)="3c09b9b3a443ba1deae684b1d4d80cb670e7fae2a65b9e15569d0e5c7e23b1ca5e7cf92e3b92b93b96221fe6703e4a775a3024f3c3e0c6a94931076c80d8c3792747010086a10fc5f682bb9c6645856667412ec6a0472b234223f120b02034ce5e5d853d73bd315cc8aea171db4552d1fdf6f49e8485656d05599f849039fdf97ddbd6e3ecc27f132bcc1f92b959fa8fa7e82258f6e2e41eeb454ae53987918981f7238b25a7bda6d9657c5a127ae173173b1a6b16258e554ac64f25a630d049acd6a17aaa186dc3a6291feaeb1e819790e87a08d0afafced56faad6fffbc75bd46ca0cfee4f1cafece70e41eba86f35fce30bd944a8079cf08f062f36f0ad6f47b9fce5329ef50627ee940620855a31dfbfd11158e74366276536e6dd857ce5948414f42b2ba29aee1a86ac63740cc9800d44e495865722108c09e8b57e92bdac260193bcbcfd6f6a6497945a86af8c14be1db3b512a48a7ddd407f74ac08bbb1e58e412236d3fa0d7c9deb5a23934c3dc04d97385f5c9d7055732dd12ef1da189ac764397a423f17dd20ef7d06933c01104fa9a88977c0d9fb56785f675978f3087309cbb678dc2d0b1b645bf84a29e2b9c9ad14b198d364658fd5cda8e2cba09a3f08ab1c3aa768a5c077358a2a7845fe87da0edf53bc8a97d24b9f95d79330180968b5cf6c3f62602d1f38c4762917fd5458321dc256485206278c8daf7de51bc971363770403096ba793f63d7564162468429b6cef910363f28b3db342a220f835eaaa864b7085ca605b5990429a8ae46dadc01d7e5de4ec7940ef46a81080a588ddde97dcc8c776d12c323ff2742e22be18be6b8bef85134589d27c1ec96ce72c1f770308e71028e1457806279a2acc8349dc04b2a971bd91b0f0beef2c936ee882af29bf3c0903be36c1ca64c0b3d8e8b4400238b701f49a0c84180bb840211d64ab74e6d439498bcbee5cec0b922cf1451f6daba001f2bcb8590c6a88767f63d6a460d608206d66a1b1f79dfc29538c38d11894001082951b03384a7531be2739d8df27f89a9298ba49a247f7c5271ff4b9aee5884ad4667a6c94df7213b8879fff0c39bbbc5ac19a26d01c6b9ff86e096c48cba067fbc61a90fac842ce3dcf09d967a742230212a473572c4139c17530e59763927b332a5007df4d995497e352af8b0c3ccec90b23c7e2a676414e49d35e4856e5c92a6a402719346e13fc75e7f80ecdfac8d5854def759a1ab67e0cba93bd658f4a8e96b9ad465f6fdb6a0f3603f5b39441ec73d901bd56fff0d1b830f8114ab7fc978f161ffd953730cd04b48416f8ef008b3a42678cd9479a1b6c7e9ee42cc4a83140c68c6a080a54863f14a24f0e7369d0a86ef18dd0469d4ff2e9dc7e37eb5f633a8990dfa917989f9713ecf50a01d21f8a758446f85b8a3c48afc144ecb7bdf2289f3fd1217"}) 20:13:13 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x3) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0xed, 0xd1, 0x7, 0x0, 0x80000000, 0x0, 0xeea20004fab91405, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x13300, 0x3c03, 0x8ce, 0x5, 0xffffffffffffffc0, 0xffff, 0x0, 0x0, 0xfffff2f3, 0x0, 0x7}, 0xffffffffffffffff, 0x3, r2, 0xa) r4 = memfd_secret(0x80000) openat$cgroup_procs(r4, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) socketpair(0x18, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) r6 = openat$cgroup_ro(r0, &(0x7f0000000440)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x1, 0x1, 0x6, 0x1, 0x0, 0x6, 0x800, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000380), 0xa}, 0x8, 0x2, 0x80, 0x0, 0x4, 0x9, 0xffff, 0x0, 0x1, 0x0, 0x2}, r6, 0xd, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4004, @fd_index=0x8, 0x800, 0x4, 0x5, 0x1, 0x1, {0x2}}, 0xfffffffa) r7 = socket$inet(0x2, 0xa, 0xba) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f00000004c0)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000500)=0x7ff, 0x4) openat$cgroup_ro(r1, &(0x7f0000000540)='cpuacct.usage_all\x00', 0x0, 0x0) sched_rr_get_interval(r3, &(0x7f0000000580)) bind$bt_sco(r2, &(0x7f00000005c0), 0x8) r8 = openat$cgroup(r2, &(0x7f0000000600)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r8, &(0x7f0000000640), 0x2, 0x0) r9 = accept4$bt_l2cap(r4, &(0x7f0000000680)={0x1f, 0x0, @fixed}, &(0x7f00000006c0)=0xe, 0x80800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r9, 0x6, 0x2, &(0x7f0000000700)={0x3ff, "bf1cfc"}, 0x6) socketpair(0x25, 0x3, 0x6, &(0x7f0000000740)={0xffffffffffffffff, <r10=>0xffffffffffffffff}) getsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000000780)=0x5, &(0x7f00000007c0)=0x2) [ 81.079949] audit: type=1400 audit(1738095193.795:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:13:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) mmap$usbmon(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2, 0x8010, 0xffffffffffffffff, 0x803) r1 = memfd_secret(0x80000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x281}, "5ad0255a55376327", "e9963589d986777e495a2f4627be7c81", "29a02409", "4c36413996fd9038"}, 