Warning: Permanently added '[localhost]:17723' (ECDSA) to the list of known hosts. 2025/01/29 07:37:17 fuzzer started 2025/01/29 07:37:17 dialing manager at localhost:40187 syzkaller login: [ 74.827773] cgroup: Unknown subsys name 'net' [ 74.920389] cgroup: Unknown subsys name 'cpuset' [ 74.955621] cgroup: Unknown subsys name 'rlimit' [ 82.830674] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/29 07:37:43 syscalls: 2217 2025/01/29 07:37:43 code coverage: enabled 2025/01/29 07:37:43 comparison tracing: enabled 2025/01/29 07:37:43 extra coverage: enabled 2025/01/29 07:37:43 setuid sandbox: enabled 2025/01/29 07:37:43 namespace sandbox: enabled 2025/01/29 07:37:43 Android sandbox: enabled 2025/01/29 07:37:43 fault injection: enabled 2025/01/29 07:37:43 leak checking: enabled 2025/01/29 07:37:43 net packet injection: enabled 2025/01/29 07:37:43 net device setup: enabled 2025/01/29 07:37:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 07:37:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 07:37:43 USB emulation: enabled 2025/01/29 07:37:43 hci packet injection: enabled 2025/01/29 07:37:43 wifi device emulation: enabled 2025/01/29 07:37:43 802.15.4 emulation: enabled 2025/01/29 07:37:43 fetching corpus: 50, signal 16887/18467 (executing program) 2025/01/29 07:37:43 fetching corpus: 100, signal 25192/27911 (executing program) 2025/01/29 07:37:43 fetching corpus: 150, signal 28362/32177 (executing program) 2025/01/29 07:37:43 fetching corpus: 200, signal 30391/35241 (executing program) 2025/01/29 07:37:44 fetching corpus: 250, signal 35184/40636 (executing program) 2025/01/29 07:37:44 fetching corpus: 300, signal 36514/42853 (executing program) 2025/01/29 07:37:44 fetching corpus: 350, signal 39531/46402 (executing program) 2025/01/29 07:37:44 fetching corpus: 400, signal 41576/48962 (executing program) 2025/01/29 07:37:44 fetching corpus: 450, signal 43160/51098 (executing program) 2025/01/29 07:37:44 fetching corpus: 500, signal 44040/52630 (executing program) 2025/01/29 07:37:44 fetching corpus: 550, signal 45326/54388 (executing program) 2025/01/29 07:37:45 fetching corpus: 600, signal 46878/56280 (executing program) 2025/01/29 07:37:45 fetching corpus: 650, signal 47904/57769 (executing program) 2025/01/29 07:37:45 fetching corpus: 700, signal 49106/59288 (executing program) 2025/01/29 07:37:45 fetching corpus: 750, signal 50299/60766 (executing program) 2025/01/29 07:37:45 fetching corpus: 800, signal 52358/62664 (executing program) 2025/01/29 07:37:45 fetching corpus: 850, signal 52930/63626 (executing program) 2025/01/29 07:37:45 fetching corpus: 900, signal 53491/64554 (executing program) 2025/01/29 07:37:45 fetching corpus: 950, signal 54042/65422 (executing program) 2025/01/29 07:37:45 fetching corpus: 1000, signal 54401/66171 (executing program) 2025/01/29 07:37:46 fetching corpus: 1050, signal 55531/67307 (executing program) 2025/01/29 07:37:46 fetching corpus: 1100, signal 55993/68089 (executing program) 2025/01/29 07:37:46 fetching corpus: 1150, signal 56336/68801 (executing program) 2025/01/29 07:37:46 fetching corpus: 1200, signal 56863/69563 (executing program) 2025/01/29 07:37:46 fetching corpus: 1250, signal 57516/70323 (executing program) 2025/01/29 07:37:46 fetching corpus: 1300, signal 58255/71114 (executing program) 2025/01/29 07:37:46 fetching corpus: 1350, signal 58869/71796 (executing program) 2025/01/29 07:37:46 fetching corpus: 1355, signal 58877/72306 (executing program) 2025/01/29 07:37:46 fetching corpus: 1355, signal 58877/72774 (executing program) 2025/01/29 07:37:46 fetching corpus: 1355, signal 58877/73274 (executing program) 2025/01/29 07:37:46 fetching corpus: 1355, signal 58877/73746 (executing program) 2025/01/29 07:37:46 fetching corpus: 1355, signal 58877/74217 (executing program) 2025/01/29 07:37:46 fetching corpus: 1355, signal 58877/74708 (executing program) 2025/01/29 07:37:46 fetching corpus: 1355, signal 58877/75185 (executing program) 2025/01/29 07:37:46 fetching corpus: 1355, signal 58877/75652 (executing program) 2025/01/29 07:37:46 fetching corpus: 1355, signal 58877/76140 (executing program) 2025/01/29 07:37:46 fetching corpus: 1355, signal 58877/76643 (executing program) 2025/01/29 07:37:46 fetching corpus: 1355, signal 58877/77115 (executing program) 2025/01/29 07:37:46 fetching corpus: 1355, signal 58877/77455 (executing program) 2025/01/29 07:37:46 fetching corpus: 1355, signal 58877/77455 (executing program) 2025/01/29 07:37:49 starting 8 fuzzer processes 07:37:49 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x24f5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r3 = syz_open_dev$vcsu(&(0x7f0000000280), 0x9, 0x32241) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2c8f6a524a48"}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r7, 0x10, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) faccessat(r8, &(0x7f0000000840)='./file0\x00', 0x44) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000000) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r9, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xbf48e4aa4c0242dc}, 0x4000040) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 07:37:49 executing program 1: sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1589a02b, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17d}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008010}, 0x80) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x880) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x12c, 0x0, 0x908, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2fb6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x952}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xed1f}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x430}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x4845) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x44804}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x2f, 0xbc, 0x7e, 0x6, 0x10, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x40, 0x9, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x4b, 0x1000, 0x21, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x80, 0x200, 0x7}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@broadcast, @in6=@ipv4={""/10, ""/2, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000008c0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'gretap0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x7, 