Warning: Permanently added '[localhost]:33437' (ECDSA) to the list of known hosts. 2025/01/29 03:58:51 fuzzer started 2025/01/29 03:58:52 dialing manager at localhost:40187 syzkaller login: [ 69.729962] cgroup: Unknown subsys name 'net' [ 69.851002] cgroup: Unknown subsys name 'cpuset' [ 69.880368] cgroup: Unknown subsys name 'rlimit' [ 74.444579] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/29 03:59:07 syscalls: 209 2025/01/29 03:59:07 code coverage: enabled 2025/01/29 03:59:07 comparison tracing: enabled 2025/01/29 03:59:07 extra coverage: enabled 2025/01/29 03:59:07 setuid sandbox: enabled 2025/01/29 03:59:07 namespace sandbox: enabled 2025/01/29 03:59:07 Android sandbox: enabled 2025/01/29 03:59:07 fault injection: enabled 2025/01/29 03:59:07 leak checking: enabled 2025/01/29 03:59:07 net packet injection: enabled 2025/01/29 03:59:07 net device setup: enabled 2025/01/29 03:59:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 03:59:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 03:59:07 USB emulation: enabled 2025/01/29 03:59:07 hci packet injection: enabled 2025/01/29 03:59:07 wifi device emulation: enabled 2025/01/29 03:59:07 802.15.4 emulation: enabled 2025/01/29 03:59:07 fetching corpus: 0, signal 0/0 (executing program) 2025/01/29 03:59:08 starting 8 fuzzer processes 03:59:08 executing program 0: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, &(0x7f0000000040), &(0x7f0000000080)={[0x9]}, 0x8) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}], 0x2, 0xffffffff, &(0x7f0000000100)={[0x100000000]}, 0x8) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) clock_nanosleep(0x6, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"0b2acd8767e328b15e58c3a67e90fcc0", 0x0, 0x0, {0x4, 0x6}, {0x8, 0xeb}, 0xffff, [0xffffffff, 0x4, 0x3a, 0x7, 0xfffffffffffff000, 0xfffffffffffffffd, 0x4, 0x7, 0x3, 0x5, 0x29d, 0x0, 0xfffffffffffffff7, 0x3, 0x59e, 0x1f]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000300)) r2 = fspick(r1, &(0x7f0000000340)='./file0\x00', 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000400)={{}, r0, 0x12, @inherit={0x68, &(0x7f0000000380)={0x0, 0x4, 0x8080000, 0xffff, {0x6, 0x80, 0x9, 0x7, 0x7fff}, [0x100000000, 0x100, 0x8, 0x4]}}, @devid}) r3 = inotify_init1(0x80000) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r2, &(0x7f0000001400)={0xffffffffffffffff, r3, 0x2}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440), 0x8000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001f40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000002340)={{r4}, r0, 0x18, @inherit={0x50, &(0x7f0000001480)={0x1, 0x1, 0x5, 0x2, {0x0, 0xffffffff, 0x3e, 0x101, 0x8}, [0xbf4d]}}, @devid=r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003400)={&(0x7f0000003380)={0x6c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4b1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1b0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}]}]}, 0x6c}}, 0xc0) clock_gettime(0x7, &(0x7f0000003480)) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000003580)={&(0x7f00000034c0), 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x10, 0x3e8, 0x100, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000035c0)={0x14, 0x13, 0x1, {0x80, 0x4}}, 0x14) 03:59:08 executing program 2: set_robust_list(&(0x7f0000000080)={0x0, 0x8, &(0x7f0000000040)={&(0x7f0000000000)}}, 0x18) set_robust_list(&(0x7f0000000180)={&(0x7f00000000c0), 0x4, &(0x7f0000000140)={&(0x7f0000000100)}}, 0x18) set_robust_list(&(0x7f0000000240)={&(0x7f00000001c0), 0xffff, &(0x7f0000000200)}, 0x18) set_robust_list(&(0x7f0000000300)={&(0x7f00000002c0)={&(0x7f0000000280)}, 0x7f}, 0x18) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x40000) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4c400420}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x3fb, 0x200, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x24000010) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1a8, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd9a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "7245198d061ee22e5778ac62479ad196d3aeeea1ff714f1e74f98bf55696"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "0e379698eb3dc453d3592ddc32dffac98df556c69e41b22a2650ce0d8cca2fa5e9a9620e"}}, @TIPC_NLA_NODE_ID={0x59, 0x3, "76bd4e830c6f0be44f1b7cb1273ccff4d4227725e80f363f4c04afc5e24b21ac4ab512f7a91268d8f3c149cd9d7230591448de6bf8f6f25acd7badeed483a5c26e72bc86ba17066f2ca9def4a1403651a138e62c0b"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "20624a121f46fae1a93277ac92d38b4cd7ed112aee"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x219}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xc8, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc0000}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe656}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x11, 0x3, "bafc1ebf1dae3f74a046abc5a0"}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa1b68307}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8fde}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8081}, 0x40011) set_robust_list(&(0x7f0000000b00)={&(0x7f0000000a40)={&(0x7f0000000a00)}, 0x8, &(0x7f0000000ac0)={&(0x7f0000000a80)}}, 0x18) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048814}, 0x8000) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000c40), 0x40, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x80) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000ec0)='\x00', 0x0, r1) set_robust_list(&(0x7f0000000fc0)={&(0x7f0000000f00), 0x401, &(0x7f0000000f80)={&(0x7f0000000f40)}}, 0x18) sendmsg$FOU_CMD_GET(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001180)={'gretap0\x00', &(0x7f0000001100)={'ip_vti0\x00', 0x0, 0x80, 0x7800, 0x6, 0x400000, {{0x12, 0x4, 0x1, 0x7, 0x48, 0x66, 0x0, 0x40, 0x2f, 0x0, @private=0xa010102, @private=0xa010100, {[@timestamp={0x44, 0x14, 0xa2, 0x0, 0x9, [0x3, 0x6, 0x5, 0x81]}, @noop, @rr={0x7, 0x1f, 0x76, [@multicast1, @remote, @rand_addr=0x64010102, @rand_addr=0x64010100, @multicast2, @remote, @multicast2]}]}}}}}) write$P9_RLOCK(r1, &(0x7f00000011c0)={0x8, 0x35, 0x2, 0x1}, 0x8) 03:59:08 executing program 1: write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x0, 0x1, 0x6}}, 0x14) socketpair(0x8, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x80, 0x700, 0x5, 0x2, {{0x1d, 0x4, 0x3, 0x16, 0x74, 0x66, 0x0, 