0x28) epoll_create1(0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="a18260ddb9dccfbf2563abdee35d462a", 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x9) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @private=0xa010100, @broadcast}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r3=>0x0, 0x29, 0x3, 0x7f, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private1, 0x8000, 0x80, 0x1, 0xa7}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', <r5=>r3, 0x29, 0x0, 0x20, 0x2, 0x2, @local, @loopback, 0x8000, 0x8057, 0xffffffff, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', <r6=>0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x9c, r4, 0x300, 0xffff, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000540)=@gcm_256={{0x303}, "0b51bf5f27a8390a", "b1691276c706fb5d6e5009cece93419b66c600572b685474a994f37263daf251", "e455a29f", "5016fa94f491ee98"}, 0x38) socket$inet6_udp(0xa, 0x2, 0x0) 20:13:13 executing program 4: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x48, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/172, 0xac, 0x1, 0x33}, @fda={0x66646185, 0x4, 0x1, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/20, 0x14, 0x1, 0x1a}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @register_looper], 0xae, 0x0, &(0x7f0000000280)="7ee9ec4b7a58fbc177556a64069c085e5e9438f2166d3c89d5545e34f028284f476db612674f8d54e5a1f422e2c73e619b8305643e8b71ddfeb624c29751958110b118fa837c6a1e992cc1d3cf61fa0206cd435833c67f3859fc03dd32326cff65da98f5cad70eca5dc938d2b1783df9d8ddf794fe0b7177144d7d035af7ecdfcbb3981729e52a053164e4b36e31136fd732e8f2324213f58da96d6b41f682b2a5006f99256b1323373965a865c8"}) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000380)={0x4, 0xff, 0x80000000}) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000004c0)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000400)=""/139, 0x8b}) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000500)={0xc1f5, 0xb9, 0x6}) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x71ef) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x74, 0x0, &(0x7f0000000580)="8975db5b6f74c8950a6cb3bc5a5a5cbf14ad1e26621729b56c09a82848314dcd7bd2837544da3ebba1aff0e30b660c5713e320a9e5e6634570084525e3ec1e656935cfd8b365ac83eced2020b9daa7a0128b227399fe6b2b0b5c7df1a4085b1144ea49263b258d29be1495ff7e4c075c8d69911e"}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000640)={0x7d, 0xff, 0x3f}) r1 = syz_open_dev$usbmon(&(0x7f0000000680), 0x4000, 0x254400) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000740)={&(0x7f00000006c0), &(0x7f0000000700)=""/8, 0x8}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x80) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000780)=""/105) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000800), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/138, 0x8a}, {&(0x7f0000000940)=""/164, 0xa4}, {&(0x7f0000000a00)=""/21, 0x15}], 0x3, &(0x7f0000000a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x68}, 0x100) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) getsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) 20:13:13 executing program 5: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x84, 0x1, 0x40, 0x0, 0x0, 0x2, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1008, 0x3, 0x4, 0x7afe389524d18255, 0x6, 0x3, 0x8, 0x0, 0x400}, r0, 0x1, 0xffffffffffffffff, 0x4) keyctl$link(0x8, 0x0, 0xfffffffffffffffb) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001640)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000001680), 0x2, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000016c0)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000001700)='devices.list\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000001740)) r5 = perf_event_open(&(0x7f0000001800)={0x0, 0x80, 0x7, 0x6, 0x8, 0xff, 0x0, 0x63a, 0x21, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x9, 0x7}, 0x50000, 0x7, 0x3, 0x1, 0x4, 0xffffeec0, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f0000001780)={0x1, 0x80, 0x20, 0x1f, 0x7, 0x5, 0x0, 0x0, 0x120, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc3, 0x1, @perf_config_ext={0x400, 0x1}, 0x820, 0x7ff, 0x7, 0x1, 0x3, 0x100, 0x4, 0x0, 0x5, 0x0, 0xd984}, r3, 0x5, r5, 0x8) perf_event_open$cgroup(&(0x7f00000018c0)={0x0, 0x80, 0x7, 0x7f, 0x1f, 0x0, 0x0, 0xbe, 0x20000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001880), 