0x40, 0x5, 0x6, {{0x1b, 0x4, 0x1, 0x2f, 0x6c, 0x68, 0x0, 0xff, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@cipso={0x86, 0x18, 0x2, [{0x6, 0x10, "12bd9da9284035fb91ca83f9a9e3"}, {0x5, 0x2}]}, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x87, [@multicast2, @loopback, @multicast2, @multicast2, @private=0xa010101, @empty, @empty]}, @rr={0x7, 0xb, 0x77, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x16}]}, @generic={0x83, 0x8, "1cea2534f7dd"}, @lsrr={0x83, 0x7, 0x94, [@remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'tunl0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x7, 0x10, 0x80000001, 0x9d6, {{0x23, 0x4, 0x1, 0x6, 0x8c, 0x66, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010100, {[@cipso={0x86, 0x41, 0xffffffffffffffff, [{0x1, 0x10, "42d21bb31b0e0efb92776bfdfc3d"}, {0x7, 0x7, "f77f75cacb"}, {0x5, 0x8, "16d71016ea29"}, {0x5, 0xe, "8712d89aa6325098a4e6d6de"}, {0x2, 0xc, "7fe35e4858b09976c55c"}, {0x6, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x1a, 0x1, 0x0, [{@broadcast}, {@private=0xa010101, 0x35a9}, {@multicast2, 0x6}, {@empty, 0x80000000}, {@empty, 0xfffffff8}, {@broadcast, 0x3}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x3, 0x1, 0x3, @loopback, @mcast2, 0x8000, 0x700, 0xc3aa, 0x4}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000cc0)={0x0, @xdp={0x2c, 0x0, 0x0, 0xa}, @generic={0x8, "c38a9e330ec1805c055bf78f10b4"}, @hci={0x1f, 0x3, 0x3}, 0x1, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000000c80)='veth0_to_team\x00', 0x0, 0x5, 0x6}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000dc0)={'ip6gre0\x00', &(0x7f0000000d40)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0xa4, 0x1, 0x4, @mcast1, @remote, 0x8, 0x7800, 0x5, 0x4}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000e00)={@private, @loopback, 0x0}, &(0x7f0000000e40)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000e80)={0x80c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x1, 0x6, 0x8, 0x9}, {0x3d9, 0xb, 0x4d, 0x1}, {0x3, 0x9c, 0x5, 0x5}, {0x1ff, 0x2, 0x5, 0x2}, {0x3, 0x0, 0x3, 0x6}, {0xa3, 0x1, 0x34, 0x2}, {0x2b6, 0x8, 0xff, 0x75}, {0x1, 0x1, 0xaa, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf874}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3, 0x7f, 0x8, 0x7}, {0x9, 0xeb, 0x9, 0x7fffffff}, {0x1f, 0x51, 0x3f, 0x8}, {0x7ff, 0xc3, 0x61, 0x3}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0xf8, 0x2, 0x3f}, {0x4ae9, 0x2, 0x20, 0x4}, {0xc2, 0x80, 0xf4, 0xf1a0}, {0x4, 0x8e, 0x3, 0x7}, {0x2, 0x0, 0x5, 0x2}]}}}]}}, {{0x8, 0x1, r9}, {0xcc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x80c}, 0x1, 0x0, 0x0, 0x40000}, 0x31c9d09c204b1528) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x20000000) r12 = accept(0xffffffffffffffff, &(0x7f0000001840)=@nfc_llcp, &(0x7f00000018c0)=0x80) sendmsg$BATADV_CMD_TP_METER_CANCEL(r12, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x58, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8ead}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044}, 0x4041) 07:37:49 executing program 4: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x5, 0x9cd, 0x0, 0x8, 0x200, 0x5, 0x5, 0x7, 0x5, 0x10001, 0x7fff, 0x200, 0x0, 0x6cb}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x7, 0x7f}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xfff) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000000100)={0x7, 0x1, 0x1}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000180)) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x7f, 0x30b000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x5, 0x2002) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x40, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@nodevmap}, {@cache_none}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x3}}, {@access_any}, {@dfltuid}, {@access_user}, {@version_9p2000}], [{@fowner_gt}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfsroot}, {@seclabel}, {@subj_type={'subj_type', 0x3d, '(\\(/}/'}}, {@smackfshat={'smackfshat', 0x3d, '@'}}, {@seclabel}]}}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000440)=0xffffffffffffffff) ioctl$VT_WAITACTIVE(r3, 0x5607) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000004c0)={{r5}, 0x6, 0x7}) r6 = accept$inet6(r3, 0x0, &(0x7f0000000500)) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000540)="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") ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x198, 0x23, 0x20, 0x70bd29, 0x25dfdbfd, {0x17}, [@generic="46ea8f6031f7bb3484dd224dfaa395fb1bdd9ef73a7ebea0c9a5f720fa9c", @nested={0x161, 0x55, 0x0, 0x1, [@generic="323375bf676781478ec2a26586a72e30a5d3ec6718e0fc6b5996979614b37da7ba4e52841cfd0c759f7222b99602df0463a4980d20bdd8e8babed5b914d069fdf4a1ea98d2fd73aeb04903fe57751dfbd8ee8cda3e92b147e0ac8ba817c87a9497314de6a44b066f21f1db092e9c0658f9830c7068a980ed7b8114b84f152bb77e1b5f766e0dc8b49fbfbdcce2f69aa921afc46cca002f8ffeba79d5c145a9222de6062dbcf866bce82963d26c0801a664f3af020761dfd211d8706e54d2d4bb7a9ad159", @typed={0x8, 0x24, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0xc, 0x78, 0x0, 0x0, @u64=0x7}, @generic="c2850e186ba61c6f0307786b7340fcb9ed5124b1e8d9e9c3da94ae8cb22adff719f1a9746f2d510cb36f2967bf60a865694d0c1f3f20922cd3d9a15d4a336958ab2095c79bca2711eca45e346dcb1f061d86447877e10e341b45f0831e23bcf2259cec6f7409702d9e78119d", @typed={0x4, 0x28}, @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="d7b67ae52983ac26bc056a1e0a"]}]}, 0x198}}, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x124, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3dd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcaf3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x842}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x48}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) 07:37:49 executing program 2: timer_create(0x1, &(0x7f0000000000)={0x0, 0x15, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_delete(0x0) timer_gettime(r0, &(0x7f00000000c0)) timer_delete(0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000140)={{r1, r2+10000000}, {0x77359400}}, &(0x7f0000000180)) timer_getoverrun(r0) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) timer_create(0x5, &(0x7f0000000300)={0x0, 