0x5, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, {[@timestamp_addr={0x44, 0xc, 0x22, 0x1, 0x5, [{@loopback, 0x7bb}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xe7, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}]}, @timestamp={0x44, 0x18, 0xdf, 0x0, 0x2, [0x3, 0x5, 0x1ff, 0x6, 0x7fffffff]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x92, 0x1, 0x3, [{@empty, 0x8000}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x59}, {@private=0xa010101, 0x44af}]}]}}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x1, 0xff, 0x66, 0xfffffff8}, {0x5, 0x1f, 0x8c, 0x7}, {0x0, 0x3f, 0x3, 0x2}, {0x1ff, 0x40, 0xfe, 0x11}]}) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000200)={0x50002006}) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) socketpair(0x1, 0x2, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000005c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x264, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcd67}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ec639fe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc243}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "3e6ab65e85fd46a9a44537061b5d9d50267eab527fba1a5d100ae762a685"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "7ba7b8962ad14ab718c94ac2ac48c6843022e1455fd537"}}, @TIPC_NLA_NODE_ID={0x58, 0x3, "81b7be45b7bb985a38b9718997dd567792e5594834983e29b7ef8a17b2feecd576dd9034e81922119caf11f73804c9b88fe18b218a816608a9de11bd5ecf2eac6a83fff61a32a5450641e14a8a1553d222437d5a"}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x552b}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000000}, 0x40050) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) write$P9_RAUTH(r4, &(0x7f0000000640)={0x14, 0x67, 0x1, {0x8, 0x3, 0x5}}, 0x14) prctl$PR_SET_FP_MODE(0x2d, 0x3) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) socketpair(0x2b, 0x800, 0x5, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8015}, 0x4000000) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x70, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000940), 0x1ad002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000980)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000a00)={0x1, 0xff, 0x0, 0x0, 0x3}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2278}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8005) 03:59:08 executing program 3: ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x80, 0x3, 0x6}}, 0x14) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x8c0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f00000000c0)) read$snapshot(r1, &(0x7f0000000140)=""/178, 0xb2) write$P9_RLOPEN(r1, &(0x7f0000000200)={0x18, 0xd, 0x1, {{0x4, 0x1, 0x6}, 0x1}}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RMKDIR(r2, &(0x7f0000000280)={0x14, 0x49, 0x2, {0x20, 0x1}}, 0x14) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) write$tcp_mem(0xffffffffffffffff, &(0x7f00000002c0)={0x40, 0x20, 0x1e, 0x20, 0x9}, 0x48) write$P9_RLOPEN(r2, &(0x7f0000000340)={0x18, 0xd, 0x1, {{0x8, 0x3, 0x6}, 0x5}}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000003c0)={0x1, 0x1000, 0x1}) r3 = syz_open_dev$loop(&(0x7f0000000400), 0xffffffff, 0x0) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000440)={0x8, 0xfffffffffffffffb}) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x48800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) [ 85.753950] audit: type=1400 audit(1738123148.824:7): avc: denied { execmem } for pid=269 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:59:08 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @private1, 0x4cea887f}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80000001, @empty, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1196}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7480dff0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f4183c0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80}, 0x24000811) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe8, r0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x263d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8575, @private2, 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0xe8}}, 0x4090) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x7fd1, 0x80, 0x2, 0x5, {{0x2b, 0x4, 0x1, 0x2d, 0xac, 0x68, 0x0, 0x0, 0x29, 0x0, @empty, @loopback, {[@rr={0x7, 0x13, 0xe9, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp_addr={0x44, 0x3c, 0xf6, 0x1, 0x2, [{@multicast2, 0x3}, {@local, 0x4}, {@local, 0x5}, {@broadcast, 0x1}, {@broadcast, 0x20}, {@remote, 0x1}, {@multicast1, 0xfffffffd}]}, @timestamp_addr={0x44, 0x14, 0x7f, 0x1, 0xf, [{@multicast2, 0x9c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @rr={0x7, 0x7, 0x8a, [@rand_addr=0x64010101]}, @end, @end, @timestamp={0x44, 0x24, 0x60, 0x0, 0x1, [0xa45a, 0x8, 0x7, 0xbe02, 0xfffff7a8, 0xd97e, 0x6, 0x7fff]}, @generic={0x44, 0x5, "d1ce35"}]}}}}}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf3e}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044014}, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'gretap0\x00', r2, 0x40, 0x40, 0xf91c, 0x7f, {{0x15, 0x4, 0x0, 0x2e, 0x54, 0x68, 0x0, 0x9, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xd4, 0x3, 0xb, [{@remote, 0x952e}, {@loopback, 0x70000}]}, @ssrr={0x89, 0x1f, 0x5f, [@loopback, @rand_addr=0x64010102, @broadcast, @multicast2, @multicast1, @local, @local]}, @cipso={0x86, 0xc, 0x1, [{0x6, 0x6, "64a3f275"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000840)={'tunl0\x00', r4, 0x40, 0x7800, 0x376, 0x3, {{0x24, 0x4, 0x1, 0x9, 0x90, 0x64, 0x0, 0x38, 0x4, 0x0, @private=0xa010100, @remote, {[@noop, @timestamp_prespec={0x44, 0x2c, 0x97, 0x3, 0x3, [{@local, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x1}, {@loopback, 0x3ff}, {@multicast2, 0x7f}]}, @timestamp={0x44, 0x14, 0x99, 0x0, 0x4, [0x5, 0xba2f, 0x9b8b, 0x4]}, @timestamp_prespec={0x44, 0x14, 0xe4, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x40}}, {@multicast1, 0x3174}]}, @timestamp_addr={0x44, 0x24, 0x42, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0xfff}, {@broadcast}, {@local, 0x4}, {@rand_addr=0x64010102}]}]}}}}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000940)={"373ead8fcfb8d040550dd5e41be1acb5", 0x0, 0x0, {0x0, 0x1}, {0xb24, 0x4}, 0x4, [0x8, 0x7, 0x179f6edf, 0x5, 0x81, 0xffffffff80000001, 0x0, 0x7, 0x7fff, 0x74b, 0x1, 0x2, 0x7, 0x8000, 0x8001, 