0x2}, 0x80, 0x8, 0x2, 0x5, 0x2, 0xcb3, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff}, r2, 0xd, r1, 0x8) r6 = memfd_secret(0x0) openat$cgroup_ro(r6, &(0x7f0000001940)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_type(r3, &(0x7f0000001980), 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000019c0)=0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000001a00)) openat$cgroup_subtree(r4, &(0x7f0000001a40), 0x2, 0x0) 20:13:13 executing program 6: read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = socket$inet6(0xa, 0x2, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x2, 0x7f, 0x0, 0x41, @mcast2, @local, 0x3c28, 0x20, 0x9af8, 0x4}}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x2, 0xfffffffc, 0x3ff, 0x6, 0xa47, 0x5}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', <r3=>r1, 0x2f, 0x5, 0x1, 0x80000000, 0x0, @remote, @local, 0x20, 0x10, 0xff, 0x39}}) r4 = openat$cgroup_ro(r2, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) openat$cgroup_type(r4, &(0x7f0000000280), 0x2, 0x0) r5 = memfd_secret(0x80000) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40060}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) openat$cgroup_type(r2, &(0x7f0000000980), 0x2, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r7, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x48004) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={<r8=>0xffffffffffffffff}) socketpair(0x25, 0x80000, 0xffffff01, &(0x7f0000000bc0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)={<r10=>0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x9c, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r10}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x58bc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000dc0), 0x6e, &(0x7f0000000e40), 0x0, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x20000001) 20:13:13 executing program 7: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000040)={0x1216, 0x3ff, 0x7}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSIG(r0, 0x40045436, 0x28) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x0, 0xff, 0x60, 0x0, 0x2000, 0x1004, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x9852, 0x200, 0x5, 0x3, 0x1, 0x1000, 0x800, 0x0, 0x1a200, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x80, 0x2, 0x1f, 0x61, 0x0, 0x1, 0x4000, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x2004, 0x9, 0xff, 0x9, 0x8, 0x101, 0x8, 0x0, 0x9, 0x0, 0xfffffffffffffbff}, 0xffffffffffffffff, 0x5, r1, 0xe) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000200)=0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000280)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f00000002c0)=0x4) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000300)={0x9, 0x40, 0x80000000}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f00000003c0)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/135, 0x87, 0x0, &(0x7f00000004c0)=""/17, 0x11}, &(0x7f0000000540)=0x40) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0xbadd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2}, 0xe) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000005c0)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) [ 82.449398] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.455724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.458226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.463753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.468724] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.475252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.570708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.572921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.577736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.580216] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.584555] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.587638] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.588886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.593019] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.603494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.627847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.635181] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.639908] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