0x1, 0x0, @thr={&(0x7f0000000200)="7bb00aff99ffd6cf8e15a026e8f1fee2c661b5c91a7c1931732e50178d2a01dd36cb55280ace305b25e8c71dfd059c86833d0129e26cd72358096ce13c2a7b290edac7d09ceccc65d381cccb55cf5e65cc0a5509a1ea3caff554ddbb39f8a126bc926c1ef6bebde90252abae67a0c5854416bae6e0a9fbf95eba2c9d88f862a80c0392d791cf431d065eb104", &(0x7f00000002c0)="0c8d12117698c9100bf5a438dea5e23d8379c412f7e15aee4e34b134eba94a64a1351c6f78b2466209979bdae8f1339d6d8a2f9de91ac96f"}}, &(0x7f0000000340)=0x0) timer_settime(r3, 0x0, &(0x7f0000000380), 0x0) timer_create(0x6, &(0x7f0000000540)={0x0, 0x24, 0x0, @thr={&(0x7f00000003c0)="ec9ebc4f5ce2633b3355c0fe3150262351b736268b8de19beaf2cdb94a7bf6585977f5c53b4119ca30b354b19dc379cb64dd86d1303928cc5dc9f3d5d59ae126cbcded0936f723002508561ea8a0242045543719e19a3bf0ae5bec73b45de89906963521d05a5aadcde5d6adcaa702d41927209fd0b425239732c9771ee72ab87e440e00f02df50d922227fa1a66e8ef29851c6c4bc9058431b6cdaef145951a6a98cb833f916c83f24769485b92974097f4bcf779846896004f65ec71ec944fc1717f442433bb786b7ba44f1321f5a2448bf93afc83", &(0x7f00000004c0)="3a39fd9fdedf977c1a71c18ddf634793d00c452d184b84d7e8a16709be64e02e8073dbc70777f3ec9d4ac4a4eed2200ea33fa48545c02df75295ba358431e57316e600b79cea19519e9a3ba19a54a307424262a0fbb67373e2fae8cbb88f0891663704c6edf561ffdb13b1f6c5aaa1c51d500374e8d2d083"}}, &(0x7f0000000580)=0x0) timer_delete(r4) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000600)={{r5, r6+60000000}}, &(0x7f0000000640)) timer_create(0x6, &(0x7f0000000680)={0x0, 0x28}, &(0x7f00000006c0)=0x0) timer_settime(r7, 0x0, &(0x7f0000000700)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000740)) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f00000007c0)={{0x0, 0x3938700}, {r8, r9+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000880)) 07:37:49 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000000080)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/36, 0x24}], 0x5, &(0x7f0000000440)=""/170, 0xaa}, 0x8}, {{&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/33, 0x21}, {&(0x7f0000000600)=""/97, 0x61}], 0x3, &(0x7f00000006c0)=""/85, 0x55}, 0x5f0a}, {{&(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/98, 0x62}], 0x1, &(0x7f0000000880)=""/214, 0xd6}, 0xffffc14f}, {{&(0x7f0000000980)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/27, 0x1b}, {&(0x7f0000000a40)=""/242, 0xf2}, {&(0x7f0000000b40)=""/190, 0xbe}], 0x3, &(0x7f0000000c40)=""/236, 0xec}, 0x1}, {{&(0x7f0000000d40)=@l2, 0x80, &(0x7f0000001100)=[{&(0x7f0000000dc0)=""/90, 0x5a}, {&(0x7f0000000e40)=""/68, 0x44}, {&(0x7f0000000ec0)=""/219, 0xdb}, {&(0x7f0000000fc0)=""/33, 0x21}, {&(0x7f0000001000)=""/220, 0xdc}], 0x5}}, {{&(0x7f0000001180)=@phonet, 0x80, &(0x7f0000001400)=[{&(0x7f0000001200)=""/181, 0xb5}, {&(0x7f00000012c0)=""/45, 0x2d}, {&(0x7f0000001300)=""/172, 0xac}, {&(0x7f00000013c0)=""/23, 0x17}], 0x4}, 0x7}, {{&(0x7f0000001440)=@ax25={{0x3, @null}, [@rose, @null, @remote, @null, @rose, @netrom, @bcast, @bcast]}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/96, 0x60}, {&(0x7f0000002540)=""/50, 0x32}, {&(0x7f0000002580)=""/186, 0xba}, {&(0x7f0000002640)=""/79, 0x4f}, {&(0x7f00000026c0)=""/217, 0xd9}], 0x6, &(0x7f0000002840)=""/186, 0xba}, 0x7}], 0x7, 0x61, &(0x7f0000002ac0)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000002b80)={'syztnl0\x00', &(0x7f0000002b00)={'sit0\x00', 0x0, 0x4, 0x81, 0x80, 0x40, 0x12, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x10, 0x8000, 0x6, 0x7fffffff}}) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000002bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002c00)=0x14, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000002d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002c40)={0xe0, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40890}, 0x41) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r8, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)={0x68, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000030c0)={'sit0\x00', &(0x7f0000003040)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x2, 0x0, 0x1a, @mcast1, @mcast1, 0x80, 0x0, 0x401, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000003240)={'syztnl1\x00', &(0x7f00000031c0)={'syztnl2\x00', r6, 0x2f, 0x3, 0x14, 0x8001, 0x62, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x1, 0x7, 0x10000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000003300)={'ip6_vti0\x00', &(0x7f0000003280)={'syztnl2\x00', r4, 0x4, 0x20, 0x22, 0x4, 0x13, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x7, 0x3, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000033c0)={'syztnl1\x00', &(0x7f0000003340)={'ip6_vti0\x00', r6, 0x2f, 0x1f, 0x5, 0x9, 0x40, @dev={0xfe, 0x80, '\x00', 0x30}, @local, 0x80, 0x700, 0x14e2966f, 0x5}}) getpeername$packet(r5, &(0x7f0000003400)={0x11, 0x0, 0x0}, &(0x7f0000003440)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000003480)={@dev, 0x0}, &(0x7f00000034c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000003700)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003500)={0x1b0, r0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x57bdb9a44a0f7674}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20008800}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000037c0)={'ip6tnl0\x00', &(0x7f0000003740)={'syztnl1\x00', r3, 0x2f, 0x7, 0x4, 0x9, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8000, 0x2, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000003880)={'ip6gre0\x00', &(0x7f0000003800)={'ip6tnl0\x00', r15, 0x29, 0x8c, 0x94, 0x646, 0x1, @local, @empty, 0x47, 0x7, 0x3, 0x9}}) r16 = accept4$unix(r1, &(0x7f00000038c0), &(0x7f0000003940)=0x6e, 0x0) setsockopt(r16, 0x1, 0xfffffff9, &(0x7f0000003980)="dd2058930c8e7658691945a15796b84f3cf8b2e5cb7b2e89d5ad476997d68ae5f40edf2d88a8dc", 0x27) 07:37:49 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r0, 0x12) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x10000]}, 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb4d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) fsetxattr$security_capability(r1, &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0xba, 0x3}]}, 0xc, 0x3) getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x114, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x8}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffa}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x1c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x7}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x78}, {0x6, 