0xad]}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000a40)=r6) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000ac0)={0x2, 0x0, 0x1000, 0x0, 0x2}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008010) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000c40), 0x301006, 0x0) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x104, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79613307}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x214}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000f40)={&(0x7f0000000e80), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x4014) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000f80), 0x141080, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r8, &(0x7f0000000fc0)={r9, r7, 0x3f}) 03:59:08 executing program 4: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', r1, 0x1, 0x8, 0xff, 0x80000000, {{0x13, 0x4, 0x0, 0x2d, 0x4c, 0x64, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@rr={0x7, 0xb, 0xfd, [@remote, @empty]}, @generic={0xc7, 0x9, "984abfdfb0bbfa"}, @ssrr={0x89, 0x1f, 0xb0, [@rand_addr=0x64010102, @broadcast, @private=0xa010101, @multicast2, @rand_addr=0x64010102, @empty, @remote]}, @end, @noop]}}}}}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000240)={r2, r3+60000000}, &(0x7f0000000280)={[0x6]}, 0x8) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000002c0)={{0x3, 0x2, 0x3f, 0x2}, 0x0, 0x1f, 'id0\x00', 'timer1\x00', 0x0, 0x1f, 0x0, 0x2, 0x4}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = fsopen(&(0x7f00000003c0)='exofs\x00', 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r5 = epoll_create(0x758) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r0, &(0x7f0000000400)={0x40000000}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x4, 0xff, 0x7, 0x0, 0x1406ab271fd10c62}) io_uring_setup(0x2b25, &(0x7f00000004c0)={0x0, 0x1b03, 0x1, 0x3, 0x373}) bind$802154_raw(r0, &(0x7f0000000540)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000580)) 03:59:08 executing program 6: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x810, 0xffffffffffffffff, 0x10000000) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x260, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x571}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c94}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x486}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfc3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f8, 0x110, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1400801c}, 0x24000000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/196, 0xc4}, {&(0x7f0000000580)=""/81, 0x51}], 0x2) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000640)={0xffffffffffffdb7b, 0x7, 0x1}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680), 0x80340) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000006c0)={0x0, 0x2, r1, 0x3365b966}) setrlimit(0x7, &(0x7f0000000700)={0x54, 0x6}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000740), 0x111000, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000780)={{r0}, 0x0, 0xc, @unused=[0x101, 0xff, 0x1, 0x2], @name="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"}) socketpair(0x1d, 0x4, 0xd42, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000017c0)={"dfdb19e1458c6247283e64ea5b2f7c28", 0x0, 0x0, {0xfffffffffffff800}, {0x1ff, 0x5}, 0x7fff, [0x0, 0x5, 0x0, 0xffffffffffffffff, 0x6, 0x3, 0x4, 0x51b, 0x5, 0x4, 0xfff, 0x3f, 0x5, 0xffffffff, 0x6, 0x31]}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001900), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x24, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c091) epoll_pwait(0xffffffffffffffff, &(0x7f0000001a00)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x200, &(0x7f0000001a80), 0x8) setrlimit(0x2, &(0x7f0000001ac0)={0x93f, 0xc0}) 03:59:08 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'ip_vti0\x00', r0, 0x8, 0x0, 0x7fffffff, 0x100, {{0x11, 0x4, 0x0, 0x2e, 0x44, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x24, 0x6b, 0x3, 0x1, [{@multicast1, 0x200}, {@multicast1, 0x5}, {@private=0xa010102, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}]}, @timestamp_addr={0x44, 0xc, 0x1b, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x4}]}]}}}}}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x100, 0x70bd25, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4005}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'gretap0\x00', r1, 0x8, 0x7, 0x388, 0x3, {{0x9, 0x4, 0x0, 0x16, 0x24, 0x67, 0x0, 0x1, 0x4, 0x0, @broadcast, @multicast1, {[@end, @generic={0x8f, 0x6, "98941458"}, @cipso={0x86, 0x6, 0x2}]}}}}}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2104050}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x40800) socketpair(0x25, 0x3, 0x6, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x220, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008004}, 0x24040001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r1, 0x4, 0x40, 0x1, 0x5, 0x60, @private1, @rand_addr=' \x01\x00', 0x10, 0x20, 0x71, 0xffffff81}}) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f6, 0x20, 0x7, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040}, 0x90) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940), 0x10840, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000980)={0x1, 0x3, {0x1, @usage=0x1, 0x0, 0x5, 0x5, 0xfffffffffffffff9, 0x7, 0x101, 0x68, @usage=0x10000000, 0x9, 0x8, [0x7, 0x1c00000000, 0x1d31, 0xe1, 0x1ff, 0x835b]}, {0x1ff, @usage, 0x0, 0x7fff, 0x2, 0x4, 0xffffffff, 0x3ffc000, 0x44, @usage=0x4, 0x3, 0x9, [0x7, 0x1, 0xffffffffffffffff, 0xfffffffffffff800, 0x2, 0xa99]}, {0x7e7, @usage=0x6a, 0x0, 0x4, 0x81, 0xffffffff, 0x2, 0x2, 0x60, @usage, 0x0, 0x60000, [0xf46a, 0x7, 0x7, 0x8, 0xa3, 0xc3]}, {0x0, 0x800, 0xffff}}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000d80)={0x6, 0x5, {0x100000000, @usage=0x11d, 0x0, 0x3, 0x7, 0x80000001, 0x101, 0x1, 0x32, @struct={0x90000000, 0x8}, 0x6, 0x4, [0xfffffffffffff95e, 0x2, 0xd3f, 0x10001, 0x74, 0xca3]}, {0x3ff, @struct={0x101, 0x8}, 0x0, 0x1, 0x9, 0x31206306, 0x80000001, 0xfffffffffffffc00, 0x1, @struct={0x0, 0x9}, 0x3f, 0x81, [0x0, 0xffffffffffffffff, 0x1, 0x50, 0x7fff, 0xffffffffffff0001]}, {0x90000000000000, @usage=0xad4, 0x0, 0x8001, 0x1ff, 0x80, 0x100000000, 0x2, 0x80, @struct={0xffffffe0, 0x458}, 0x0, 0x4228, [0x4f, 0x9, 0x4, 0x2, 0x100, 