.650162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.653772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.666306] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.671379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.672993] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.680342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.687951] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.695506] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.697496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.701125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.706098] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.708328] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.710804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.714855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.716901] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.716964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.722806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.724371] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.745358] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.749912] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.755242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.758372] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.761006] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.762984] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.764948] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.766775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.769841] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 82.771772] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 82.773273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.784938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.536827] Bluetooth: hci0: command tx timeout [ 84.664511] Bluetooth: hci2: command tx timeout [ 84.728040] Bluetooth: hci1: command tx timeout [ 84.791530] Bluetooth: hci3: command tx timeout [ 84.855871] Bluetooth: hci4: command tx timeout [ 84.856683] Bluetooth: hci6: command tx timeout [ 84.856695] Bluetooth: hci7: command tx timeout [ 84.920636] Bluetooth: hci5: command tx timeout [ 86.585528] Bluetooth: hci0: command tx timeout [ 86.711579] Bluetooth: hci2: command tx timeout [ 86.775513] Bluetooth: hci1: command tx timeout [ 86.839818] Bluetooth: hci3: command tx timeout [ 86.903677] Bluetooth: hci7: command tx timeout [ 86.904512] Bluetooth: hci6: command tx timeout [ 86.905125] Bluetooth: hci4: command tx timeout [ 86.967710] Bluetooth: hci5: command tx timeout [ 88.632563] Bluetooth: hci0: command tx timeout [ 88.759830] Bluetooth: hci2: command tx timeout [ 88.823600] Bluetooth: hci1: command tx timeout [ 88.888447] Bluetooth: hci3: command tx timeout [ 88.952528] Bluetooth: hci6: command tx timeout [ 88.952946] Bluetooth: hci7: command tx timeout [ 88.953006] Bluetooth: hci4: command tx timeout [ 89.016490] Bluetooth: hci5: command tx timeout [ 90.679556] Bluetooth: hci0: command tx timeout [ 90.808639] Bluetooth: hci2: command tx timeout [ 90.872623] Bluetooth: hci1: command tx timeout [ 90.937228] Bluetooth: hci3: command tx timeout [ 90.999526] Bluetooth: hci4: command tx timeout [ 90.999555] Bluetooth: hci7: command tx timeout [ 90.999994] Bluetooth: hci6: command tx timeout [ 91.064455] Bluetooth: hci5: command tx timeout [ 139.856633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.857357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.041015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.042060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.263987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.265465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.496915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.497850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.645629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.646297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.872836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.873602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.065415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.066089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.717483] [ 141.717709] ====================================================== [ 