0x11, 0xf087}, {0x8, 0x15, 0x9}}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x10000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000005c0), &(0x7f0000000600)=0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x309000, 0x0) getsockopt$inet_buf(r5, 0x0, 0x2a, &(0x7f00000006c0)=""/140, &(0x7f0000000780)=0x8c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x2010, r5, 0x0) accept$packet(r4, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1b0, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) fadvise64(r1, 0x100, 0xffffffff, 0x2) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdb4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26b}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) [ 106.127294] audit: type=1400 audit(1738136269.386:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:37:49 executing program 6: getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x7fff, 0x101, 0x9]}, &(0x7f0000000100)=0x44) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_serviced\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xc0, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x8800) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x610000, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000380)=0x2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000003c0)) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000400)={0x2, "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"}) read(r0, &(0x7f0000000640)=""/4096, 0x1000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000001640)={0x1, 'veth1_to_batadv\x00', {}, 0x6}) bind$inet(r0, &(0x7f0000001680)={0x2, 0x4e22, @loopback}, 0x10) r2 = syz_mount_image$tmpfs(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0x7fffffff, 0x3, &(0x7f0000001940)=[{&(0x7f0000001740)="4d8b0c46ef7e3c717c173a8cf8ce919819a241f35e37db60c493a8ebec62a14116290ffae416ba0138d66a0b985c0aa4909a2f982d68236be63c48f191476ac187949673b30fa0cb51b459d8121a4a768917f1ccabac01986ea119ef8e1d9f135b91206a234098fc16bba04b0ed70b1cee47e99ad135204f72be3b7bb90b877c30ef2e50f0c84a410431fe568a4a137bd94fd8", 0x93, 0x81}, {&(0x7f0000001800)="d9bc77958eb189d6e3cc52003167b28f67ec5a8399ba5bb52229f650f7295a72fdc931eddd9b079ff10e88008dbd3a6424d3b00bf26ee13aa72ecc064347240afed0379de1aae7e36b762e77ed614bc203550eb36d444154c19795c9a164bb000c5643722220d9e87fb0089b8c54b3bcab50187da2796553ca7ad4e45e6283a70685bb7fd4da84337ab0e212938892f79ad66b0f9f982f2829e353821e93de1ad9f48e46164438b02096cb04d2634f9c7fc158f6bb24328b972f9999037781d325386f4363d2d9db1ce3e5259084fabc16972954f95b0d970e2239ca20d2181aa33fa8af36f6aca9fc3e496104c78a6448c1ddcbfc4a", 0xf6, 0x9}, {&(0x7f0000001900)="deafdd409d8a66e3c6266dade984569af0f076bf1ffdf837cc67d1ea3b31b9acf843ccf829e1f32b", 0x28}], 0x890, &(0x7f00000019c0)={[{@huge_within_size}, {@huge_always}, {@huge_always}], [{@obj_user={'obj_user', 0x3d, '*-\\$![#\\*'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@obj_type={'obj_type', 0x3d, 'blkio.bfq.io_serviced\x00'}}, {@fsname}]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = openat$cgroup_procs(r0, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001ac0)={0x0}, &(0x7f0000001b00)=0xc) fcntl$setown(r3, 0x8, r4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000001b40)={0x1, 0x1}, 0x8) utime(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x9, 0x3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xbe0}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x40001) 07:37:49 executing program 7: setuid(0xee01) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r1) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000000c0)=0x7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'ip6tnl0\x00', @multicast}) linkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r2, 0x8000, 0x1) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast1, @in=@multicast2}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe4, 0x0, 0x428, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x44805}, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000500)={0x2, 0x1, 0x8000}, 0xc) mount$9p_rdma(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x22400, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x3}}, {@common=@loose}, {@timeout={'timeout', 0x3d, 0x7fffffff}}, {@timeout={'timeout', 0x3d, 0x5}}], [{@uid_eq={'uid', 0x3d, r0}}, {@hash}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x39, 0x38, 0x66, 0x39, 0x63, 0x36, 0x30], 0x2d, [0x62, 0x63, 0x36, 0x38], 0x2d, [0x30, 0x36, 0x36, 0x38], 0x2d, [0x39, 0x38, 0x26, 0x37], 0x2d, [0x36, 0x30, 0x33, 0x64, 0x63, 0x32, 0x65, 0x34]}}}, {@uid_gt={'uid>', r0}}, {@smackfshat={'smackfshat', 0x3d, 'ip6tnl0\x00'}}, {@appraise}]}}) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14, 0x180000) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f00000007c0)={'ip6gre0\x00'}) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000bc0)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) [ 107.591904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.604759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.608997] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.612037] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.619924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.622711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.624947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.630696] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.633053] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.634763] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.639000] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 107.642493] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 107.645849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.647939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 107.650521] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.650652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 107.652983] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 107.655815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.657896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.662636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.664796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 