0x2]}, {0x9, 0x0, 0x3}}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000001180)={0x0, 0x2, {0x74, @struct={0x1f}, 0x0, 0x6efd, 0x6, 0x3, 0x20, 0xffffffffffffffff, 0x6, @struct={0x8, 0x3f}, 0x8, 0x2f4, [0x7ff, 0x6, 0x0, 0x4, 0xcb, 0x7fff]}, {0x81, @usage=0x38, 0x0, 0x5, 0x10001, 0x9, 0x8, 0x67c, 0x408, @struct={0x9, 0xffff}, 0x0, 0xb3, [0x9, 0xffff, 0x3d830767, 0xfffffffffffffffe, 0x7, 0x9]}, {0x1, @usage=0x6, 0x0, 0xff, 0x3e, 0x5, 0x6, 0x5, 0x8, @struct={0x2}, 0x7, 0x0, [0x7, 0x5f24, 0x401, 0x7e, 0xffff, 0x2]}, {0x21b0, 0xfffffffffffffff9, 0x4}}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000001580)={0x10, 0x5, {0x3, @usage=0x4, r7, 0x4, 0x3, 0x5, 0xffff, 0x2, 0x2, @usage=0x8, 0x4, 0x2, [0x7, 0x3, 0x7ff, 0x0, 0x81, 0x3]}, {0xfff, @usage=0x6, r8, 0x7, 0xc4f4, 0x9, 0x5, 0x8, 0x1, @struct={0xf7, 0xfffff71d}, 0x4, 0x7, [0x8, 0x9, 0xfffffffffffff8ec, 0x1, 0x4, 0x2]}, {0x1000, @usage=0x21, r9, 0x10001, 0x0, 0x1000, 0x7, 0x8000, 0x1, @struct={0xffff, 0x7a}, 0x7fffffff, 0x401, [0x6, 0xffffffffffffffc0, 0x4, 0x200, 0x3237, 0x8]}, {0x4}}) syz_genetlink_get_family_id$batadv(&(0x7f0000001980), 0xffffffffffffffff) [ 87.143491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.148182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.150985] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.159054] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.164369] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.167371] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.196003] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.217264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.219264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.221624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.226298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.228655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.233191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.236702] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.238632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.244138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.249054] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.250780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.311306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.328693] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.332369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.338243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.343207] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.345567] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.351286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.353405] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.355299] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.357098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.358531] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.361103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.367251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.371184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.371307] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.375666] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.375994] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.387305] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.389090] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.397541] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.404571] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.409918] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.413600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.429422] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.444479] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.448189] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.450084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.454668] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.464906] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.473024] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.221816] Bluetooth: hci0: command tx timeout [ 89.284784] Bluetooth: hci1: command tx timeout [ 89.348798] Bluetooth: hci2: command tx timeout [ 89.477836] Bluetooth: hci4: command tx timeout [ 89.478100] Bluetooth: hci6: command tx timeout [ 89.540835] Bluetooth: hci5: command tx timeout [ 89.540886] Bluetooth: hci7: command tx timeout [ 89.541655] Bluetooth: hci3: command tx timeout [ 91.268862] Bluetooth: hci0: command tx timeout [ 91.333214] Bluetooth: hci1: command tx timeout [ 91.397456] Bluetooth: hci2: command tx timeout [ 91.524979] Bluetooth: hci4: command tx timeout [ 91.526094] Bluetooth: hci6: command tx timeout [ 91.589232] Bluetooth: hci7: command tx timeout [ 91.589361] Bluetooth: hci5: command tx timeout [ 91.590336] Bluetooth: hci3: command tx timeout [ 93.317835] Bluetooth: hci0: command tx timeout [ 93.381085] Bluetooth: hci1: command tx timeout [ 93.445767] Bluetooth: hci2: command tx timeout [ 93.572862] Bluetooth: hci6: command tx timeout [ 93.573353] Bluetooth: hci4: command tx timeout [ 93.636825] Bluetooth: hci7: command tx timeout [ 93.637315] Bluetooth: hci3: command tx timeout [ 93.637796] Bluetooth: hci5: command tx timeout [ 95.364929] Bluetooth: hci0: command tx timeout [ 95.429054] Bluetooth: hci1: command tx timeout [ 95.492810] Bluetooth: hci2: command tx timeout [ 95.621059] Bluetooth: hci4: command tx timeout [ 95.621628] Bluetooth: hci6: command tx timeout [ 95.685185] Bluetooth: hci5: command tx timeout [ 95.687002] Bluetooth: hci3: command tx timeout [ 95.688911] Bluetooth: hci7: command tx timeout [ 