141.718241] WARNING: possible circular locking dependency detected [ 141.718784] 6.13.0-next-20250128 #1 Not tainted [ 141.719186] ------------------------------------------------------ [ 141.720491] kworker/u8:2/3796 is trying to acquire lock: [ 141.721644] ffffffff8621d9a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 141.723699] [ 141.723699] but task is already holding lock: [ 141.725277] ffff888033770768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 141.727231] [ 141.727231] which lock already depends on the new lock. [ 141.727231] [ 141.728744] [ 141.728744] the existing dependency chain (in reverse order) is: [ 141.729366] [ 141.729366] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 141.729929] __mutex_lock+0x13d/0xb50 [ 141.730326] wiphy_register+0x1b2e/0x25d0 [ 141.730750] ieee80211_register_hw+0x23a4/0x3d60 [ 141.731213] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 141.731696] init_mac80211_hwsim+0x389/0x870 [ 141.732146] do_one_initcall+0xf9/0x640 [ 141.732560] kernel_init_freeable+0x53d/0x7a0 [ 141.733012] kernel_init+0x1e/0x2d0 [ 141.733379] ret_from_fork+0x48/0x80 [ 141.733745] ret_from_fork_asm+0x1a/0x30 [ 141.734170] [ 141.734170] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 141.734694] __lock_acquire+0x29fd/0x4580 [ 141.735116] lock_acquire+0x19b/0x520 [ 141.735507] __mutex_lock+0x13d/0xb50 [ 141.735910] unregister_netdevice_many_notify+0x1612/0x1c80 [ 141.736447] unregister_netdevice_queue+0x224/0x2e0 [ 141.736928] _cfg80211_unregister_wdev+0x57b/0x700 [ 141.737420] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 141.737900] ieee80211_unregister_hw+0x55/0x3a0 [ 141.738357] hwsim_exit_net+0x3a0/0x730 [ 141.738765] ops_exit_list+0xb3/0x180 [ 141.739152] cleanup_net+0x546/0xad0 [ 141.739536] process_one_work+0x8ee/0x1a10 [ 141.739978] worker_thread+0x674/0xe70 [ 141.740390] kthread+0x3ab/0x720 [ 141.740758] ret_from_fork+0x48/0x80 [ 141.741131] ret_from_fork_asm+0x1a/0x30 [ 141.741565] [ 141.741565] other info that might help us debug this: [ 141.741565] [ 141.742208] Possible unsafe locking scenario: [ 141.742208] [ 141.742697] CPU0 CPU1 [ 141.743076] ---- ---- [ 141.743455] lock(&rdev->wiphy.mtx); [ 141.743792] lock(rtnl_mutex); [ 141.744277] lock(&rdev->wiphy.mtx); [ 141.744800] lock(rtnl_mutex); [ 141.745098] [ 141.745098] *** DEADLOCK *** [ 141.745098] [ 141.745595] 4 locks held by kworker/u8:2/3796: [ 141.745980] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 141.746842] #1: ffff888034f07d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 141.747668] #2: ffffffff862119d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 141.748438] #3: ffff888033770768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 141.749304] [ 141.749304] stack backtrace: [ 141.749675] CPU: 0 UID: 0 PID: 3796 Comm: kworker/u8:2 Not tainted 6.13.0-next-20250128 #1 [ 141.749712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 141.749734] Workqueue: netns cleanup_net [ 141.749775] Call Trace: [ 141.749784] <TASK> [ 141.749796] dump_stack_lvl+0xca/0x120 [ 141.749854] print_circular_bug+0x47b/0x750 [ 141.749899] check_noncircular+0x2e9/0x3c0 [ 141.749941] ? __pfx_check_noncircular+0x10/0x10 [ 141.749983] ? hlock_class+0x4e/0x130 [ 141.750013] ? mark_lock+0xac/0xed0 [ 141.750052] ? srso_return_thunk+0x5/0x5f [ 141.750108] ? sched_clock+0x37/0x60 [ 141.750164] ? lockdep_lock+0xba/0x1b0 [ 141.750221] ? __pfx_lockdep_lock+0x10/0x10 [ 141.750283] __lock_acquire+0x29fd/0x4580 [ 141.750336] ? __pfx___lock_acquire+0x10/0x10 [ 141.750379] ? lock_release+0x20f/0x6f0 [ 141.750423] ? __pfx_lock_release+0x10/0x10 [ 141.750471] lock_acquire+0x19b/0x520 [ 141.750514] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 141.750562] ? __pfx_lock_acquire+0x10/0x10 [ 141.750607] ? srso_return_thunk+0x5/0x5f [ 141.750662] ? lock_release+0x20f/0x6f0 [ 141.750705] ? srso_return_thunk+0x5/0x5f [ 141.750760] ? lock_is_held_type+0x9e/0x120 [ 141.750815] ? srso_return_thunk+0x5/0x5f [ 141.750874] __mutex_lock+0x13d/0xb50 [ 141.750926] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 141.750971] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 141.751017] ? srso_return_thunk+0x5/0x5f [ 141.751072] ? synchronize_rcu_expedited+0x38a/0x420 [ 141.751116] ? __pfx___mutex_lock+0x10/0x10 [ 