107.670047] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 107.672165] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.675743] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.678910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.685711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.687865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.691474] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 107.694053] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.698903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.698933] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 107.701475] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 107.705684] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 107.711292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.725266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.727319] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 107.730967] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.733448] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.749422] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 107.751818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.759413] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 107.769492] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 107.788983] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 107.794167] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 107.800331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.821511] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 107.862509] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 107.864727] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 109.817952] Bluetooth: hci5: command tx timeout [ 109.819417] Bluetooth: hci0: command tx timeout [ 109.819993] Bluetooth: hci2: command tx timeout [ 109.882167] Bluetooth: hci3: command tx timeout [ 109.882278] Bluetooth: hci6: command tx timeout [ 109.882789] Bluetooth: hci1: command tx timeout [ 109.945218] Bluetooth: hci7: command tx timeout [ 109.946381] Bluetooth: hci4: command tx timeout [ 111.865272] Bluetooth: hci0: command tx timeout [ 111.866417] Bluetooth: hci2: command tx timeout [ 111.866446] Bluetooth: hci5: command tx timeout [ 111.931130] Bluetooth: hci3: command tx timeout [ 111.931225] Bluetooth: hci6: command tx timeout [ 111.931661] Bluetooth: hci1: command tx timeout [ 111.993570] Bluetooth: hci4: command tx timeout [ 111.994448] Bluetooth: hci7: command tx timeout [ 113.913491] Bluetooth: hci0: command tx timeout [ 113.913682] Bluetooth: hci5: command tx timeout [ 113.913977] Bluetooth: hci2: command tx timeout [ 113.977211] Bluetooth: hci6: command tx timeout [ 113.977730] Bluetooth: hci1: command tx timeout [ 113.977774] Bluetooth: hci3: command tx timeout [ 114.041552] Bluetooth: hci7: command tx timeout [ 114.041591] Bluetooth: hci4: command tx timeout [ 115.961254] Bluetooth: hci2: command tx timeout [ 115.962270] Bluetooth: hci5: command tx timeout [ 115.962697] Bluetooth: hci0: command tx timeout [ 116.025299] Bluetooth: hci6: command tx timeout [ 116.025873] Bluetooth: hci1: command tx timeout [ 116.026560] Bluetooth: hci3: command tx timeout [ 116.089292] Bluetooth: hci7: command tx timeout [ 116.089818] Bluetooth: hci4: command tx timeout [ 169.995973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.999308] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.001528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.025033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.029151] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.031643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.086978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.088692] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.090830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.093481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.096534] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.098738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.106669] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.109519] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.112211] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.114965] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.119240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.127970] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.129892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.133277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.141480] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.166263] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.183590] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.185784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.206505] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.231316] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.233614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.245827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.268378] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.270571] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 170.274544] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 170.278540] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 170.286196] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 170.292434] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 170.300424] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 170.301475] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.318710] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 170.318776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 170.335844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 170.338185] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 170.357536] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 170.363439] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 170.391010] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 170.413658] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 170.421653] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 170.424631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.435545] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 