149.619658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.621101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.623216] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.624668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.626351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.626406] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.628466] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.634033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.635362] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.636308] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.640481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.641853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.643117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.644382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.646120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.651809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.653515] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.655162] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.718464] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.727998] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.735952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.741442] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.746511] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.749070] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.801587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.816157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.867576] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.901794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.909891] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.910989] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.912347] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.933276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.966010] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.987306] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.013011] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.016050] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.017597] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.018630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.044925] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.049561] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.051329] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.054315] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.058077] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.063229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.089385] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.133542] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.137202] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.144139] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.685051] Bluetooth: hci2: command tx timeout [ 151.685078] Bluetooth: hci0: command tx timeout [ 151.749797] Bluetooth: hci1: command tx timeout [ 151.813813] Bluetooth: hci3: command tx timeout [ 152.006772] Bluetooth: hci4: command tx timeout [ 152.133809] Bluetooth: hci5: command tx timeout [ 152.197098] Bluetooth: hci7: command tx timeout [ 152.197425] Bluetooth: hci6: command tx timeout [ 153.732851] Bluetooth: hci0: command tx timeout [ 153.732875] Bluetooth: hci2: command tx timeout [ 153.796934] Bluetooth: hci1: command tx timeout [ 153.861819] Bluetooth: hci3: command tx timeout [ 154.054289] Bluetooth: hci4: command tx timeout [ 154.181757] Bluetooth: hci5: command tx timeout [ 154.244843] Bluetooth: hci6: command tx timeout [ 154.245341] Bluetooth: hci7: command tx timeout [ 155.780911] Bluetooth: hci0: command tx timeout [ 155.780971] Bluetooth: hci2: command tx timeout [ 155.846523] Bluetooth: hci1: command tx timeout [ 155.909822] Bluetooth: hci3: command tx timeout [ 156.101927] Bluetooth: hci4: command tx timeout [ 156.230771] Bluetooth: hci5: command tx timeout [ 156.294764] Bluetooth: hci7: command tx timeout [ 156.295266] Bluetooth: hci6: command tx timeout [ 157.830260] Bluetooth: hci0: command tx timeout [ 157.830393] Bluetooth: hci2: command tx timeout [ 157.893771] Bluetooth: hci1: command tx timeout [ 157.956780] Bluetooth: hci3: command tx timeout [ 158.149770] Bluetooth: hci4: command tx timeout [ 158.277795] Bluetooth: hci5: command tx timeout [ 158.341807] Bluetooth: hci6: command tx timeout [ 158.341848] Bluetooth: hci7: command tx timeout [ 211.938585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.947956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.952468] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.964470] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.970428] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.973853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.067946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.071025] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.073487] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.085470] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.094114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.100152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.289653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.293818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.296438] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.301618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.301921] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.320869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.336372] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.342049] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.345041] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.345415] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.358944] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.361345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.402772] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.419342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.443872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.461298] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.467290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.472231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.473421] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.482068] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.494322] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.496987] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.499912] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.508558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.552533] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.585711] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.656173] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.675414] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.679198] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.680723] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.690055] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.694404] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.707429] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.722802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.728491] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.734575] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.085781] Bluetooth: hci0: command tx timeout [ 214.148778] Bluetooth: hci1: command tx timeout [ 214.469754] Bluetooth: hci3: command tx timeout [ 214.470436] Bluetooth: hci2: command tx timeout [ 214.532848] Bluetooth: hci4: command tx timeout [ 214.660897] Bluetooth: hci5: command tx timeout [ 214.916804] Bluetooth: hci7: command tx timeout [ 214.981796] Bluetooth: hci6: command tx timeout [ 216.132861] Bluetooth: hci0: command tx timeout [ 216.196854] Bluetooth: hci1: command tx timeout [ 216.517068] Bluetooth: hci3: command tx timeout [ 216.517928] Bluetooth: hci2: command tx timeout [ 216.581144] Bluetooth: hci4: command tx timeout [ 216.709033] Bluetooth: hci5: command tx timeout [ 216.964784] Bluetooth: hci7: command tx timeout [ 217.028745] Bluetooth: hci6: command tx timeout [ 218.180804] Bluetooth: hci0: command tx timeout [ 218.245753] Bluetooth: hci1: command tx timeout [ 218.565840] Bluetooth: hci3: command tx timeout [ 218.566314] Bluetooth: hci2: command tx timeout [ 218.629743] Bluetooth: hci4: command tx timeout [ 218.757961] Bluetooth: hci5: command tx timeout [ 219.013178] Bluetooth: hci7: command tx timeout [ 219.077068] Bluetooth: hci6: command tx timeout [ 220.230787] Bluetooth: hci0: command tx timeout [ 220.292829] Bluetooth: hci1: command tx timeout [ 220.612960] Bluetooth: hci3: command tx timeout [ 220.613110] Bluetooth: hci2: command tx timeout [ 220.677779] Bluetooth: hci4: command tx timeout [ 220.806844] Bluetooth: hci5: command tx timeout [ 221.060753] Bluetooth: hci7: command tx timeout [ 221.124962] Bluetooth: hci6: command tx timeout [ 274.453606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.459143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.463309] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.470027] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.476549] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.479558] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.576602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.580053] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.582450] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.591617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.598139] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.600928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.610801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.620454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.630121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.650531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.657484] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.661393] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.663914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.683071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.703306] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.752010] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.756486] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.764541] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.803025] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.855379] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.875269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.879174] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.901401] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.912241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.921222] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.924003] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.952228] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.970622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.976000] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.976363] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.991916] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.994904] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.999376] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.001454] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.027288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.031070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.045242] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.058651] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.068221] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.072170] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.109864] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.113297] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.548793] Bluetooth: hci0: command tx timeout [ 276.676875] Bluetooth: hci1: command tx timeout [ 276.740803] Bluetooth: hci2: command tx timeout [ 276.932772] Bluetooth: hci3: command tx timeout [ 277.060792] Bluetooth: hci4: command tx timeout [ 277.124765] Bluetooth: hci5: command tx timeout [ 277.188830] Bluetooth: hci6: command tx timeout [ 277.252744] Bluetooth: hci7: command tx timeout [ 278.596783] Bluetooth: hci0: command tx timeout [ 278.724795] Bluetooth: hci1: command tx timeout [ 278.790702] Bluetooth: hci2: command tx timeout [ 278.980762] Bluetooth: hci3: command tx timeout [ 279.108746] Bluetooth: hci4: command tx timeout [ 279.172991] Bluetooth: hci5: command tx timeout [ 279.236756] Bluetooth: hci6: command tx timeout [ 279.301690] Bluetooth: hci7: command tx timeout [ 280.644817] Bluetooth: hci0: command tx timeout [ 280.772849] Bluetooth: hci1: command tx timeout [ 280.837825] Bluetooth: hci2: command tx timeout [ 281.028854] Bluetooth: hci3: command tx timeout [ 281.157717] Bluetooth: hci4: command tx timeout [ 281.220833] Bluetooth: hci5: command tx timeout [ 281.284736] Bluetooth: hci6: command tx timeout [ 281.348750] Bluetooth: hci7: command tx timeout [ 282.692768] Bluetooth: hci0: command tx timeout [ 282.821049] Bluetooth: hci1: command tx timeout [ 282.884855] Bluetooth: hci2: command tx timeout [ 283.076837] Bluetooth: hci3: command tx timeout [ 283.206222] Bluetooth: hci4: command tx timeout [ 283.268860] Bluetooth: hci5: command tx timeout [ 283.332869] Bluetooth: hci6: command tx timeout [ 283.396820] Bluetooth: hci7: command tx timeout [ 333.356145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.357114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.849275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.850245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.779910] [ 334.780251] ====================================================== [ 334.781070] WARNING: possible circular locking dependency detected [ 334.781870] 6.13.0-next-20250128 #1 Not tainted [ 334.782484] ------------------------------------------------------ [ 334.783285] kworker/u8:0/11 is trying to acquire lock: [ 334.783963] ffffffff8621d9a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.785469] [ 334.785469] but task is already holding lock: [ 334.786208] ffff88802c8b0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 334.787489] [ 334.787489] which lock already depends on the new lock. [ 334.787489] [ 334.788735] [ 334.788735] the existing dependency chain (in reverse order) is: [ 334.789641] [ 334.789641] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 334.790456] __mutex_lock+0x13d/0xb50 [ 334.791038] wiphy_register+0x1b2e/0x25d0 [ 334.791656] ieee80211_register_hw+0x23a4/0x3d60 [ 334.792321] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 334.794016] init_mac80211_hwsim+0x389/0x870 [ 334.795502] do_one_initcall+0xf9/0x640 [ 334.796581] kernel_init_freeable+0x53d/0x7a0 [ 334.798278] kernel_init+0x1e/0x2d0 [ 334.799134] ret_from_fork+0x48/0x80 [ 334.800102] ret_from_fork_asm+0x1a/0x30 [ 334.801179] [ 334.801179] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 334.802422] __lock_acquire+0x29fd/0x4580 [ 334.803075] lock_acquire+0x19b/0x520 [ 334.803645] __mutex_lock+0x13d/0xb50 [ 334.804219] unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.805005] unregister_netdevice_queue+0x224/0x2e0 [ 334.805697] _cfg80211_unregister_wdev+0x57b/0x700 [ 334.806398] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 334.807092] ieee80211_unregister_hw+0x55/0x3a0 [ 334.807770] hwsim_exit_net+0x3a0/0x730 [ 334.808364] ops_exit_list+0xb3/0x180 [ 334.808932] cleanup_net+0x546/0xad0 [ 334.809488] process_one_work+0x8ee/0x1a10 [ 334.810142] worker_thread+0x674/0xe70 [ 334.810746] kthread+0x3ab/0x720 [ 334.811273] ret_from_fork+0x48/0x80 [ 334.811807] ret_from_fork_asm+0x1a/0x30 [ 334.812435] [ 334.812435] other info that might help us debug this: [ 334.812435] [ 334.813383] Possible unsafe locking scenario: [ 334.813383] [ 334.814116] CPU0 CPU1 [ 334.814680] ---- ---- [ 334.815280] lock(&rdev->wiphy.mtx); [ 334.815816] lock(rtnl_mutex); [ 334.816587] lock(&rdev->wiphy.mtx); [ 334.817406] lock(rtnl_mutex); [ 334.817874] [ 334.817874] *** DEADLOCK *** [ 334.817874] [ 334.818625] 4 locks held by kworker/u8:0/11: [ 334.819212] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 334.820583] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 334.821896] #2: ffffffff862119d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 334.823114] #3: ffff88802c8b0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 334.824493] [ 334.824493] stack backtrace: [ 334.825070] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250128 #1 [ 334.825129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 334.825164] Workqueue: netns cleanup_net [ 334.825228] Call Trace: [ 334.825244] [ 334.825262] dump_stack_lvl+0xca/0x120 [ 334.825351] print_circular_bug+0x47b/0x750 [ 334.825424] check_noncircular+0x2e9/0x3c0 [ 334.825490] ? __pfx_check_noncircular+0x10/0x10 [ 334.825557] ? hlock_class+0x4e/0x130 [ 334.825603] ? srso_return_thunk+0x5/0x5f [ 334.825690] ? mark_lock+0xac/0xed0 [ 334.825752] ? srso_return_thunk+0x5/0x5f [ 334.825842] ? lockdep_lock+0xba/0x1b0 [ 334.825932] ? __pfx_lockdep_lock+0x10/0x10 [ 334.826030] __lock_acquire+0x29fd/0x4580 [ 334.826115] ? __pfx___lock_acquire+0x10/0x10 [ 334.826183] ? lock_release+0x20f/0x6f0 [ 334.826253] ? __pfx_lock_release+0x10/0x10 [ 334.826320] ? srso_return_thunk+0x5/0x5f [ 334.826415] lock_acquire+0x19b/0x520 [ 334.826484] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.826562] ? __pfx_lock_acquire+0x10/0x10 [ 334.826636] ? srso_return_thunk+0x5/0x5f [ 334.826724] ? lock_is_held_type+0x9e/0x120 [ 334.826813] ? srso_return_thunk+0x5/0x5f [ 334.826906] __mutex_lock+0x13d/0xb50 [ 334.826991] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.827063] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.827138] ? srso_return_thunk+0x5/0x5f [ 334.827226] ? synchronize_rcu_expedited+0x38a/0x420 [ 334.827294] ? __pfx___mutex_lock+0x10/0x10 [ 334.827381] ? srso_return_thunk+0x5/0x5f [ 334.827472] ? srso_return_thunk+0x5/0x5f [ 334.827560] ? kasan_quarantine_put+0x84/0x1e0 [ 334.827656] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 334.827712] ? srso_return_thunk+0x5/0x5f [ 334.827806] unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.827879] ? __virt_addr_valid+0x2e8/0x5d0 [ 334.827964] ? __pfx_lock_release+0x10/0x10 [ 334.828035] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 334.828110] ? find_held_lock+0x2c/0x110 [ 334.828202] ? srso_return_thunk+0x5/0x5f [ 334.828298] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 334.828394] ? srso_return_thunk+0x5/0x5f [ 334.828494] ? lock_release+0x20f/0x6f0 [ 334.828566] ? __pfx_lock_release+0x10/0x10 [ 334.828634] ? srso_return_thunk+0x5/0x5f [ 334.828722] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 334.828799] ? srso_return_thunk+0x5/0x5f [ 334.828894] unregister_netdevice_queue+0x224/0x2e0 [ 334.828964] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 334.829034] ? up_write+0x195/0x520 [ 334.829122] _cfg80211_unregister_wdev+0x57b/0x700 [ 334.829205] ? srso_return_thunk+0x5/0x5f [ 334.829301] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 334.829363] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 334.829425] ? trace_contention_end+0x2e/0x120 [ 334.829510] ieee80211_unregister_hw+0x55/0x3a0 [ 334.829581] hwsim_exit_net+0x3a0/0x730 [ 334.829648] ? __pfx_hwsim_exit_net+0x10/0x10 [ 334.829712] ? srso_return_thunk+0x5/0x5f [ 334.829802] ? netdev_run_todo+0x788/0x1040 [ 334.829877] ? srso_return_thunk+0x5/0x5f [ 334.829970] ? __pfx_hwsim_exit_net+0x10/0x10 [ 334.830037] ops_exit_list+0xb3/0x180 [ 334.830104] cleanup_net+0x546/0xad0 [ 334.830177] ? __pfx_cleanup_net+0x10/0x10 [ 334.830262] process_one_work+0x8ee/0x1a10 [ 