141.751169] ? __pfx_autoremove_wake_function+0x10/0x10 [ 141.751223] ? srso_return_thunk+0x5/0x5f [ 141.751278] ? kasan_quarantine_put+0x84/0x1e0 [ 141.751338] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 141.751373] ? srso_return_thunk+0x5/0x5f [ 141.751433] unregister_netdevice_many_notify+0x1612/0x1c80 [ 141.751478] ? __virt_addr_valid+0x2e8/0x5d0 [ 141.751531] ? __pfx_lock_release+0x10/0x10 [ 141.751575] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 141.751621] ? find_held_lock+0x2c/0x110 [ 141.751678] ? srso_return_thunk+0x5/0x5f [ 141.751736] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 141.751796] ? srso_return_thunk+0x5/0x5f [ 141.751851] ? lock_release+0x20f/0x6f0 [ 141.751895] ? __pfx_lock_release+0x10/0x10 [ 141.751937] ? srso_return_thunk+0x5/0x5f [ 141.751992] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 141.752040] ? srso_return_thunk+0x5/0x5f [ 141.752100] unregister_netdevice_queue+0x224/0x2e0 [ 141.752143] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 141.752187] ? up_write+0x195/0x520 [ 141.752241] _cfg80211_unregister_wdev+0x57b/0x700 [ 141.752294] ? srso_return_thunk+0x5/0x5f [ 141.752353] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 141.752391] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 141.752430] ? srso_return_thunk+0x5/0x5f [ 141.752485] ? srso_return_thunk+0x5/0x5f [ 141.752540] ? synchronize_rcu+0x1ff/0x260 [ 141.752582] ieee80211_unregister_hw+0x55/0x3a0 [ 141.752627] hwsim_exit_net+0x3a0/0x730 [ 141.752669] ? __pfx_hwsim_exit_net+0x10/0x10 [ 141.752709] ? srso_return_thunk+0x5/0x5f [ 141.752764] ? netdev_run_todo+0x788/0x1040 [ 141.752813] ? __pfx_hwsim_exit_net+0x10/0x10 [ 141.752855] ops_exit_list+0xb3/0x180 [ 141.752897] cleanup_net+0x546/0xad0 [ 141.752942] ? __pfx_cleanup_net+0x10/0x10 [ 141.752995] process_one_work+0x8ee/0x1a10 [ 141.753060] ? __pfx_lock_acquire+0x10/0x10 [ 141.753104] ? __pfx_process_one_work+0x10/0x10 [ 141.753163] ? srso_return_thunk+0x5/0x5f [ 141.753225] ? move_linked_works+0x172/0x270 [ 141.753269] ? srso_return_thunk+0x5/0x5f [ 141.753324] ? assign_work+0x196/0x240 [ 141.753382] worker_thread+0x674/0xe70 [ 141.753439] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 141.753491] ? srso_return_thunk+0x5/0x5f [ 141.753546] ? __pfx_worker_thread+0x10/0x10 [ 141.753605] kthread+0x3ab/0x720 [ 141.753656] ? __pfx_kthread+0x10/0x10 [ 141.753708] ? srso_return_thunk+0x5/0x5f [ 141.753763] ? finish_task_switch.isra.0+0x206/0x840 [ 141.753814] ? __pfx_kthread+0x10/0x10 [ 141.753867] ret_from_fork+0x48/0x80 [ 141.753898] ? __pfx_kthread+0x10/0x10 [ 141.753951] ret_from_fork_asm+0x1a/0x30 [ 141.754016] </TASK> [ 144.342164] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.344054] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.346664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.350762] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.354193] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.358165] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.386792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.388226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.390466] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.392462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.394732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.394747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.398067] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.403554] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.405114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.414312] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.417947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.423477] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.425619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.428374] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.438203] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.439988] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.446264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.457258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.470033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.473565] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.475285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.483580] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.485623] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.487632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.513799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.530079] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.531536] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 