170.441521] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 172.090135] Bluetooth: hci0: command tx timeout [ 172.153182] Bluetooth: hci3: command tx timeout [ 172.217312] Bluetooth: hci1: command tx timeout [ 172.282255] Bluetooth: hci2: command tx timeout [ 172.346144] Bluetooth: hci4: command tx timeout [ 172.410137] Bluetooth: hci7: command tx timeout [ 172.474531] Bluetooth: hci5: command tx timeout [ 172.537116] Bluetooth: hci6: command tx timeout [ 174.137137] Bluetooth: hci0: command tx timeout [ 174.201167] Bluetooth: hci3: command tx timeout [ 174.265296] Bluetooth: hci1: command tx timeout [ 174.329149] Bluetooth: hci2: command tx timeout [ 174.395174] Bluetooth: hci4: command tx timeout [ 174.458304] Bluetooth: hci7: command tx timeout [ 174.521214] Bluetooth: hci5: command tx timeout [ 174.585121] Bluetooth: hci6: command tx timeout [ 176.187157] Bluetooth: hci0: command tx timeout [ 176.249229] Bluetooth: hci3: command tx timeout [ 176.315116] Bluetooth: hci1: command tx timeout [ 176.377373] Bluetooth: hci2: command tx timeout [ 176.441371] Bluetooth: hci4: command tx timeout [ 176.506122] Bluetooth: hci7: command tx timeout [ 176.569707] Bluetooth: hci5: command tx timeout [ 176.634090] Bluetooth: hci6: command tx timeout [ 178.233222] Bluetooth: hci0: command tx timeout [ 178.298133] Bluetooth: hci3: command tx timeout [ 178.362339] Bluetooth: hci1: command tx timeout [ 178.425623] Bluetooth: hci2: command tx timeout [ 178.489381] Bluetooth: hci4: command tx timeout [ 178.553158] Bluetooth: hci7: command tx timeout [ 178.617376] Bluetooth: hci5: command tx timeout [ 178.681213] Bluetooth: hci6: command tx timeout [ 231.816333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.821559] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.824708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.831645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.836864] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 231.838986] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.939895] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.942412] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.950511] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.958579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.968797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 231.973395] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.082419] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.094331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.097977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.109445] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.122545] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.126494] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.206639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.218962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.227172] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.231219] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.235398] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.242820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.245829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.253602] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.255931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.261365] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 232.264414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.267355] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.376542] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 232.391410] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 232.396978] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 232.453681] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 232.459599] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 232.465755] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 232.885942] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.890453] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.892914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.901683] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 232.910309] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 232.912174] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 232.912463] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.918229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 232.921802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.970338] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 233.015644] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 233.017632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 233.913188] Bluetooth: hci0: command tx timeout [ 234.041182] Bluetooth: hci1: command tx timeout [ 234.169323] Bluetooth: hci2: command tx timeout [ 234.361181] Bluetooth: hci3: command tx timeout [ 234.553138] Bluetooth: hci7: command tx timeout [ 234.554338] Bluetooth: hci4: command tx timeout [ 235.001202] Bluetooth: hci5: command tx timeout [ 235.065284] Bluetooth: hci6: command tx timeout [ 235.963103] Bluetooth: hci0: command tx timeout [ 236.089425] Bluetooth: hci1: command tx timeout [ 236.217163] Bluetooth: hci2: command tx timeout [ 236.409131] Bluetooth: hci3: command tx timeout [ 236.601278] Bluetooth: hci7: command tx timeout [ 236.604112] Bluetooth: hci4: command tx timeout [ 237.049151] Bluetooth: hci5: command tx timeout [ 237.113178] Bluetooth: hci6: command tx timeout [ 238.009157] Bluetooth: hci0: command tx timeout [ 238.137280] Bluetooth: hci1: command tx timeout [ 238.266089] Bluetooth: hci2: command tx timeout [ 238.457499] Bluetooth: hci3: command tx timeout [ 238.649862] Bluetooth: hci4: command tx timeout [ 238.649891] Bluetooth: hci7: command tx timeout [ 239.097434] Bluetooth: hci5: command tx timeout [ 239.161149] Bluetooth: hci6: command tx timeout [ 240.058693] Bluetooth: hci0: command tx timeout [ 240.187118] Bluetooth: hci1: command tx timeout [ 240.314145] Bluetooth: hci2: command tx timeout [ 240.506153] Bluetooth: hci3: command tx timeout [ 240.697143] Bluetooth: hci4: command tx timeout [ 240.697340] Bluetooth: hci7: command tx timeout [ 241.146191] Bluetooth: hci5: command tx timeout [ 241.210082] Bluetooth: hci6: command tx timeout [ 292.718689] [ 292.718921] ====================================================== [ 