334.830366] ? __pfx_lock_acquire+0x10/0x10 [ 334.830439] ? __pfx_process_one_work+0x10/0x10 [ 334.830531] ? srso_return_thunk+0x5/0x5f [ 334.830621] ? move_linked_works+0x172/0x270 [ 334.830692] ? srso_return_thunk+0x5/0x5f [ 334.830779] ? assign_work+0x196/0x240 [ 334.830872] worker_thread+0x674/0xe70 [ 334.830964] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 334.831046] ? __pfx_worker_thread+0x10/0x10 [ 334.831142] kthread+0x3ab/0x720 [ 334.831224] ? __pfx_kthread+0x10/0x10 [ 334.831306] ? srso_return_thunk+0x5/0x5f [ 334.831396] ? finish_task_switch.isra.0+0x206/0x840 [ 334.831476] ? __pfx_kthread+0x10/0x10 [ 334.831564] ret_from_fork+0x48/0x80 [ 334.831613] ? __pfx_kthread+0x10/0x10 [ 334.831696] ret_from_fork_asm+0x1a/0x30 [ 334.831804] [ 336.786793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.789363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.795305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.803177] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.806134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.810810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.858386] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.863000] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.865003] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.878262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.882962] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 336.885032] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.933305] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.944338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.946355] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.951155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.953245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.954051] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.957834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.960551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.962875] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.967935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.969734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.975407] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.987278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.991434] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.996993] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.997104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.000942] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.003946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.009960] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.012011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.018849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.024798] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.026913] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.028758] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.040353] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.044029] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.047377] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.057062] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.064411] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.066396] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.067905] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.076003] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.103853] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.105378] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.114265] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.115883] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.884983] Bluetooth: hci0: command tx timeout [ 338.948743] Bluetooth: hci1: command tx timeout [ 339.076938] Bluetooth: hci3: command tx timeout [ 339.076957] Bluetooth: hci2: command tx timeout [ 339.142024] Bluetooth: hci4: command tx timeout [ 339.205809] Bluetooth: hci5: command tx timeout [ 339.206694] Bluetooth: hci7: command tx timeout [ 339.207198] Bluetooth: hci6: command tx timeout [ 340.932733] Bluetooth: hci0: command tx timeout [ 340.996762] Bluetooth: hci1: command tx timeout [ 341.124691] Bluetooth: hci3: command tx timeout [ 341.125694] Bluetooth: hci2: command tx timeout [ 341.189217] Bluetooth: hci4: command tx timeout [ 341.252783] Bluetooth: hci7: command tx timeout [ 341.253254] Bluetooth: hci6: command tx timeout [ 341.253806] Bluetooth: hci5: command tx timeout [ 342.980755] Bluetooth: hci0: command tx timeout [ 343.044798] Bluetooth: hci1: command tx timeout [ 343.174690] Bluetooth: hci2: command tx timeout [ 343.174908] Bluetooth: hci3: command tx timeout [ 343.238852] Bluetooth: hci4: command tx timeout [ 343.301586] Bluetooth: hci5: command tx timeout [ 343.301608] Bluetooth: hci6: command tx timeout [ 343.301667] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 04:03:18 Registers: info registers vcpu 0 RAX=ffff88806ce00000 RBX=0000000000000000 RCX=ffffffff84a8f9d7 RDX=ffffed100d9c6c53 RSI=0000000000000004 RDI=ffffffff814b1cca RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000000 R9 =ffffed100d9c6c52 R10=ffff88806ce36293 R11=ffff88800e6b4140 R12=ffffffff864044d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a9097e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f498f517638 CR3=000000000b704000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=da3d5c019b7a95a624431910ffd66672 XMM02=00000000000fd9c85d82995fcda31112 XMM03=0000000000133778ee7587d5db12e8e3 XMM04=97dd70efbb70d00700000000000ae988 XMM05=ebfae20747c011c5000000000014fbf8 XMM06=9f165a4fe6c971ad0000000000137708 XMM07=711fbe8126c5d3440000000000137600 XMM08=ee7587d5db12e8e300000000000fda20 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f415 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095decc8 R8 =0000000000000000 R9 =ffffed1001344046 R10=0000000000000001 R11=7228203023203e2d R12=000000000000000a R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f400 RIP=ffffffff8283f46d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055debcd7c0d1 CR3=00000000154d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=000000000000000100005608031f6000 XMM05=00000000000000000000000000000000 XMM06=000056080319daa00000000400000002 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000002000000000000000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000