144.553459] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.555204] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 144.557958] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 144.561673] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.580963] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.589209] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 144.589547] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.591307] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 144.592582] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.597082] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 144.605550] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.606205] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 144.638703] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.645627] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 144.665004] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.423554] Bluetooth: hci1: command tx timeout [ 146.424027] Bluetooth: hci0: command tx timeout [ 146.487592] Bluetooth: hci2: command tx timeout [ 146.551709] Bluetooth: hci3: command tx timeout [ 146.680521] Bluetooth: hci7: command tx timeout [ 146.743459] Bluetooth: hci6: command tx timeout [ 146.743933] Bluetooth: hci5: command tx timeout [ 146.744343] Bluetooth: hci4: command tx timeout [ 148.474435] Bluetooth: hci0: command tx timeout [ 148.474915] Bluetooth: hci1: command tx timeout [ 148.536501] Bluetooth: hci2: command tx timeout [ 148.600487] Bluetooth: hci3: command tx timeout [ 148.728477] Bluetooth: hci7: command tx timeout [ 148.792488] Bluetooth: hci6: command tx timeout [ 148.792937] Bluetooth: hci4: command tx timeout [ 148.793348] Bluetooth: hci5: command tx timeout [ 150.519519] Bluetooth: hci1: command tx timeout [ 150.519998] Bluetooth: hci0: command tx timeout [ 150.583428] Bluetooth: hci2: command tx timeout [ 150.649422] Bluetooth: hci3: command tx timeout [ 150.776446] Bluetooth: hci7: command tx timeout [ 150.839437] Bluetooth: hci5: command tx timeout [ 150.839877] Bluetooth: hci4: command tx timeout [ 150.840281] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 20:14:14 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f415 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff888034f06d20 R8 =0000000000000000 R9 =ffffed100175a046 R10=0000000000000020 R11=3a6b636f6c206762 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f400 RIP=ffffffff8283f46d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055844ce44ba8 CR3=0000000023d6a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000005 XMM01=ffffffffffffff00ffffffffffffffff XMM02=77656e6d70720070756f72672e61746f XMM03=646e756f662b74736f6c002f2e2f002f XMM04=3020202020202020093a736567615062 XMM05=00000000000000000000000000000000 XMM06=2020092020202020093a0a4267203436 XMM07=00000000000000000000000000000000 XMM08=722f6c6c696b66722f6372732f2e2e00 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce42d00 RCX=ffffffff81664972 RDX=ffff888015655340 RSI=ffffffff8166494c RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88802cbe77b8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=ffffed100d9c85a1 R13=ffff88806ce42d08 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff84ab3f40 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ff60e43000 CR3=0000000016bd4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000004242c1dcb98d0000 XMM02=00000000000000003fd3333333333333 XMM03=000000c0002f8db0000000c0000a8350 XMM04=000000c00036a328000000c0000a80f0 XMM05=000000c0000d2628000000c00036a378 XMM06=000000c0000d27a8000000c0000d2790 XMM07=000000c000085a20000000c0000a8218 XMM08=000000c0000d2768000000c0000a8158 XMM09=000000c0000a83f8000000c0000a8130 XMM10=000000c0000a8178000000c0000a80f8 XMM11=000000c0000d2650000000c00036a218 XMM12=000000c0000a81c8000000c0000d2930 XMM13=000000c0000a81a0000000c0000a8278 XMM14=000000c0000d2568000000c0000a82a0 XMM15=000000c000504950000000c0000d2570