292.719496] WARNING: possible circular locking dependency detected [ 292.720092] 6.13.0-next-20250128 #1 Not tainted [ 292.720536] ------------------------------------------------------ [ 292.723245] kworker/u8:1/64 is trying to acquire lock: [ 292.725171] ffffffff8621d9a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 292.726154] [ 292.726154] but task is already holding lock: [ 292.726700] ffff88803d2c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 292.727632] [ 292.727632] which lock already depends on the new lock. [ 292.727632] [ 292.728372] [ 292.728372] the existing dependency chain (in reverse order) is: [ 292.729058] [ 292.729058] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 292.729681] __mutex_lock+0x13d/0xb50 [ 292.730131] wiphy_register+0x1b2e/0x25d0 [ 292.730620] ieee80211_register_hw+0x23a4/0x3d60 [ 292.731149] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 292.731702] init_mac80211_hwsim+0x389/0x870 [ 292.732233] do_one_initcall+0xf9/0x640 [ 292.732714] kernel_init_freeable+0x53d/0x7a0 [ 292.733239] kernel_init+0x1e/0x2d0 [ 292.733663] ret_from_fork+0x48/0x80 [ 292.734091] ret_from_fork_asm+0x1a/0x30 [ 292.734570] [ 292.734570] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 292.735159] __lock_acquire+0x29fd/0x4580 [ 292.735633] lock_acquire+0x19b/0x520 [ 292.736086] __mutex_lock+0x13d/0xb50 [ 292.736537] unregister_netdevice_many_notify+0x1612/0x1c80 [ 292.737136] unregister_netdevice_queue+0x224/0x2e0 [ 292.737675] _cfg80211_unregister_wdev+0x57b/0x700 [ 292.738229] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 292.738773] ieee80211_unregister_hw+0x55/0x3a0 [ 292.739284] hwsim_exit_net+0x3a0/0x730 [ 292.739753] ops_exit_list+0xb3/0x180 [ 292.740194] cleanup_net+0x546/0xad0 [ 292.740628] process_one_work+0x8ee/0x1a10 [ 292.741127] worker_thread+0x674/0xe70 [ 292.741596] kthread+0x3ab/0x720 [ 292.742013] ret_from_fork+0x48/0x80 [ 292.742441] ret_from_fork_asm+0x1a/0x30 [ 292.742916] [ 292.742916] other info that might help us debug this: [ 292.742916] [ 292.743646] Possible unsafe locking scenario: [ 292.743646] [ 292.744210] CPU0 CPU1 [ 292.744646] ---- ---- [ 292.745090] lock(&rdev->wiphy.mtx); [ 292.745478] lock(rtnl_mutex); [ 292.746040] lock(&rdev->wiphy.mtx); [ 292.746645] lock(rtnl_mutex); [ 292.746993] [ 292.746993] *** DEADLOCK *** [ 292.746993] [ 292.747525] 4 locks held by kworker/u8:1/64: [ 292.747946] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 292.748889] #1: ffff88800f0dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 292.749794] #2: ffffffff862119d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 292.750642] #3: ffff88803d2c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 292.751588] [ 292.751588] stack backtrace: [ 292.752015] CPU: 0 UID: 0 PID: 64 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250128 #1 [ 292.752055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 292.752079] Workqueue: netns cleanup_net [ 292.752123] Call Trace: [ 292.752134] [ 292.752146] dump_stack_lvl+0xca/0x120 [ 292.752208] print_circular_bug+0x47b/0x750 [ 292.752256] check_noncircular+0x2e9/0x3c0 [ 292.752301] ? __pfx_check_noncircular+0x10/0x10 [ 292.752346] ? hlock_class+0x4e/0x130 [ 292.752378] ? srso_return_thunk+0x5/0x5f [ 292.752437] ? mark_lock+0xac/0xed0 [ 292.752483] ? lockdep_lock+0xba/0x1b0 [ 292.752544] ? __pfx_lockdep_lock+0x10/0x10 [ 292.752610] __lock_acquire+0x29fd/0x4580 [ 292.752666] ? __pfx___lock_acquire+0x10/0x10 [ 292.752712] ? lock_release+0x20f/0x6f0 [ 292.752759] ? __pfx_lock_release+0x10/0x10 [ 292.752804] ? srso_return_thunk+0x5/0x5f [ 292.752868] lock_acquire+0x19b/0x520 [ 292.752913] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 292.752965] ? __pfx_lock_acquire+0x10/0x10 [ 292.753012] ? __pfx_lock_release+0x10/0x10 [ 292.753058] ? __pfx_try_to_wake_up+0x10/0x10 [ 292.753104] ? srso_return_thunk+0x5/0x5f [ 292.753163] ? lock_is_held_type+0x9e/0x120 [ 292.753222] ? srso_return_thunk+0x5/0x5f [ 292.753284] __mutex_lock+0x13d/0xb50 [ 292.753340] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 292.753390] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 292.753439] ? srso_return_thunk+0x5/0x5f [ 292.753501] ? synchronize_rcu_expedited+0x38a/0x420 [ 292.753549] ? __pfx___mutex_lock+0x10/0x10 [ 292.753607] ? srso_return_thunk+0x5/0x5f [ 292.753670] ? srso_return_thunk+0x5/0x5f [ 292.753729] ? kasan_quarantine_put+0x84/0x1e0 [ 292.753796] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 292.753836] ? srso_return_thunk+0x5/0x5f [ 292.753901] unregister_netdevice_many_notify+0x1612/0x1c80 [ 292.753949] ? __virt_addr_valid+0x2e8/0x5d0 [ 292.754008] ? __pfx_lock_release+0x10/0x10 [ 292.754057] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 292.754108] ? find_held_lock+0x2c/0x110 [ 292.754172] ? srso_return_thunk+0x5/0x5f [ 292.754234] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 292.754303] ? srso_return_thunk+0x5/0x5f [ 292.754363] ? lock_release+0x20f/0x6f0 [ 292.754410] ? __pfx_lock_release+0x10/0x10 [ 292.754455] ? srso_return_thunk+0x5/0x5f [ 292.754514] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 292.754564] ? srso_return_thunk+0x5/0x5f [ 292.754629] unregister_netdevice_queue+0x224/0x2e0 [ 292.754675] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 292.754721] ? up_write+0x195/0x520 [ 292.754780] _cfg80211_unregister_wdev+0x57b/0x700 [ 292.754835] ? srso_return_thunk+0x5/0x5f [ 292.754898] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 292.754939] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 292.754980] ? srso_return_thunk+0x5/0x5f [ 292.755039] ? srso_return_thunk+0x5/0x5f [ 292.755097] ? synchronize_rcu+0x1ff/0x260 [ 292.755142] ieee80211_unregister_hw+0x55/0x3a0 [ 292.755190] hwsim_exit_net+0x3a0/0x730 [ 292.755234] ? __pfx_hwsim_exit_net+0x10/0x10 [ 292.755277] ? srso_return_thunk+0x5/0x5f [ 292.755336] ? netdev_run_todo+0x788/0x1040 [ 292.755388] ? __pfx_hwsim_exit_net+0x10/0x10 [ 292.755433] ops_exit_list+0xb3/0x180 [ 292.755478] cleanup_net+0x546/0xad0 [ 292.755525] ? __pfx_cleanup_net+0x10/0x10 [ 292.755582] process_one_work+0x8ee/0x1a10 [ 292.755651] ? __pfx_lock_acquire+0x10/0x10 [ 292.755698] ? __pfx_process_one_work+0x10/0x10 [ 292.755770] ? srso_return_thunk+0x5/0x5f [ 292.755829] ? move_linked_works+0x172/0x270 [ 292.755876] ? srso_return_thunk+0x5/0x5f [ 292.755935] ? assign_work+0x196/0x240 [ 292.755996] worker_thread+0x674/0xe70 [ 292.756057] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 292.756112] ? srso_return_thunk+0x5/0x5f [ 292.756171] ? __pfx_worker_thread+0x10/0x10 [ 292.756234] kthread+0x3ab/0x720 [ 292.756288] ? __pfx_kthread+0x10/0x10 [ 292.756343] ? srso_return_thunk+0x5/0x5f [ 292.756402] ? finish_task_switch.isra.0+0x206/0x840 [ 292.756456] ? __pfx_kthread+0x10/0x10 [ 292.756513] ret_from_fork+0x48/0x80 [ 292.756546] ? __pfx_kthread+0x10/0x10 [ 292.756602] ret_from_fork_asm+0x1a/0x30 [ 292.756672] [ 294.657801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.663861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.665342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.666778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.668203] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.669109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.720045] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.722261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.723357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.725790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.727552] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 294.732337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.801119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.802750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.807862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.813926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.816364] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 294.817656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.851264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.854365] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.856378] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.856685] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.859030] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.864313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.867850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.878302] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 294.890396] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.897710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.902353] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 294.904541] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.928446] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.929793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.933399] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.937793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.939721] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.941290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.952872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.957406] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.961614] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 294.965424] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 294.967423] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.969723] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 295.036650] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 295.057091] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 295.060938] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 295.076405] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 295.098405] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 295.105476] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.697100] Bluetooth: hci0: command tx timeout [ 296.761081] Bluetooth: hci1: command tx timeout [ 296.889058] Bluetooth: hci2: command tx timeout [ 296.954031] Bluetooth: hci4: command tx timeout [ 297.017055] Bluetooth: hci3: command tx timeout [ 297.081106] Bluetooth: hci6: command tx timeout [ 297.081579] Bluetooth: hci5: command tx timeout [ 297.210135] Bluetooth: hci7: command tx timeout [ 298.746316] Bluetooth: hci0: command tx timeout [ 298.810082] Bluetooth: hci1: command tx timeout [ 298.938076] Bluetooth: hci2: command tx timeout [ 299.001071] Bluetooth: hci4: command tx timeout [ 299.065070] Bluetooth: hci3: command tx timeout [ 299.129137] Bluetooth: hci6: command tx timeout [ 299.129679] Bluetooth: hci5: command tx timeout [ 299.258118] Bluetooth: hci7: command tx timeout [ 300.793059] Bluetooth: hci0: command tx timeout [ 300.857072] Bluetooth: hci1: command tx timeout [ 300.986050] Bluetooth: hci2: command tx timeout [ 301.049069] Bluetooth: hci4: command tx timeout [ 301.113243] Bluetooth: hci3: command tx timeout [ 301.177107] Bluetooth: hci5: command tx timeout [ 301.177598] Bluetooth: hci6: command tx timeout [ 301.305171] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 07:40:56 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f415 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800f0ded20 R8 =0000000000000000 R9 =ffffed100175a046 R10=000000000000002d R11=2d2d2d2d2d2d2d2d R12=000000000000002d R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f400 RIP=ffffffff8283f46d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005644258d7510 CR3=000000000d394000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c0007332c0000000c0007332a0 XMM04=000000c0007ed1c0000000c0004fb0c0 XMM05=000000c0007ed3c0000000c0007ed240 XMM06=000000c0007ed600000000c0007ed500 XMM07=000000c00029aa20000000c0007ed740 XMM08=000000c0007cd980000000c0007ccf00 XMM09=000000c000b4bfc0000000c000b4be80 XMM10=000000c000e74440000000c000e74140 XMM11=000000c000e75280000000c000e745c0 XMM12=000000c000e75480000000c000e75340 XMM13=000000c000f68c00000000c000ef9240 XMM14=000000c000f68e40000000c000f68d00 XMM15=000000c0009f9510000000c000f69040 info registers vcpu 1 RAX=00000000000402ad RBX=0000000000000001 RCX=ffffffff84a8f9d7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1cca RBP=dffffc0000000000 RSP=ffff88800970fe68 R8 =0000000000000001 R9 =ffffed100d9e6c52 R10=ffff88806cf36293 R11=0000000000000001 R12=ffffffff864044d0 R13=1ffff110012e1fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a9097e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c1369721b0 CR3=000000000d394000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041847cb600000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000